syntax = "proto3";

package ocsf.v1_2_0.events.network;

option go_package = "/ocsf/v1_2_0/events/network";

option java_package = "com.your.project.generated.ocsf.v1_2_0.events.network";

option java_multiple_files = true;

import "ocsf/v1_2_0/events/network/enums/enums.proto";

import "ocsf/v1_2_0/objects/objects.proto";

// Event: network
// Event UID: 9
// URL: https://schema.ocsf.io/1.2.0/classes/email_activity
message EmailActivity {
	ocsf.v1_2_0.events.network.enums.EMAIL_ACTIVITY_ACTION_ID action_id = 1; // Caption: Action ID; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.EMAIL_ACTIVITY_DISPOSITION_ID disposition_id = 2; // Profile: security_control; Caption: Disposition ID;
	ocsf.v1_2_0.events.network.enums.EMAIL_ACTIVITY_ACTIVITY_ID activity_id = 3; // Caption: Activity ID;
	ocsf.v1_2_0.objects.Metadata metadata = 4; // Caption: Metadata;
	ocsf.v1_2_0.objects.Object unmapped = 5; // Caption: Unmapped Data;
	string status_code = 6; // Caption: Status Code;
	string disposition = 7; // Profile: security_control; Caption: Disposition;
	int32 attempt = 8; // Caption: Attempt;
	string class_name = 9; // Caption: Class;
	ocsf.v1_2_0.events.network.enums.EMAIL_ACTIVITY_CLASS_UID class_uid = 10; // Caption: Class ID;
	int64 end_time = 11; // Caption: End Time;
	string category_name = 12; // Caption: Category;
	string activity_name = 13; // Caption: Activity;
	int32 count = 14; // Caption: Count;
	repeated ocsf.v1_2_0.objects.Attack attacks = 15; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 16; // Caption: Authorization Information; Profile: security_control;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 17; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.objects.EmailAuth email_auth = 18; // Caption: Email Authentication;
	string status = 19; // Caption: Status;
	ocsf.v1_2_0.objects.Api api = 20; // Caption: API Details; Profile: cloud;
	int32 timezone_offset = 21; // Caption: Timezone Offset;
	repeated ocsf.v1_2_0.objects.Observable observables = 22; // Caption: Observables;
	string type_name = 23; // Caption: Type Name;
	ocsf.v1_2_0.events.network.enums.EMAIL_ACTIVITY_STATUS_ID status_id = 24; // Caption: Status ID;
	ocsf.v1_2_0.objects.Email email = 25; // Caption: Email;
	string direction = 26; // Caption: Direction;
	string action = 27; // Caption: Action; Profile: security_control;
	string status_detail = 28; // Caption: Status Details;
	string raw_data = 29; // Caption: Raw Data;
	string severity = 30; // Caption: Severity;
	ocsf.v1_2_0.events.network.enums.EMAIL_ACTIVITY_TYPE_UID type_uid = 31; // Caption: Type ID;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 32; // Caption: Enrichments;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 33; // Caption: Destination Endpoint;
	string smtp_hello = 34; // Caption: SMTP Hello;
	int64 time = 35; // Caption: Event Time;
	int32 duration = 36; // Caption: Duration;
	string message = 37; // Caption: Message;
	repeated ocsf.v1_2_0.objects.Malware malware = 38; // Caption: Malware; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.EMAIL_ACTIVITY_DIRECTION_ID direction_id = 39; // Caption: Direction ID;
	ocsf.v1_2_0.events.network.enums.EMAIL_ACTIVITY_SEVERITY_ID severity_id = 40; // Caption: Severity ID;
	ocsf.v1_2_0.objects.Cloud cloud = 41; // Caption: Cloud; Profile: cloud;
	string banner = 42; // Caption: SMTP Banner;
	int64 start_time = 43; // Caption: Start Time;
	ocsf.v1_2_0.objects.Device device = 44; // Caption: Device; Profile: host;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 45; // Caption: Source Endpoint;
	ocsf.v1_2_0.objects.Actor actor = 46; // Caption: Actor; Profile: host;
	ocsf.v1_2_0.events.network.enums.EMAIL_ACTIVITY_CATEGORY_UID category_uid = 47; // Caption: Category ID;
}

// URL: https://schema.ocsf.io/1.2.0/classes/email_file_activity
// Event: network
// Event UID: 11
message EmailFileActivity {
	int32 timezone_offset = 1; // Caption: Timezone Offset;
	ocsf.v1_2_0.objects.Device device = 2; // Caption: Device; Profile: host;
	ocsf.v1_2_0.events.network.enums.EMAIL_FILE_ACTIVITY_ACTION_ID action_id = 3; // Caption: Action ID; Profile: security_control;
	int32 duration = 4; // Caption: Duration;
	ocsf.v1_2_0.objects.Cloud cloud = 5; // Caption: Cloud; Profile: cloud;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 6; // Caption: Enrichments;
	string raw_data = 7; // Caption: Raw Data;
	string activity_name = 8; // Caption: Activity;
	ocsf.v1_2_0.events.network.enums.EMAIL_FILE_ACTIVITY_SEVERITY_ID severity_id = 9; // Caption: Severity ID;
	ocsf.v1_2_0.objects.Actor actor = 10; // Caption: Actor; Profile: host;
	ocsf.v1_2_0.events.network.enums.EMAIL_FILE_ACTIVITY_TYPE_UID type_uid = 11; // Caption: Type ID;
	ocsf.v1_2_0.events.network.enums.EMAIL_FILE_ACTIVITY_CATEGORY_UID category_uid = 12; // Caption: Category ID;
	ocsf.v1_2_0.objects.File file = 13; // Caption: File;
	repeated ocsf.v1_2_0.objects.Attack attacks = 14; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	ocsf.v1_2_0.objects.Api api = 15; // Caption: API Details; Profile: cloud;
	string message = 16; // Caption: Message;
	string class_name = 17; // Caption: Class;
	int64 time = 18; // Caption: Event Time;
	string category_name = 19; // Caption: Category;
	ocsf.v1_2_0.events.network.enums.EMAIL_FILE_ACTIVITY_DISPOSITION_ID disposition_id = 20; // Caption: Disposition ID; Profile: security_control;
	ocsf.v1_2_0.objects.Metadata metadata = 21; // Caption: Metadata;
	string status_detail = 22; // Caption: Status Details;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 23; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.EMAIL_FILE_ACTIVITY_ACTIVITY_ID activity_id = 24; // Caption: Activity ID;
	string email_uid = 25; // Caption: Email UID;
	ocsf.v1_2_0.events.network.enums.EMAIL_FILE_ACTIVITY_CLASS_UID class_uid = 26; // Caption: Class ID;
	string status_code = 27; // Caption: Status Code;
	string type_name = 28; // Caption: Type Name;
	string severity = 29; // Caption: Severity;
	ocsf.v1_2_0.objects.Object unmapped = 30; // Caption: Unmapped Data;
	repeated ocsf.v1_2_0.objects.Malware malware = 31; // Caption: Malware; Profile: security_control;
	string disposition = 32; // Caption: Disposition; Profile: security_control;
	int32 count = 33; // Caption: Count;
	repeated ocsf.v1_2_0.objects.Observable observables = 34; // Caption: Observables;
	ocsf.v1_2_0.events.network.enums.EMAIL_FILE_ACTIVITY_STATUS_ID status_id = 35; // Caption: Status ID;
	string status = 36; // Caption: Status;
	int64 end_time = 37; // Caption: End Time;
	int64 start_time = 38; // Caption: Start Time;
	string action = 39; // Caption: Action; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 40; // Caption: Authorization Information; Profile: security_control;
}

