Module ocsf 

OCSF serialization for audit events.

OCSF is the Open Cybersecurity Schema Framework.

to_ocsf is the one entry point. It matches an AuditEvent variant and hands it to the child module that builds the OCSF record class for that variant, so each class’s field names and id numbers live in exactly one place. ProductInfo names the emitting product in every record.

Structs

ProductInfo

Product identity for every OCSF record’s metadata field.

Functions

to_ocsf

Serialize an AuditEvent to an OCSF JSON object.