From bf6dfb87aef8e4e40e360d766779f746ee7cbb08 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 22 Apr 2026 17:27:00 -0400 Subject: [PATCH 01/26] Deprecate web_resources_result in lieu of updated_web_resources --- dictionary.json | 6 +++++- events/application/web_resources_activity.json | 6 +++++- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/dictionary.json b/dictionary.json index 4ed77da01..a6615857a 100644 --- a/dictionary.json +++ b/dictionary.json @@ -7054,7 +7054,11 @@ "caption": "Web Resources Result", "description": "The results of the activity on web resources. It should contain the new values of the changed attributes of the web resources.", "type": "web_resource", - "is_array": true + "is_array": true, + "@deprecated": { + "message": "Use the updated_web_resources attribute instead.", + "since": "1.9.0" + } }, "whois": { "caption": "WHOIS", diff --git a/events/application/web_resources_activity.json b/events/application/web_resources_activity.json index 1fd9dec23..210a03554 100644 --- a/events/application/web_resources_activity.json +++ b/events/application/web_resources_activity.json @@ -75,7 +75,11 @@ }, "web_resources_result": { "group": "primary", - "requirement": "recommended" + "requirement": "recommended", + "@deprecated": { + "message": "Use the updated_web_resources attribute instead.", + "since": "1.9.0" + } } }, "profiles": [ From dc43f3ff0602a0ef4aa3bb57d03ac848d7e5f68b Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 22 Apr 2026 17:40:10 -0400 Subject: [PATCH 02/26] Add the updated_web_resources attribute --- dictionary.json | 6 ++++++ events/application/web_resources_activity.json | 4 ++++ 2 files changed, 10 insertions(+) diff --git a/dictionary.json b/dictionary.json index a6615857a..57384d959 100644 --- a/dictionary.json +++ b/dictionary.json @@ -6822,6 +6822,12 @@ "description": "The number of unused services. See specific usage.", "type": "integer_t" }, + "updated_web_resources": { + "caption": "Updated Web Resources", + "description": "The attempted or actual web_resources object update relative to the event `status_id` (e.g. `Success`, `Failure`, etc.)", + "type": "web_resource", + "is_array": true + }, "uploaded_time": { "caption": "Uploaded Time", "description": "The timestamp at which an entity was uploaded. See specific usage.", diff --git a/events/application/web_resources_activity.json b/events/application/web_resources_activity.json index 210a03554..fa2fec10d 100644 --- a/events/application/web_resources_activity.json +++ b/events/application/web_resources_activity.json @@ -69,6 +69,10 @@ "group": "context", "requirement": "optional" }, + "updated_web_resources": { + "group": "primary", + "requirement": "recommended" + }, "web_resources": { "group": "primary", "requirement": "required" From e96faef582822522fff7a4d9bcf7765bc1fa4ddb Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 22 Apr 2026 17:56:27 -0400 Subject: [PATCH 03/26] Add code blocks to examples --- dictionary.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dictionary.json b/dictionary.json index 57384d959..36de7d9d6 100644 --- a/dictionary.json +++ b/dictionary.json @@ -6824,7 +6824,7 @@ }, "updated_web_resources": { "caption": "Updated Web Resources", - "description": "The attempted or actual web_resources object update relative to the event `status_id` (e.g. `Success`, `Failure`, etc.)", + "description": "The attempted or actual web_resources object update relative to the event status_id (e.g. Success, Failure)", "type": "web_resource", "is_array": true }, From d3ade978896532e4350b618093078a2684953769 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 22 Apr 2026 17:57:50 -0400 Subject: [PATCH 04/26] Add punctuation --- dictionary.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dictionary.json b/dictionary.json index 36de7d9d6..d6ef6495e 100644 --- a/dictionary.json +++ b/dictionary.json @@ -6824,7 +6824,7 @@ }, "updated_web_resources": { "caption": "Updated Web Resources", - "description": "The attempted or actual web_resources object update relative to the event status_id (e.g. Success, Failure)", + "description": "The attempted or actual web_resources object update relative to the event status_id (e.g. Success, Failure).", "type": "web_resource", "is_array": true }, From acf578bea11abb017b7a48fa74d22e8c0b0566de Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 22 Apr 2026 18:02:45 -0400 Subject: [PATCH 05/26] Update verbiage for updated_web_resources --- dictionary.