// Event: network
// Event UID: 8
// URL: https://schema.ocsf.io/1.2.0/classes/ftp_activity
message FtpActivity {
	string app_name = 1; // Caption: Application Name;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 2; // Caption: Source Endpoint;
	int64 time = 3; // Caption: Event Time;
	int32 duration = 4; // Caption: Duration;
	ocsf.v1_2_0.events.network.enums.FTP_ACTIVITY_CLASS_UID class_uid = 5; // Caption: Class ID;
	ocsf.v1_2_0.objects.Actor actor = 6; // Caption: Actor; Profile: host;
	ocsf.v1_2_0.objects.Cloud cloud = 7; // Caption: Cloud; Profile: cloud;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 8; // Caption: Proxy HTTP Response; Profile: network_proxy;
	string disposition = 9; // Caption: Disposition; Profile: security_control;
	ocsf.v1_2_0.objects.Metadata metadata = 10; // Caption: Metadata;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 11; // Caption: Traffic;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 12; // Caption: Connection Info;
	int32 timezone_offset = 13; // Caption: Timezone Offset;
	ocsf.v1_2_0.events.network.enums.FTP_ACTIVITY_SEVERITY_ID severity_id = 14; // Caption: Severity ID;
	string type = 15; // Caption: Type;
	int64 end_time = 16; // Caption: End Time;
	string category_name = 17; // Caption: Category;
	ocsf.v1_2_0.events.network.enums.FTP_ACTIVITY_STATUS_ID status_id = 18; // Caption: Status ID;
	ocsf.v1_2_0.objects.NetworkProxy proxy = 19; // Caption: Proxy;
	ocsf.v1_2_0.objects.Object unmapped = 20; // Caption: Unmapped Data;
	string status_detail = 21; // Caption: Status Details;
	ocsf.v1_2_0.events.network.enums.FTP_ACTIVITY_DISPOSITION_ID disposition_id = 22; // Caption: Disposition ID; Profile: security_control;
	repeated int32 codes = 23; // Caption: Response Codes;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 24; // Caption: Enrichments;
	ocsf.v1_2_0.objects.Tls proxy_tls = 25; // Caption: Proxy TLS; Profile: network_proxy;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 26; // Caption: Proxy HTTP Request; Profile: network_proxy;
	string message = 27; // Caption: Message;
	int32 count = 28; // Caption: Count;
	string raw_data = 29; // Caption: Raw Data;
	ocsf.v1_2_0.events.network.enums.FTP_ACTIVITY_TYPE_UID type_uid = 30; // Caption: Type ID;
	string status = 31; // Caption: Status;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 32; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.objects.Tls tls = 33; // Caption: TLS;
	ocsf.v1_2_0.objects.Device device = 34; // Caption: Device; Profile: host;
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 35; // Caption: Proxy Endpoint; Profile: network_proxy;
	string name = 36; // Caption: Name;
	string type_name = 37; // Caption: Type Name;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 38; // Caption: Destination Endpoint;
	string activity_name = 39; // Caption: Activity;
	string status_code = 40; // Caption: Status Code;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 41; // Profile: load_balancer; Caption: Load Balancer;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 42; // Caption: Proxy Traffic; Profile: network_proxy;
	string class_name = 43; // Caption: Class;
	string action = 44; // Caption: Action; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Observable observables = 45; // Caption: Observables;
	repeated ocsf.v1_2_0.objects.Attack attacks = 46; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	string command = 47; // Caption: Command;
	string severity = 48; // Caption: Severity;
	ocsf.v1_2_0.objects.Api api = 49; // Caption: API Details; Profile: cloud;
	int32 port = 50; // Caption: Port;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 51; // Caption: Authorization Information; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Malware malware = 52; // Caption: Malware; Profile: security_control;
	ocsf.v1_2_0.objects.File file = 53; // Caption: File;
	ocsf.v1_2_0.events.network.enums.FTP_ACTIVITY_ACTIVITY_ID activity_id = 54; // Caption: Activity ID;
	repeated string command_responses = 55; // Caption: Command Responses;
	int64 start_time = 56; // Caption: Start Time;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 57; // Caption: Proxy Connection Info; Profile: network_proxy;
	ocsf.v1_2_0.events.network.enums.FTP_ACTIVITY_CATEGORY_UID category_uid = 58; // Caption: Category ID;
	ocsf.v1_2_0.events.network.enums.FTP_ACTIVITY_ACTION_ID action_id = 59; // Caption: Action ID; Profile: security_control;
}

// Event: network
// Event UID: 7
// URL: https://schema.ocsf.io/1.2.0/classes/ssh_activity
message SshActivity {
	ocsf.v1_2_0.events.network.enums.SSH_ACTIVITY_ACTIVITY_ID activity_id = 1; // Caption: Activity ID;
	string protocol_ver = 2; // Caption: Protocol Version;
	string raw_data = 3; // Caption: Raw Data;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 4; // Caption: Proxy Connection Info; Profile: network_proxy;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 5; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.objects.Metadata metadata = 6; // Caption: Metadata;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 7; // Caption: Proxy Traffic; Profile: network_proxy;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 8; // Caption: Destination Endpoint;
	int64 start_time = 9; // Caption: Start Time;
	ocsf.v1_2_0.events.network.enums.SSH_ACTIVITY_ACTION_ID action_id = 10; // Caption: Action ID; Profile: security_control;
	string severity = 11; // Caption: Severity;
	string activity_name = 12; // Caption: Activity;
	string disposition = 13; // Caption: Disposition; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 14; // Caption: Authorization Information; Profile: security_control;
	ocsf.v1_2_0.objects.Hassh server_hassh = 15; // Caption: Server HASSH;
	ocsf.v1_2_0.objects.Hassh client_hassh = 16; // Caption: Client HASSH;
	ocsf.v1_2_0.events.network.enums.SSH_ACTIVITY_AUTH_TYPE_ID auth_type_id = 17; // Caption: Authentication Type ID;
	ocsf.v1_2_0.objects.File file = 18; // Caption: File;
	string type_name = 19; // Caption: Type Name;
	ocsf.v1_2_0.events.network.enums.SSH_ACTIVITY_TYPE_UID type_uid = 20; // Caption: Type ID;
	string app_name = 21; // Caption: Application Name;
	ocsf.v1_2_0.objects.Cloud cloud = 22; // Caption: Cloud; Profile: cloud;
	ocsf.v1_2_0.events.network.enums.SSH_ACTIVITY_CATEGORY_UID category_uid = 23; // Caption: Category ID;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 24; // Caption: Load Balancer; Profile: load_balancer;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 25; // Caption: Traffic;
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 26; // Caption: Proxy Endpoint; Profile: network_proxy;
	string class_name = 27; // Caption: Class;
	ocsf.v1_2_0.objects.NetworkProxy proxy = 28; // Caption: Proxy;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 29; // Caption: Connection Info;
	ocsf.v1_2_0.objects.Object unmapped = 30; // Caption: Unmapped Data;
	repeated ocsf.v1_2_0.objects.Attack attacks = 31; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	string status = 32; // Caption: Status;
	string auth_type = 33; // Caption: Authentication Type;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 34; // Caption: Source Endpoint;
	int64 time = 35; // Caption: Event Time;
	int32 count = 36; // Caption: Count;
	ocsf.v1_2_0.objects.Device device = 37; // Caption: Device; Profile: host;
	string status_code = 38; // Caption: Status Code;
	string action = 39; // Caption: Action; Profile: security_control;
	int32 timezone_offset = 40; // Caption: Timezone Offset;
	repeated ocsf.v1_2_0.objects.Observable observables = 41; // Caption: Observables;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 42; // Caption: Proxy HTTP Request; Profile: network_proxy;
	int32 duration = 43; // Caption: Duration;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 44; // Caption: Enrichments;
	string status_detail = 45; // Caption: Status Details;
	string category_name = 46; // Caption: Category;
	ocsf.v1_2_0.objects.Tls tls = 47; // Caption: TLS;
	ocsf.v1_2_0.events.network.enums.SSH_ACTIVITY_CLASS_UID class_uid = 48; // Caption: Class ID;
	ocsf.v1_2_0.objects.Actor actor = 49; // Caption: Actor; Profile: host;
	ocsf.v1_2_0.objects.Tls proxy_tls = 50; // Caption: Proxy TLS; Profile: network_proxy;
	ocsf.v1_2_0.events.network.enums.SSH_ACTIVITY_SEVERITY_ID severity_id = 51; // Caption: Severity ID;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 52; // Caption: Proxy HTTP Response; Profile: network_proxy;
	ocsf.v1_2_0.events.network.enums.SSH_ACTIVITY_STATUS_ID status_id = 53; // Caption: Status ID;
	repeated ocsf.v1_2_0.objects.Malware malware = 54; // Caption: Malware; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.SSH_ACTIVITY_DISPOSITION_ID disposition_id = 55; // Caption: Disposition ID; Profile: security_control;
	int64 end_time = 56; // Caption: End Time;
	string message = 57; // Caption: Message;
	ocsf.v1_2_0.objects.Api api = 58; // Caption: API Details; Profile: cloud;
}

