User

The User class is used to describe users. It is primarily used as a "container" class for the UserId aggregate class, as shown in Figure 16.

digraph User { graph [bb="0,0,454,134", rankdir=LR ]; node [label="\N"]; User [height=0.98611, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#52a3cc" HREF="/idmef_parser/IDMEFv1/User.html" TITLE="The User class is used to describe users. It is primarily used as a &quot;container&quot; class for the UserId aggregate class, as shown in Figure 16. "><FONT FACE="Nimbus Sans L">User</FONT></td> </tr>" %<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IDMEFv1/User.html" TITLE="A unique identifier for the user; see Section 3.2.9."><FONT FACE="Nimbus Sans L">[STRING] ident (Optional)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IDMEFv1/User.html" TITLE="The type of user represented. The permitted values for this attribute are shown below. The default value is &quot;unknown&quot;. (See also Section 10.)"><FONT FACE="Nimbus Sans L">[ENUM] category (Optional)</FONT></td></tr>%</table>>, pos="95,67", shape=plaintext, width=2.6389]; UserId [height=1.8611, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#52a3cc" HREF="/idmef_parser/IDMEFv1/UserId.html" TITLE="The UserId class provides specific information about a user. More than one UserId can be used within the User class to indicate attempts to transition from one user to another, or to provide complete information about a user&#39;s (or process&#39;) privileges. "><FONT FACE="Nimbus Sans L">UserId</FONT></td> </tr>" %<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IDMEFv1/UserId.html" TITLE="A user or group name."><FONT FACE="Nimbus Sans L">[STRING] name (Optional)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IDMEFv1/UserId.html" TITLE="A user or group number."><FONT FACE="Nimbus Sans L">[INTEGER] number (Optional)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IDMEFv1/UserId.html" TITLE="A unique identifier for the user id, see Section 3.2.9."><FONT FACE="Nimbus Sans L">[STRING] ident (Optional)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IDMEFv1/UserId.html" TITLE="The type of user information represented. The permitted values for this attribute are shown below. The default value is &quot;original-user&quot;. (See also Section 10.)"><FONT FACE="Nimbus Sans L">[ENUM] type (Optional)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IDMEFv1/UserId.html" TITLE="The tty the user is using."><FONT FACE="Nimbus Sans L">[STRING] tty (Optional)</FONT></td></tr>%</table>>, pos="351.5,67", shape=plaintext, width=2.8472]; User -> UserId [label="1..*", lp="219.5,74.5", pos="e,248.76,67 190.15,67 205.97,67 222.51,67 238.72,67"]; }


Aggregates

UserId (1..*)

Identification of a user, as indicated by its type attribute (see Section 4.2.7.3.1).

Attributes

ident (Optional)

A unique identifier for the user; see Section 3.2.9.

category (Optional)

The type of user represented. The permitted values for this attribute are shown below. The default value is "unknown". (See also Section 10.)
Rank Keyword Description
0 unknown User type unknown
1 application An application user
2 os-device An operating system or device user


IDMEFv1


IDMEFv2


IODEFv1


IODEFv2