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dictionary.json b/dictionary.json index d6ef6495e..852a0c7ef 100644 --- a/dictionary.json +++ b/dictionary.json @@ -6824,7 +6824,7 @@ }, "updated_web_resources": { "caption": "Updated Web Resources", - "description": "The attempted or actual web_resources object update relative to the event status_id (e.g. Success, Failure).", + "description": "The new or intended state of the web_resources after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", "type": "web_resource", "is_array": true }, From 662d86b8351bea631ee0ed1ceb92bc1296adc7ad Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Thu, 23 Apr 2026 14:16:37 -0400 Subject: [PATCH 06/26] Remove unneeded deprecation from class-level --- events/application/web_resources_activity.json | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/events/application/web_resources_activity.json b/events/application/web_resources_activity.json index fa2fec10d..ea7676569 100644 --- a/events/application/web_resources_activity.json +++ b/events/application/web_resources_activity.json @@ -79,11 +79,7 @@ }, "web_resources_result": { "group": "primary", - "requirement": "recommended", - "@deprecated": { - "message": "Use the updated_web_resources attribute instead.", - "since": "1.9.0" - } + "requirement": "recommended" } }, "profiles": [ From fa482f50e4d375ad3ad537bb539eaeb96a576c15 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Thu, 23 Apr 2026 14:26:22 -0400 Subject: [PATCH 07/26] Deprecate user_result in lieu of updated_user --- dictionary.json | 11 ++++++++++- events/iam/account_change.json | 4 ++++ 2 files changed, 14 insertions(+), 1 deletion(-) diff --git a/dictionary.json b/dictionary.json index 852a0c7ef..ad3894df7 100644 --- a/dictionary.json +++ b/dictionary.json @@ -6822,6 +6822,11 @@ "description": "The number of unused services. See specific usage.", "type": "integer_t" }, + "updated_user": { + "caption": "Updated User", + "description": "The new or intended state of the user after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", + "type": "user" + }, "updated_web_resources": { "caption": "Updated Web Resources", "description": "The new or intended state of the web_resources after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", @@ -6874,7 +6879,11 @@ "user_result": { "caption": "User Result", "description": "The result of the user account change. It should contain the new values of the changed attributes.", - "type": "user" + "type": "user", + "@deprecated": { + "message": "Use the updated_user attribute instead.", + "since": "1.9.0" + } }, "users": { "caption": "Users", diff --git a/events/iam/account_change.json b/events/iam/account_change.json index d6361662d..e8df7b192 100644 --- a/events/iam/account_change.json +++ b/events/iam/account_change.json @@ -77,6 +77,10 @@ }, "profile": null }, + "updated_user": { + "group": "primary", + "requirement": "recommended" + }, "user": { "description": "The user that was a target of an activity.", "group": "primary", From 98f1344183a43eef595df874a74bcacc6eed550b Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Thu, 23 Apr 2026 14:43:08 -0400 Subject: [PATCH 08/26] Deprecate entity_result in lieu of updated_entity --- dictionary.json | 11 ++++++++++- events/iam/entity_management.json | 4 ++++ 2 files changed, 14 insertions(+), 1 deletion(-) diff --git a/dictionary.json b/dictionary.json index ad3894df7..d58c57e1b 100644 --- a/dictionary.json +++ b/dictionary.json @@ -2504,7 +2504,11 @@ "entity_result": { "caption": "Entity Result", "description": "The updated managed entity.", - "type": "managed_entity" + "type": "managed_entity", + "@deprecated": { + "message": "Use the updated_entity attribute instead.", + "since": "1.9.0" + } }, "environment_variables": { "caption": "Environment Variables", @@ -6822,6 +6826,11 @@ "description": "The number of unused services. See specific usage.", "type": "integer_t" }, + "updated_entity": { + "caption": "Updated Entity", + "description": "The new or intended state of the entity after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", + "type": "managed_entity" + }, "updated_user": { "caption": "Updated User", "description": "The new or intended state of the user after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", diff --git a/events/iam/entity_management.json b/events/iam/entity_management.json index 8792057c8..a4162e75c 100644 --- a/events/iam/entity_management.json +++ b/events/iam/entity_management.json @@ -81,6 +81,10 @@ "entity_result": { "group": "primary", "requirement": "recommended" + }, + "updated_entity": { + "group": "primary", + "requirement": "recommended" } } } \ No newline at end of file From 1a9ce0063b8b83a338c51239503049c91fe1e6f6 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Thu, 23 Apr 2026 14:53:01 -0400 Subject: [PATCH 09/26] Deprecate resources_result in lieu of updated_resources --- dictionary.json | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/dictionary.json b/dictionary.json index d58c57e1b..ba8aeb860 100644 --- a/dictionary.json +++ b/dictionary.json @@ -5462,7 +5462,11 @@ "caption": "Resource Results Array", "description": "Updated resources after an activity/event.", "type": "resource_details", - "is_array": true + "is_array": true, + "@deprecated": { + "message": "Use the updated_resources attribute instead.", + "since": "1.9.0" + } }, "response": { "caption": "API Response Details", @@ -6831,6 +6835,12 @@ "description": "The new or intended state of the entity after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", "type": "managed_entity" }, + "updated_resources": { + "caption": "Updated Resources", + "description": "The new or intended state of the resources after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", + "type": "resource_details", + "is_array": true + }, "updated_user": { "caption": "Updated User", "description": "The new or intended state of the user after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", From faaea2a9fc540ec0e180bb41580c829a75cf1b04 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Tue, 28 Apr 2026 18:00:08 -0400 Subject: [PATCH 10/26] Update state verbiage --- dictionary.