// Event: network
// Event UID: 12
// URL: https://schema.ocsf.io/1.2.0/classes/email_url_activity
message EmailUrlActivity {
	ocsf.v1_2_0.events.network.enums.EMAIL_URL_ACTIVITY_ACTIVITY_ID activity_id = 1; // Caption: Activity ID;
	int64 start_time = 2; // Caption: Start Time;
	int64 time = 3; // Caption: Event Time;
	string severity = 4; // Caption: Severity;
	ocsf.v1_2_0.events.network.enums.EMAIL_URL_ACTIVITY_ACTION_ID action_id = 5; // Caption: Action ID; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 6; // Caption: Authorization Information; Profile: security_control;
	string email_uid = 7; // Caption: Email UID;
	repeated ocsf.v1_2_0.objects.Malware malware = 8; // Caption: Malware; Profile: security_control;
	string activity_name = 9; // Caption: Activity;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 10; // Caption: Enrichments;
	string message = 11; // Caption: Message;
	ocsf.v1_2_0.objects.Actor actor = 12; // Caption: Actor; Profile: host;
	int32 timezone_offset = 13; // Caption: Timezone Offset;
	ocsf.v1_2_0.objects.Cloud cloud = 14; // Caption: Cloud; Profile: cloud;
	repeated ocsf.v1_2_0.objects.Observable observables = 15; // Caption: Observables;
	ocsf.v1_2_0.events.network.enums.EMAIL_URL_ACTIVITY_STATUS_ID status_id = 16; // Caption: Status ID;
	ocsf.v1_2_0.events.network.enums.EMAIL_URL_ACTIVITY_TYPE_UID type_uid = 17; // Caption: Type ID;
	repeated ocsf.v1_2_0.objects.Attack attacks = 18; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	string category_name = 19; // Caption: Category;
	ocsf.v1_2_0.events.network.enums.EMAIL_URL_ACTIVITY_CLASS_UID class_uid = 20; // Caption: Class ID;
	ocsf.v1_2_0.objects.Object unmapped = 21; // Caption: Unmapped Data;
	ocsf.v1_2_0.events.network.enums.EMAIL_URL_ACTIVITY_DISPOSITION_ID disposition_id = 22; // Caption: Disposition ID; Profile: security_control;
	ocsf.v1_2_0.objects.Device device = 23; // Caption: Device; Profile: host;
	ocsf.v1_2_0.objects.Metadata metadata = 24; // Caption: Metadata;
	string type_name = 25; // Caption: Type Name;
	ocsf.v1_2_0.objects.Api api = 26; // Caption: API Details; Profile: cloud;
	string class_name = 27; // Caption: Class;
	int32 duration = 28; // Caption: Duration;
	int32 count = 29; // Caption: Count;
	string status = 30; // Caption: Status;
	string raw_data = 31; // Caption: Raw Data;
	int64 end_time = 32; // Caption: End Time;
	ocsf.v1_2_0.objects.Url url = 33; // Caption: URL;
	string disposition = 34; // Caption: Disposition; Profile: security_control;
	string action = 35; // Caption: Action; Profile: security_control;
	string status_code = 36; // Caption: Status Code;
	ocsf.v1_2_0.events.network.enums.EMAIL_URL_ACTIVITY_CATEGORY_UID category_uid = 37; // Caption: Category ID;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 38; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.EMAIL_URL_ACTIVITY_SEVERITY_ID severity_id = 39; // Caption: Severity ID;
	string status_detail = 40; // Caption: Status Details;
}

// URL: https://schema.ocsf.io/1.2.0/classes/network
// Event: network
// Event UID: 0
message Network {
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 1; // Caption: Proxy Endpoint; Profile: network_proxy;
	int64 start_time = 2; // Caption: Start Time;
	ocsf.v1_2_0.objects.Object unmapped = 3; // Caption: Unmapped Data;
	string message = 4; // Caption: Message;
	string raw_data = 5; // Caption: Raw Data;
	repeated ocsf.v1_2_0.objects.Attack attacks = 6; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 7; // Caption: Proxy Connection Info; Profile: network_proxy;
	ocsf.v1_2_0.objects.Actor actor = 8; // Caption: Actor; Profile: host;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 9; // Caption: Source Endpoint;
	ocsf.v1_2_0.objects.Tls proxy_tls = 10; // Caption: Proxy TLS; Profile: network_proxy;
	string status = 11; // Caption: Status;
	string activity_name = 12; // Caption: Activity;
	int32 timezone_offset = 13; // Caption: Timezone Offset;
	ocsf.v1_2_0.objects.Cloud cloud = 14; // Caption: Cloud; Profile: cloud;
	string status_detail = 15; // Caption: Status Details;
	ocsf.v1_2_0.events.network.enums.NETWORK_SEVERITY_ID severity_id = 16; // Caption: Severity ID;
	ocsf.v1_2_0.events.network.enums.NETWORK_DISPOSITION_ID disposition_id = 17; // Caption: Disposition ID; Profile: security_control;
	string disposition = 18; // Caption: Disposition; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 19; // Caption: Authorization Information; Profile: security_control;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 20; // Caption: Proxy HTTP Response; Profile: network_proxy;
	ocsf.v1_2_0.events.network.enums.NETWORK_CATEGORY_UID category_uid = 21; // Caption: Category ID;
	int64 time = 22; // Caption: Event Time;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 23; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.NETWORK_ACTION_ID action_id = 24; // Caption: Action ID; Profile: security_control;
	string severity = 25; // Caption: Severity;
	ocsf.v1_2_0.objects.Metadata metadata = 26; // Caption: Metadata;
	string status_code = 27; // Caption: Status Code;
	repeated ocsf.v1_2_0.objects.Observable observables = 28; // Caption: Observables;
	string type_name = 29; // Caption: Type Name;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 30; // Caption: Load Balancer; Profile: load_balancer;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 31; // Caption: Proxy Traffic; Profile: network_proxy;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 32; // Caption: Destination Endpoint;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 33; // Profile: network_proxy; Caption: Proxy HTTP Request;
	int64 end_time = 34; // Caption: End Time;
	string category_name = 35; // Caption: Category;
	ocsf.v1_2_0.events.network.enums.NETWORK_ACTIVITY_ID activity_id = 36; // Caption: Activity ID;
	int32 duration = 37; // Caption: Duration;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 38; // Caption: Traffic;
	string action = 39; // Caption: Action; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 40; // Caption: Enrichments;
	ocsf.v1_2_0.events.network.enums.NETWORK_TYPE_UID type_uid = 41; // Caption: Type ID;
	ocsf.v1_2_0.objects.Api api = 42; // Profile: cloud; Caption: API Details;
	string class_name = 43; // Caption: Class;
	int32 count = 44; // Caption: Count;
	ocsf.v1_2_0.objects.NetworkProxy proxy = 45; // Caption: Proxy;
	string app_name = 46; // Caption: Application Name;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 47; // Caption: Connection Info;
	ocsf.v1_2_0.events.network.enums.NETWORK_STATUS_ID status_id = 48; // Caption: Status ID;
	repeated ocsf.v1_2_0.objects.Malware malware = 49; // Caption: Malware; Profile: security_control;
	ocsf.v1_2_0.objects.Tls tls = 50; // Caption: TLS;
	ocsf.v1_2_0.objects.Device device = 51; // Caption: Device; Profile: host;
	ocsf.v1_2_0.events.network.enums.NETWORK_CLASS_UID class_uid = 52; // Caption: Class ID;
}

