Name | Type | Multiplicity | Description |
---|---|---|---|
correlationStartTimestamp |
property dateTime |
[0,1] | When did the (last) correlation of this shadow start. |
correlationEndTimestamp |
property dateTime |
[0,1] | When did the (last) correlation of this shadow end. |
correlationCaseOpenTimestamp |
property dateTime |
[0,1] | When was the correlation case opened. |
correlationCaseCloseTimestamp |
property dateTime |
[0,1] | When was the correlation case closed. |
performerRef |
reference ObjectReferenceType |
[0,-1] | Reference to the user(s) that performed the correlation - if known. |
performerComment |
property string |
[0,-1] | Comments of the user(s) during the correlation of the data. |
situation |
property CorrelationSituationType |
[0,1] | What was the resulting situation of the correlation? (uncertain, ownerFound, noOwner) |
ownerOptions |
container ResourceObjectOwnerOptionsType |
[0,1] | Options for object owner, if any were found. |
resultingOwner |
reference ObjectReferenceType |
[0,1] | The owner as determined by the correlation. |
correlatorState |
container AbstractCorrelatorStateType |
[0,1] | State of the specific correlator that has been used. |
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM
Multiplicity: [0,-1]
Flags: RAM,runtime
Multiplicity: [0,-1]
Flags: RAM,runtime,AVals:4
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]
Flags: RAM
Multiplicity: [0,1]
Flags: RAM,runtime
Multiplicity: [0,1]