About Query's Schema

Query's schema is based on OCSF (Open Cybersecurity Schema Framework), an industry standard for cybersecurity data models. Query normalizes the results that come from different data sources into OCSF objects and/or events.

For more information on Query's data model and on OCSF standard, please refer to:

• Query Documentation
• OCSF Github
• OCSF Official Documentation