// Event: network
// Event UID: 10
// URL: https://schema.ocsf.io/1.2.0/classes/network_file_activity
message NetworkFileActivity {
	ocsf.v1_2_0.objects.Cloud cloud = 1; // Caption: Cloud; Profile: cloud;
	int64 end_time = 2; // Caption: End Time;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 3; // Caption: Destination Endpoint;
	ocsf.v1_2_0.objects.Api api = 4; // Caption: API Details; Profile: cloud;
	ocsf.v1_2_0.events.network.enums.NETWORK_FILE_ACTIVITY_STATUS_ID status_id = 5; // Caption: Status ID;
	string severity = 6; // Caption: Severity;
	int32 count = 7; // Caption: Count;
	ocsf.v1_2_0.events.network.enums.NETWORK_FILE_ACTIVITY_CATEGORY_UID category_uid = 8; // Caption: Category ID;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 9; // Caption: Load Balancer; Profile: load_balancer;
	string category_name = 10; // Caption: Category;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 11; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 12; // Caption: Proxy HTTP Request; Profile: network_proxy;
	repeated ocsf.v1_2_0.objects.Observable observables = 13; // Caption: Observables;
	int64 expiration_time = 14; // Caption: Expiration Time;
	ocsf.v1_2_0.events.network.enums.NETWORK_FILE_ACTIVITY_TYPE_UID type_uid = 15; // Caption: Type ID;
	string app_name = 16; // Caption: Application Name;
	ocsf.v1_2_0.objects.Object unmapped = 17; // Caption: Unmapped Data;
	string activity_name = 18; // Caption: Activity;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 19; // Caption: Authorization Information; Profile: security_control;
	ocsf.v1_2_0.objects.File file = 20; // Caption: File;
	ocsf.v1_2_0.objects.Device device = 21; // Caption: Device; Profile: host;
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 22; // Caption: Proxy Endpoint; Profile: network_proxy;
	int64 start_time = 23; // Caption: Start Time;
	string class_name = 24; // Caption: Class;
	ocsf.v1_2_0.objects.Metadata metadata = 25; // Caption: Metadata;
	string status_code = 26; // Caption: Status Code;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 27; // Caption: Proxy HTTP Response; Profile: network_proxy;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 28; // Profile: network_proxy; Caption: Proxy Traffic;
	ocsf.v1_2_0.events.network.enums.NETWORK_FILE_ACTIVITY_ACTIVITY_ID activity_id = 29; // Caption: Activity ID;
	ocsf.v1_2_0.objects.Actor actor = 30; // Caption: Actor;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 31; // Caption: Enrichments;
	string message = 32; // Caption: Message;
	ocsf.v1_2_0.events.network.enums.NETWORK_FILE_ACTIVITY_DISPOSITION_ID disposition_id = 33; // Caption: Disposition ID; Profile: security_control;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 34; // Caption: Source Endpoint;
	ocsf.v1_2_0.events.network.enums.NETWORK_FILE_ACTIVITY_CLASS_UID class_uid = 35; // Caption: Class ID;
	string status = 36; // Caption: Status;
	ocsf.v1_2_0.events.network.enums.NETWORK_FILE_ACTIVITY_SEVERITY_ID severity_id = 37; // Caption: Severity ID;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 38; // Caption: Connection Info;
	int32 timezone_offset = 39; // Caption: Timezone Offset;
	string disposition = 40; // Caption: Disposition; Profile: security_control;
	string type_name = 41; // Caption: Type Name;
	string action = 42; // Profile: security_control; Caption: Action;
	ocsf.v1_2_0.objects.Tls tls = 43; // Caption: TLS;
	int64 time = 44; // Caption: Event Time;
	repeated ocsf.v1_2_0.objects.Attack attacks = 45; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	string status_detail = 46; // Caption: Status Details;
	ocsf.v1_2_0.events.network.enums.NETWORK_FILE_ACTIVITY_ACTION_ID action_id = 47; // Caption: Action ID; Profile: security_control;
	int32 duration = 48; // Caption: Duration;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 49; // Caption: Traffic;
	repeated ocsf.v1_2_0.objects.Malware malware = 50; // Caption: Malware; Profile: security_control;
	string raw_data = 51; // Caption: Raw Data;
	ocsf.v1_2_0.objects.NetworkProxy proxy = 52; // Caption: Proxy;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 53; // Caption: Proxy Connection Info; Profile: network_proxy;
	ocsf.v1_2_0.objects.Tls proxy_tls = 54; // Caption: Proxy TLS; Profile: network_proxy;
}

// Event: network
// Event UID: 2
// URL: https://schema.ocsf.io/1.2.0/classes/http_activity
message HttpActivity {
	string status = 1; // Caption: Status;
	ocsf.v1_2_0.events.network.enums.HTTP_ACTIVITY_STATUS_ID status_id = 2; // Caption: Status ID;
	repeated ocsf.v1_2_0.objects.Attack attacks = 3; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	string message = 4; // Caption: Message;
	int32 timezone_offset = 5; // Caption: Timezone Offset;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 6; // Caption: Proxy HTTP Response; Profile: network_proxy;
	string action = 7; // Caption: Action; Profile: security_control;
	repeated ocsf.v1_2_0.objects.HttpCookie http_cookies = 8; // Caption: HTTP Cookies;
	ocsf.v1_2_0.objects.HttpResponse http_response = 9; // Caption: HTTP Response;
	string raw_data = 10; // Caption: Raw Data;
	ocsf.v1_2_0.events.network.enums.HTTP_ACTIVITY_DISPOSITION_ID disposition_id = 11; // Caption: Disposition ID; Profile: security_control;
	string disposition = 12; // Caption: Disposition; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Malware malware = 13; // Caption: Malware; Profile: security_control;
	ocsf.v1_2_0.objects.Tls tls = 14; // Caption: TLS;
	string status_code = 15; // Caption: Status Code;
	ocsf.v1_2_0.objects.File file = 16; // Caption: File;
	ocsf.v1_2_0.events.network.enums.HTTP_ACTIVITY_SEVERITY_ID severity_id = 17; // Caption: Severity ID;
	repeated ocsf.v1_2_0.objects.Observable observables = 18; // Caption: Observables;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 19; // Caption: Connection Info;
	ocsf.v1_2_0.events.network.enums.HTTP_ACTIVITY_ACTIVITY_ID activity_id = 20; // Caption: Activity ID;
	ocsf.v1_2_0.events.network.enums.HTTP_ACTIVITY_ACTION_ID action_id = 21; // Caption: Action ID; Profile: security_control;
	int32 duration = 22; // Caption: Duration;
	ocsf.v1_2_0.objects.Device device = 23; // Caption: Device; Profile: host;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 24; // Caption: Destination Endpoint;
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 25; // Caption: Proxy Endpoint; Profile: network_proxy;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 26; // Caption: Proxy Connection Info; Profile: network_proxy;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 27; // Caption: Proxy Traffic; Profile: network_proxy;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 28; // Caption: Source Endpoint;
	int32 http_status = 29; // Caption: HTTP Status;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 30; // Caption: Load Balancer; Profile: load_balancer;
	ocsf.v1_2_0.objects.Api api = 31; // Caption: API Details; Profile: cloud;
	ocsf.v1_2_0.objects.Cloud cloud = 32; // Caption: Cloud; Profile: cloud;
	int64 time = 33; // Caption: Event Time;
	string status_detail = 34; // Caption: Status Details;
	string severity = 35; // Caption: Severity;
	string type_name = 36; // Caption: Type Name;
	string app_name = 37; // Caption: Application Name;
	ocsf.v1_2_0.objects.Object unmapped = 38; // Caption: Unmapped Data;
	ocsf.v1_2_0.events.network.enums.HTTP_ACTIVITY_CLASS_UID class_uid = 39; // Caption: Class ID;
	ocsf.v1_2_0.objects.Actor actor = 40; // Caption: Actor; Profile: host;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 41; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 42; // Caption: Proxy HTTP Request; Profile: network_proxy;
	int64 end_time = 43; // Caption: End Time;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 44; // Caption: Traffic;
	ocsf.v1_2_0.objects.Tls proxy_tls = 45; // Caption: Proxy TLS; Profile: network_proxy;
	ocsf.v1_2_0.objects.Metadata metadata = 46; // Caption: Metadata;
	string category_name = 47; // Caption: Category;
	ocsf.v1_2_0.events.network.enums.HTTP_ACTIVITY_TYPE_UID type_uid = 48; // Caption: Type ID;
	int32 count = 49; // Caption: Count;
	ocsf.v1_2_0.objects.NetworkProxy proxy = 50; // Caption: Proxy;
	int64 start_time = 51; // Caption: Start Time;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 52; // Caption: Enrichments;
	ocsf.v1_2_0.objects.HttpRequest http_request = 53; // Caption: HTTP Request;
	string activity_name = 54; // Caption: Activity;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 55; // Caption: Authorization Information; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.HTTP_ACTIVITY_CATEGORY_UID category_uid = 56; // Caption: Category ID;
	string class_name = 57; // Caption: Class;
}

// Event: network
// Event UID: 5
// URL: https://schema.ocsf.io/1.2.0/classes/rdp_activity
message RdpActivity {
	ocsf.v1_2_0.events.network.enums.RDP_ACTIVITY_ACTIVITY_ID activity_id = 1; // Caption: Activity ID;
	ocsf.v1_2_0.objects.Tls proxy_tls = 2; // Caption: Proxy TLS; Profile: network_proxy;
	ocsf.v1_2_0.objects.Cloud cloud = 3; // Caption: Cloud; Profile: cloud;
	string status_detail = 4; // Caption: Status Details;
	ocsf.v1_2_0.events.network.enums.RDP_ACTIVITY_ACTION_ID action_id = 5; // Caption: Action ID; Profile: security_control;
	string action = 6; // Profile: security_control; Caption: Action;
	string identifier_cookie = 7; // Caption: Identifier Cookie;
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 8; // Profile: network_proxy; Caption: Proxy Endpoint;
	int64 start_time = 9; // Caption: Start Time;
	string status_code = 10; // Caption: Status Code;
	string app_name = 11; // Caption: Application Name;
	ocsf.v1_2_0.objects.Api api = 12; // Caption: API Details; Profile: cloud;
	string class_name = 13; // Caption: Class;
	string protocol_ver = 14; // Caption: Protocol Version;
	ocsf.v1_2_0.objects.Display remote_display = 15; // Caption: Remote Display;
	string status = 16; // Caption: Status;
	ocsf.v1_2_0.events.network.enums.RDP_ACTIVITY_SEVERITY_ID severity_id = 17; // Caption: Severity ID;
	ocsf.v1_2_0.events.network.enums.RDP_ACTIVITY_DISPOSITION_ID disposition_id = 18; // Profile: security_control; Caption: Disposition ID;
	ocsf.v1_2_0.events.network.enums.RDP_ACTIVITY_TYPE_UID type_uid = 19; // Caption: Type ID;
	ocsf.v1_2_0.objects.File file = 20; // Caption: File;
	ocsf.v1_2_0.objects.Actor actor = 21; // Caption: Actor; Profile: host;
	int32 timezone_offset = 22; // Caption: Timezone Offset;
	int64 time = 23; // Caption: Event Time;
	ocsf.v1_2_0.objects.Response response = 24; // Caption: API Response Details;
	string raw_data = 25; // Caption: Raw Data;
	ocsf.v1_2_0.events.network.enums.RDP_ACTIVITY_CATEGORY_UID category_uid = 26; // Caption: Category ID;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 27; // Caption: Proxy Traffic; Profile: network_proxy;
	int64 end_time = 28; // Caption: End Time;
	ocsf.v1_2_0.objects.Request request = 29; // Caption: API Request Details;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 30; // Caption: Proxy HTTP Response; Profile: network_proxy;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 31; // Caption: Firewall Rule; Profile: security_control;
	string category_name = 32; // Caption: Category;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 33; // Caption: Traffic;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 34; // Caption: Enrichments;
	repeated ocsf.v1_2_0.objects.Attack attacks = 35; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	string type_name = 36; // Caption: Type Name;
	ocsf.v1_2_0.objects.NetworkProxy proxy = 37; // Caption: Proxy;
	ocsf.v1_2_0.events.network.enums.RDP_ACTIVITY_CLASS_UID class_uid = 38; // Caption: Class ID;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 39; // Caption: Source Endpoint;
	string message = 40; // Caption: Message;
	string activity_name = 41; // Caption: Activity;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 42; // Caption: Destination Endpoint;
	repeated string certificate_chain = 43; // Caption: Certificate Chain;
	repeated string capabilities = 44; // Caption: Capabilities;
	ocsf.v1_2_0.objects.Object unmapped = 45; // Caption: Unmapped Data;
	string severity = 46; // Caption: Severity;
	repeated ocsf.v1_2_0.objects.Observable observables = 47; // Caption: Observables;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 48; // Caption: Load Balancer; Profile: load_balancer;
	ocsf.v1_2_0.events.network.enums.RDP_ACTIVITY_STATUS_ID status_id = 49; // Caption: Status ID;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 50; // Caption: Authorization Information; Profile: security_control;
	int32 count = 51; // Caption: Count;
	ocsf.v1_2_0.objects.Tls tls = 52; // Caption: TLS;
	ocsf.v1_2_0.objects.Device device = 53; // Caption: Device;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 54; // Caption: Proxy Connection Info; Profile: network_proxy;
	string disposition = 55; // Caption: Disposition; Profile: security_control;
	ocsf.v1_2_0.objects.Metadata metadata = 56; // Caption: Metadata;
	int32 duration = 57; // Caption: Duration;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 58; // Caption: Connection Info;
	repeated ocsf.v1_2_0.objects.Malware malware = 59; // Caption: Malware; Profile: security_control;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 60; // Caption: Proxy HTTP Request; Profile: network_proxy;
}

// Event: network
// Event UID: 6
// URL: https://schema.ocsf.io/1.2.0/classes/smb_activity
message SmbActivity {
	ocsf.v1_2_0.objects.DceRpc dce_rpc = 1; // Caption: Distributed Computing Environment/Remote Procedure Call (DCE/RPC);
	string severity = 2; // Caption: Severity;
	ocsf.v1_2_0.objects.Actor actor = 3; // Caption: Actor; Profile: host;
	string status_code = 4; // Caption: Status Code;
	ocsf.v1_2_0.objects.Tls proxy_tls = 5; // Caption: Proxy TLS; Profile: network_proxy;
	string status = 6; // Caption: Status;
	repeated ocsf.v1_2_0.objects.Attack attacks = 7; // Profile: security_control; Caption: MITRE ATT&CK® Details;
	repeated string client_dialects = 8; // Caption: Client Dialects;
	string share = 9; // Caption: Share;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 10; // Caption: Proxy HTTP Request; Profile: network_proxy;
	ocsf.v1_2_0.events.network.enums.SMB_ACTIVITY_TYPE_UID type_uid = 11; // Caption: Type ID;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 12; // Caption: Proxy HTTP Response; Profile: network_proxy;
	ocsf.v1_2_0.events.network.enums.SMB_ACTIVITY_SHARE_TYPE_ID share_type_id = 13; // Caption: Share Type Id;
	ocsf.v1_2_0.objects.Cloud cloud = 14; // Caption: Cloud; Profile: cloud;
	ocsf.v1_2_0.events.network.enums.SMB_ACTIVITY_DISPOSITION_ID disposition_id = 15; // Caption: Disposition ID; Profile: security_control;
	string disposition = 16; // Caption: Disposition; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 17; // Caption: Authorization Information; Profile: security_control;
	string tree_uid = 18; // Caption: Tree UID;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 19; // Caption: Load Balancer; Profile: load_balancer;
	int32 count = 20; // Caption: Count;
	string activity_name = 21; // Caption: Activity;
	ocsf.v1_2_0.events.network.enums.SMB_ACTIVITY_STATUS_ID status_id = 22; // Caption: Status ID;
	ocsf.v1_2_0.objects.Device device = 23; // Caption: Device; Profile: host;
	string status_detail = 24; // Caption: Status Details;
	ocsf.v1_2_0.objects.File file = 25; // Caption: File;
	string command = 26; // Caption: Command;
	int64 end_time = 27; // Caption: End Time;
	ocsf.v1_2_0.objects.NetworkProxy proxy = 28; // Caption: Proxy;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 29; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 30; // Caption: Traffic;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 31; // Caption: Source Endpoint;
	int64 time = 32; // Caption: Event Time;
	string dialect = 33; // Caption: Dialect;
	ocsf.v1_2_0.objects.Response response = 34; // Caption: API Response Details;
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 35; // Caption: Proxy Endpoint; Profile: network_proxy;
	string type_name = 36; // Caption: Type Name;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 37; // Caption: Proxy Traffic; Profile: network_proxy;
	string category_name = 38; // Caption: Category;
	ocsf.v1_2_0.events.network.enums.SMB_ACTIVITY_CLASS_UID class_uid = 39; // Caption: Class ID;
	ocsf.v1_2_0.events.network.enums.SMB_ACTIVITY_ACTIVITY_ID activity_id = 40; // Caption: Activity ID;
	ocsf.v1_2_0.objects.Metadata metadata = 41; // Caption: Metadata;
	string raw_data = 42; // Caption: Raw Data;
	string share_type = 43; // Caption: Share Type;
	ocsf.v1_2_0.events.network.enums.SMB_ACTIVITY_ACTION_ID action_id = 44; // Caption: Action ID; Profile: security_control;
	string class_name = 45; // Caption: Class;
	int64 start_time = 46; // Caption: Start Time;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 47; // Caption: Enrichments;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 48; // Caption: Connection Info;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 49; // Caption: Proxy Connection Info; Profile: network_proxy;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 50; // Caption: Destination Endpoint;
	ocsf.v1_2_0.events.network.enums.SMB_ACTIVITY_CATEGORY_UID category_uid = 51; // Caption: Category ID;
	int32 timezone_offset = 52; // Caption: Timezone Offset;
	string open_type = 53; // Caption: Open Type;
	int32 duration = 54; // Caption: Duration;
	repeated ocsf.v1_2_0.objects.Malware malware = 55; // Caption: Malware; Profile: security_control;
	ocsf.v1_2_0.objects.Object unmapped = 56; // Caption: Unmapped Data;
	ocsf.v1_2_0.objects.Tls tls = 57; // Caption: TLS;
	string message = 58; // Caption: Message;
	ocsf.v1_2_0.events.network.enums.SMB_ACTIVITY_SEVERITY_ID severity_id = 59; // Caption: Severity ID;
	repeated ocsf.v1_2_0.objects.Observable observables = 60; // Caption: Observables;
	string action = 61; // Caption: Action; Profile: security_control;
	ocsf.v1_2_0.objects.Api api = 62; // Profile: cloud; Caption: API Details;
	string app_name = 63; // Caption: Application Name;
}

// Event: network
// Event UID: 14
// URL: https://schema.ocsf.io/1.2.0/classes/tunnel_activity
message TunnelActivity {
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 1; // Caption: Authorization Information; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Observable observables = 2; // Caption: Observables;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 3; // Caption: Destination Endpoint;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 4; // Caption: Traffic;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 5; // Caption: Load Balancer; Profile: load_balancer;
	string severity = 6; // Caption: Severity;
	string class_name = 7; // Caption: Class;
	ocsf.v1_2_0.events.network.enums.TUNNEL_ACTIVITY_CATEGORY_UID category_uid = 8; // Caption: Category ID;
	ocsf.v1_2_0.events.network.enums.TUNNEL_ACTIVITY_ACTIVITY_ID activity_id = 9; // Caption: Activity ID;
	ocsf.v1_2_0.events.network.enums.TUNNEL_ACTIVITY_ACTION_ID action_id = 10; // Caption: Action ID; Profile: security_control;
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 11; // Caption: Proxy Endpoint; Profile: network_proxy;
	ocsf.v1_2_0.objects.Object unmapped = 12; // Caption: Unmapped Data;
	string message = 13; // Caption: Message;
	string raw_data = 14; // Caption: Raw Data;
	string activity_name = 15; // Caption: Activity;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 16; // Caption: Source Endpoint;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 17; // Caption: Proxy Traffic; Profile: network_proxy;
	ocsf.v1_2_0.events.network.enums.TUNNEL_ACTIVITY_TYPE_UID type_uid = 18; // Caption: Type ID;
	ocsf.v1_2_0.events.network.enums.TUNNEL_ACTIVITY_STATUS_ID status_id = 19; // Caption: Status ID;
	ocsf.v1_2_0.objects.Cloud cloud = 20; // Caption: Cloud; Profile: cloud;
	int32 timezone_offset = 21; // Caption: Timezone Offset;
	ocsf.v1_2_0.events.network.enums.TUNNEL_ACTIVITY_DISPOSITION_ID disposition_id = 22; // Profile: security_control; Caption: Disposition ID;
	string type_name = 23; // Caption: Type Name;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 24; // Caption: Connection Info;
	repeated ocsf.v1_2_0.objects.Malware malware = 25; // Caption: Malware; Profile: security_control;
	ocsf.v1_2_0.objects.Tls proxy_tls = 26; // Caption: Proxy TLS; Profile: network_proxy;
	string action = 27; // Caption: Action; Profile: security_control;
	ocsf.v1_2_0.objects.NetworkProxy proxy = 28; // Caption: Proxy;
	int32 count = 29; // Caption: Count;
	ocsf.v1_2_0.objects.Session session = 30; // Caption: Session;
	repeated ocsf.v1_2_0.objects.Attack attacks = 31; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 32; // Caption: Proxy HTTP Response; Profile: network_proxy;
	string protocol_name = 33; // Caption: Protocol Name;
	ocsf.v1_2_0.objects.Tls tls = 34; // Caption: TLS;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 35; // Profile: network_proxy; Caption: Proxy Connection Info;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 36; // Caption: Enrichments;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 37; // Caption: Proxy HTTP Request; Profile: network_proxy;
	ocsf.v1_2_0.events.network.enums.TUNNEL_ACTIVITY_TUNNEL_TYPE_ID tunnel_type_id = 38; // Caption: Type;
	ocsf.v1_2_0.objects.User user = 39; // Caption: User;
	string status_code = 40; // Caption: Status Code;
	string category_name = 41; // Caption: Category;
	ocsf.v1_2_0.objects.Api api = 42; // Caption: API Details; Profile: cloud;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 43; // Caption: Firewall Rule; Profile: security_control;
	string disposition = 44; // Caption: Disposition; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.TUNNEL_ACTIVITY_SEVERITY_ID severity_id = 45; // Caption: Severity ID;
	ocsf.v1_2_0.objects.Actor actor = 46; // Caption: Actor; Profile: host;
	string status = 47; // Caption: Status;
	int64 time = 48; // Caption: Event Time;
	int64 end_time = 49; // Caption: End Time;
	ocsf.v1_2_0.events.network.enums.TUNNEL_ACTIVITY_CLASS_UID class_uid = 50; // Caption: Class ID;
	int64 start_time = 51; // Caption: Start Time;
	ocsf.v1_2_0.objects.Device device = 52; // Caption: Device;
	string app_name = 53; // Caption: Application Name;
	ocsf.v1_2_0.objects.Metadata metadata = 54; // Caption: Metadata;
	int32 duration = 55; // Caption: Duration;
	string status_detail = 56; // Caption: Status Details;
	ocsf.v1_2_0.objects.NetworkInterface tunnel_interface = 57; // Caption: Interface;
	string tunnel_type = 58; // Caption: Type;
}

// Event: network
// Event UID: 4
// URL: https://schema.ocsf.io/1.2.0/classes/dhcp_activity
message DhcpActivity {
	ocsf.v1_2_0.events.network.enums.DHCP_ACTIVITY_ACTION_ID action_id = 1; // Caption: Action ID; Profile: security_control;
	string type_name = 2; // Caption: Type Name;
	int32 duration = 3; // Caption: Duration;
	repeated ocsf.v1_2_0.objects.Malware malware = 4; // Caption: Malware; Profile: security_control;
	ocsf.v1_2_0.objects.Object unmapped = 5; // Caption: Unmapped Data;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 6; // Caption: Proxy Connection Info; Profile: network_proxy;
	string disposition = 7; // Caption: Disposition; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Observable observables = 8; // Caption: Observables;
	ocsf.v1_2_0.objects.Tls tls = 9; // Caption: TLS;
	ocsf.v1_2_0.objects.Api api = 10; // Caption: API Details; Profile: cloud;
	ocsf.v1_2_0.objects.Tls proxy_tls = 11; // Caption: Proxy TLS; Profile: network_proxy;
	string status_code = 12; // Caption: Status Code;
	ocsf.v1_2_0.objects.Cloud cloud = 13; // Profile: cloud; Caption: Cloud;
	repeated ocsf.v1_2_0.objects.Attack attacks = 14; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	int64 time = 15; // Caption: Event Time;
	string severity = 16; // Caption: Severity;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 17; // Caption: Proxy HTTP Request; Profile: network_proxy;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 18; // Caption: Connection Info;
	string activity_name = 19; // Caption: Activity;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 20; // Caption: Proxy Traffic; Profile: network_proxy;
	string class_name = 21; // Caption: Class;
	string app_name = 22; // Caption: Application Name;
	bool is_renewal = 23; // Caption: Renewal;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 24; // Caption: Destination Endpoint;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 25; // Caption: Proxy HTTP Response; Profile: network_proxy;
	string raw_data = 26; // Caption: Raw Data;
	ocsf.v1_2_0.events.network.enums.DHCP_ACTIVITY_ACTIVITY_ID activity_id = 27; // Caption: Activity ID;
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 28; // Caption: Proxy Endpoint; Profile: network_proxy;
	string message = 29; // Caption: Message;
	int32 lease_dur = 30; // Caption: Lease Duration;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 31; // Caption: Firewall Rule; Profile: security_control;
	int32 count = 32; // Caption: Count;
	ocsf.v1_2_0.objects.Metadata metadata = 33; // Caption: Metadata;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 34; // Caption: Load Balancer; Profile: load_balancer;
	string status = 35; // Caption: Status;
	ocsf.v1_2_0.events.network.enums.DHCP_ACTIVITY_CATEGORY_UID category_uid = 36; // Caption: Category ID;
	ocsf.v1_2_0.events.network.enums.DHCP_ACTIVITY_SEVERITY_ID severity_id = 37; // Caption: Severity ID;
	ocsf.v1_2_0.objects.NetworkInterface relay = 38; // Caption: Relay;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 39; // Caption: Enrichments;
	int64 end_time = 40; // Caption: End Time;
	ocsf.v1_2_0.objects.NetworkProxy proxy = 41; // Caption: Proxy;
	ocsf.v1_2_0.events.network.enums.DHCP_ACTIVITY_CLASS_UID class_uid = 42; // Caption: Class ID;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 43; // Caption: Traffic;
	ocsf.v1_2_0.objects.Device device = 44; // Caption: Device; Profile: host;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 45; // Caption: Source Endpoint;
	int64 start_time = 46; // Caption: Start Time;
	ocsf.v1_2_0.events.network.enums.DHCP_ACTIVITY_STATUS_ID status_id = 47; // Caption: Status ID;
	int32 timezone_offset = 48; // Caption: Timezone Offset;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 49; // Caption: Authorization Information; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.DHCP_ACTIVITY_DISPOSITION_ID disposition_id = 50; // Caption: Disposition ID; Profile: security_control;
	string transaction_uid = 51; // Caption: Transaction UID;
	ocsf.v1_2_0.events.network.enums.DHCP_ACTIVITY_TYPE_UID type_uid = 52; // Caption: Type ID;
	string action = 53; // Caption: Action; Profile: security_control;
	ocsf.v1_2_0.objects.Actor actor = 54; // Caption: Actor; Profile: host;
	string status_detail = 55; // Caption: Status Details;
	string category_name = 56; // Caption: Category;
}

// Event: network
// Event UID: 13
// URL: https://schema.ocsf.io/1.2.0/classes/ntp_activity
message NtpActivity {
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 1; // Profile: network_proxy; Caption: Proxy Endpoint;
	ocsf.v1_2_0.objects.Actor actor = 2; // Caption: Actor; Profile: host;
	ocsf.v1_2_0.objects.Cloud cloud = 3; // Caption: Cloud; Profile: cloud;
	int64 time = 4; // Caption: Event Time;
	int32 delay = 5; // Caption: Root Delay;
	string message = 6; // Caption: Message;
	string activity_name = 7; // Caption: Activity;
	ocsf.v1_2_0.events.network.enums.NTP_ACTIVITY_CATEGORY_UID category_uid = 8; // Caption: Category ID;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 9; // Caption: Proxy Traffic; Profile: network_proxy;
	string version = 10; // Caption: Version;
	repeated ocsf.v1_2_0.objects.Malware malware = 11; // Profile: security_control; Caption: Malware;
	ocsf.v1_2_0.objects.Object unmapped = 12; // Caption: Unmapped Data;
	string raw_data = 13; // Caption: Raw Data;
	string category_name = 14; // Caption: Category;
	int32 precision = 15; // Caption: Precision;
	ocsf.v1_2_0.events.network.enums.NTP_ACTIVITY_STRATUM_ID stratum_id = 16; // Caption: Stratum ID;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 17; // Caption: Authorization Information; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 18; // Caption: Enrichments;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 19; // Caption: Connection Info;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 20; // Caption: Source Endpoint;
	ocsf.v1_2_0.events.network.enums.NTP_ACTIVITY_DISPOSITION_ID disposition_id = 21; // Caption: Disposition ID; Profile: security_control;
	ocsf.v1_2_0.objects.Tls proxy_tls = 22; // Caption: Proxy TLS; Profile: network_proxy;
	int32 timezone_offset = 23; // Caption: Timezone Offset;
	ocsf.v1_2_0.objects.Api api = 24; // Caption: API Details; Profile: cloud;
	ocsf.v1_2_0.objects.NetworkProxy proxy = 25; // Caption: Proxy;
	string severity = 26; // Caption: Severity;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 27; // Caption: Traffic;
	ocsf.v1_2_0.events.network.enums.NTP_ACTIVITY_ACTION_ID action_id = 28; // Caption: Action ID; Profile: security_control;
	int64 end_time = 29; // Caption: End Time;
	string status_detail = 30; // Caption: Status Details;
	repeated ocsf.v1_2_0.objects.Observable observables = 31; // Caption: Observables;
	ocsf.v1_2_0.events.network.enums.NTP_ACTIVITY_ACTIVITY_ID activity_id = 32; // Caption: Activity ID;
	ocsf.v1_2_0.objects.Tls tls = 33; // Caption: TLS;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 34; // Profile: network_proxy; Caption: Proxy HTTP Request;
	string type_name = 35; // Caption: Type Name;
	int32 duration = 36; // Caption: Duration;
	int32 count = 37; // Caption: Count;
	int64 start_time = 38; // Caption: Start Time;
	ocsf.v1_2_0.events.network.enums.NTP_ACTIVITY_SEVERITY_ID severity_id = 39; // Caption: Severity ID;
	string class_name = 40; // Caption: Class;
	ocsf.v1_2_0.events.network.enums.NTP_ACTIVITY_STATUS_ID status_id = 41; // Caption: Status ID;
	ocsf.v1_2_0.events.network.enums.NTP_ACTIVITY_CLASS_UID class_uid = 42; // Caption: Class ID;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 43; // Caption: Proxy Connection Info; Profile: network_proxy;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 44; // Caption: Proxy HTTP Response; Profile: network_proxy;
	ocsf.v1_2_0.objects.Metadata metadata = 45; // Caption: Metadata;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 46; // Caption: Destination Endpoint;
	string app_name = 47; // Caption: Application Name;
	string stratum = 48; // Caption: Stratum;
	int32 dispersion = 49; // Caption: Root Dispersion;
	string disposition = 50; // Caption: Disposition; Profile: security_control;
	string status_code = 51; // Caption: Status Code;
	ocsf.v1_2_0.objects.Device device = 52; // Caption: Device; Profile: host;
	string status = 53; // Caption: Status;
	ocsf.v1_2_0.events.network.enums.NTP_ACTIVITY_TYPE_UID type_uid = 54; // Caption: Type ID;
	repeated ocsf.v1_2_0.objects.Attack attacks = 55; // Profile: security_control; Caption: MITRE ATT&CK® Details;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 56; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 57; // Caption: Load Balancer; Profile: load_balancer;
	string action = 58; // Caption: Action; Profile: security_control;
}

// Event UID: 3
// URL: https://schema.ocsf.io/1.2.0/classes/dns_activity
// Event: network
message DnsActivity {
	string status_code = 1; // Caption: Status Code;
	int64 end_time = 2; // Caption: End Time;
	string action = 3; // Caption: Action; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.DNS_ACTIVITY_TYPE_UID type_uid = 4; // Caption: Type ID;
	string app_name = 5; // Caption: Application Name;
	ocsf.v1_2_0.events.network.enums.DNS_ACTIVITY_STATUS_ID status_id = 6; // Caption: Status ID;
	string raw_data = 7; // Caption: Raw Data;
	string type_name = 8; // Caption: Type Name;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 9; // Caption: Enrichments;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 10; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.objects.Metadata metadata = 11; // Caption: Metadata;
	int32 count = 12; // Caption: Count;
	int64 start_time = 13; // Caption: Start Time;
	repeated ocsf.v1_2_0.objects.DnsAnswer answers = 14; // Caption: DNS Answer;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 15; // Caption: Load Balancer; Profile: load_balancer;
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 16; // Caption: Proxy Endpoint; Profile: network_proxy;
	ocsf.v1_2_0.objects.Object unmapped = 17; // Caption: Unmapped Data;
	string message = 18; // Caption: Message;
	repeated ocsf.v1_2_0.objects.Attack attacks = 19; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 20; // Caption: Proxy Connection Info; Profile: network_proxy;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 21; // Caption: Destination Endpoint;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 22; // Caption: Traffic;
	string category_name = 23; // Caption: Category;
	ocsf.v1_2_0.objects.Api api = 24; // Caption: API Details; Profile: cloud;
	ocsf.v1_2_0.objects.Device device = 25; // Caption: Device; Profile: host;
	ocsf.v1_2_0.events.network.enums.DNS_ACTIVITY_CLASS_UID class_uid = 26; // Caption: Class ID;
	ocsf.v1_2_0.objects.Tls proxy_tls = 27; // Caption: Proxy TLS; Profile: network_proxy;
	string activity_name = 28; // Caption: Activity;
	ocsf.v1_2_0.events.network.enums.DNS_ACTIVITY_DISPOSITION_ID disposition_id = 29; // Caption: Disposition ID; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.DNS_ACTIVITY_CATEGORY_UID category_uid = 30; // Caption: Category ID;
	int64 query_time = 31; // Caption: Query Time;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 32; // Caption: Proxy Traffic; Profile: network_proxy;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 33; // Caption: Proxy HTTP Request; Profile: network_proxy;
	string status = 34; // Caption: Status;
	ocsf.v1_2_0.objects.Cloud cloud = 35; // Caption: Cloud; Profile: cloud;
	string status_detail = 36; // Caption: Status Details;
	string rcode = 37; // Caption: Response Code;
	ocsf.v1_2_0.events.network.enums.DNS_ACTIVITY_SEVERITY_ID severity_id = 38; // Caption: Severity ID;
	string disposition = 39; // Caption: Disposition; Profile: security_control;
	int32 timezone_offset = 40; // Caption: Timezone Offset;
	int64 response_time = 41; // Caption: Response Time;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 42; // Caption: Source Endpoint;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 43; // Caption: Proxy HTTP Response; Profile: network_proxy;
	int64 time = 44; // Caption: Event Time;
	ocsf.v1_2_0.events.network.enums.DNS_ACTIVITY_RCODE_ID rcode_id = 45; // Caption: Response Code ID;
	ocsf.v1_2_0.events.network.enums.DNS_ACTIVITY_ACTION_ID action_id = 46; // Caption: Action ID; Profile: security_control;
	ocsf.v1_2_0.objects.NetworkProxy proxy = 47; // Caption: Proxy;
	ocsf.v1_2_0.objects.Tls tls = 48; // Caption: TLS;
	string severity = 49; // Caption: Severity;
	int32 duration = 50; // Caption: Duration;
	ocsf.v1_2_0.objects.Actor actor = 51; // Caption: Actor; Profile: host;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 52; // Caption: Connection Info;
	ocsf.v1_2_0.objects.DnsQuery query = 53; // Caption: DNS Query;
	string class_name = 54; // Caption: Class;
	ocsf.v1_2_0.events.network.enums.DNS_ACTIVITY_ACTIVITY_ID activity_id = 55; // Caption: Activity ID;
	repeated ocsf.v1_2_0.objects.Observable observables = 56; // Caption: Observables;
	repeated ocsf.v1_2_0.objects.Malware malware = 57; // Caption: Malware; Profile: security_control;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 58; // Caption: Authorization Information; Profile: security_control;
}

// Event: network
// Event UID: 1
// URL: https://schema.ocsf.io/1.2.0/classes/network_activity
message NetworkActivity {
	ocsf.v1_2_0.objects.NetworkProxy proxy = 1; // Caption: Proxy;
	ocsf.v1_2_0.events.network.enums.NETWORK_ACTIVITY_SEVERITY_ID severity_id = 2; // Caption: Severity ID;
	string class_name = 3; // Caption: Class;
	int32 count = 4; // Caption: Count;
	ocsf.v1_2_0.events.network.enums.NETWORK_ACTIVITY_ACTIVITY_ID activity_id = 5; // Caption: Activity ID;
	ocsf.v1_2_0.objects.Actor actor = 6; // Caption: Actor; Profile: host;
	string raw_data = 7; // Caption: Raw Data;
	ocsf.v1_2_0.events.network.enums.NETWORK_ACTIVITY_DISPOSITION_ID disposition_id = 8; // Caption: Disposition ID; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.NETWORK_ACTIVITY_CATEGORY_UID category_uid = 9; // Caption: Category ID;
	int64 time = 10; // Caption: Event Time;
	ocsf.v1_2_0.objects.NetworkConnectionInfo connection_info = 11; // Caption: Connection Info;
	ocsf.v1_2_0.objects.Tls proxy_tls = 12; // Caption: Proxy TLS; Profile: network_proxy;
	string status = 13; // Caption: Status;
	string message = 14; // Caption: Message;
	string app_name = 15; // Caption: Application Name;
	ocsf.v1_2_0.objects.HttpResponse proxy_http_response = 16; // Caption: Proxy HTTP Response; Profile: network_proxy;
	ocsf.v1_2_0.events.network.enums.NETWORK_ACTIVITY_ACTION_ID action_id = 17; // Caption: Action ID; Profile: security_control;
	string severity = 18; // Caption: Severity;
	ocsf.v1_2_0.objects.NetworkTraffic traffic = 19; // Caption: Traffic;
	repeated ocsf.v1_2_0.objects.Malware malware = 20; // Caption: Malware; Profile: security_control;
	ocsf.v1_2_0.objects.NetworkProxy proxy_endpoint = 21; // Caption: Proxy Endpoint; Profile: network_proxy;
	int64 start_time = 22; // Caption: Start Time;
	repeated ocsf.v1_2_0.objects.Attack attacks = 23; // Caption: MITRE ATT&CK® Details; Profile: security_control;
	ocsf.v1_2_0.objects.Tls tls = 24; // Caption: TLS;
	ocsf.v1_2_0.objects.Cloud cloud = 25; // Caption: Cloud; Profile: cloud;
	repeated ocsf.v1_2_0.objects.Observable observables = 26; // Caption: Observables;
	ocsf.v1_2_0.objects.NetworkConnectionInfo proxy_connection_info = 27; // Caption: Proxy Connection Info; Profile: network_proxy;
	ocsf.v1_2_0.objects.FirewallRule firewall_rule = 28; // Caption: Firewall Rule; Profile: security_control;
	ocsf.v1_2_0.objects.LoadBalancer load_balancer = 29; // Caption: Load Balancer; Profile: load_balancer;
	int64 end_time = 30; // Caption: End Time;
	ocsf.v1_2_0.objects.Device device = 31; // Caption: Device; Profile: host;
	ocsf.v1_2_0.objects.NetworkEndpoint src_endpoint = 32; // Caption: Source Endpoint;
	string activity_name = 33; // Caption: Activity;
	ocsf.v1_2_0.objects.HttpRequest proxy_http_request = 34; // Caption: Proxy HTTP Request; Profile: network_proxy;
	string category_name = 35; // Caption: Category;
	string type_name = 36; // Caption: Type Name;
	ocsf.v1_2_0.events.network.enums.NETWORK_ACTIVITY_TYPE_UID type_uid = 37; // Caption: Type ID;
	ocsf.v1_2_0.events.network.enums.NETWORK_ACTIVITY_CLASS_UID class_uid = 38; // Caption: Class ID;
	string disposition = 39; // Caption: Disposition; Profile: security_control;
	string status_detail = 40; // Caption: Status Details;
	ocsf.v1_2_0.objects.NetworkEndpoint dst_endpoint = 41; // Caption: Destination Endpoint;
	ocsf.v1_2_0.objects.Metadata metadata = 42; // Caption: Metadata;
	string action = 43; // Caption: Action; Profile: security_control;
	ocsf.v1_2_0.events.network.enums.NETWORK_ACTIVITY_STATUS_ID status_id = 44; // Caption: Status ID;
	int32 duration = 45; // Caption: Duration;
	ocsf.v1_2_0.objects.Object unmapped = 46; // Caption: Unmapped Data;
	int32 timezone_offset = 47; // Caption: Timezone Offset;
	ocsf.v1_2_0.objects.Api api = 48; // Caption: API Details; Profile: cloud;
	ocsf.v1_2_0.objects.Url url = 49; // Caption: URL;
	repeated ocsf.v1_2_0.objects.Authorization authorizations = 50; // Profile: security_control; Caption: Authorization Information;
	ocsf.v1_2_0.objects.NetworkTraffic proxy_traffic = 51; // Caption: Proxy Traffic; Profile: network_proxy;
	repeated ocsf.v1_2_0.objects.Enrichment enrichments = 52; // Caption: Enrichments;
	string status_code = 53; // Caption: Status Code;
}