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/dictionary.json b/dictionary.json index ba8aeb860..c10f82f97 100644 --- a/dictionary.json +++ b/dictionary.json @@ -6832,23 +6832,23 @@ }, "updated_entity": { "caption": "Updated Entity", - "description": "The new or intended state of the entity after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", + "description": "The intended state of the entity after the update. On Success, represents the actual post-update state.", "type": "managed_entity" }, "updated_resources": { "caption": "Updated Resources", - "description": "The new or intended state of the resources after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", + "description": "The intended state of the resources after the update. On Success, represents the actual post-update state.", "type": "resource_details", "is_array": true }, "updated_user": { "caption": "Updated User", - "description": "The new or intended state of the user after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", + "description": "The intended state of the user after the update. On Success, represents the actual post-update state.", "type": "user" }, "updated_web_resources": { "caption": "Updated Web Resources", - "description": "The new or intended state of the web_resources after the update. On Success, represents the actual post-update state; on Failure, represents the intended update that was not applied.", + "description": "The intended state of the web_resources after the update. On Success, represents the actual post-update state.", "type": "web_resource", "is_array": true }, From cc8861ac5486106af728f68b1f9b9910861be6c0 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Tue, 5 May 2026 15:42:27 -0400 Subject: [PATCH 11/26] Deprecate file_result in lieu of updated_file --- dictionary.json | 11 ++++++++++- events/application/file_hosting.json | 4 ++++ events/system/file_activity.json | 4 ++++ 3 files changed, 18 insertions(+), 1 deletion(-) diff --git a/dictionary.json b/dictionary.json index d7d31d351..09ea23fcd 100644 --- a/dictionary.json +++ b/dictionary.json @@ -2722,7 +2722,11 @@ "file_result": { "caption": "File Result", "description": "The result of the file change. It should contain the new values of the changed attributes.", - "type": "file" + "type": "file", + "@deprecated": { + "message": "Use the updated_file attribute instead.", + "since": "1.9.0" + } }, "files": { "caption": "Files", @@ -6876,6 +6880,11 @@ "description": "The intended state of the entity after the update. On Success, represents the actual post-update state.", "type": "managed_entity" }, + "updated_file": { + "caption": "Updated File", + "description": "The intended state of the file after the update. On Success, represents the actual post-update state.", + "type": "file" + }, "updated_resources": { "caption": "Updated Resources", "description": "The intended state of the resources after the update. On Success, represents the actual post-update state.", diff --git a/events/application/file_hosting.json b/events/application/file_hosting.json index b0a682576..79b195f36 100644 --- a/events/application/file_hosting.json +++ b/events/application/file_hosting.json @@ -146,6 +146,10 @@ "description": "The endpoint that performed the activity on the target file.", "group": "primary", "requirement": "required" + }, + "updated_file": { + "group": "context", + "requirement": "optional" } } } \ No newline at end of file diff --git a/events/system/file_activity.json b/events/system/file_activity.json index 7524b1de0..6014a3df3 100644 --- a/events/system/file_activity.json +++ b/events/system/file_activity.json @@ -100,6 +100,10 @@ "description": "The resulting file object when the activity was allowed and successful.", "group": "primary", "requirement": "recommended" + }, + "updated_file": { + "group": "primary", + "requirement": "recommended" } }, "references": [ From 01e00baecb42c4404daeac9bc0d6cff786fb7ea2 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Tue, 5 May 2026 16:32:22 -0400 Subject: [PATCH 12/26] Enhance updated_file descs, add link_target --- dictionary.json | 5 +++++ events/application/file_hosting.json | 1 + events/system/file_activity.json | 5 +++++ 3 files changed, 11 insertions(+) diff --git a/dictionary.json b/dictionary.json index 09ea23fcd..c0703fa4a 100644 --- a/dictionary.json +++ b/dictionary.json @@ -3839,6 +3839,11 @@ "type": "file_path_t", "is_array": true }, + "link_target": { + "caption": "Link Target", + "description": "", + "type": "file" + }, "load_balancer": { "caption": "Load Balancer", "description": "The Load Balancer object contains information related to the device that is distributing incoming traffic to specified destinations.", diff --git a/events/application/file_hosting.json b/events/application/file_hosting.json index 79b195f36..a954a6ffb 100644 --- a/events/application/file_hosting.json +++ b/events/application/file_hosting.json @@ -148,6 +148,7 @@ "requirement": "required" }, "updated_file": { + "description": "The intended state of the file after the update, including the `Update`, `Rename`, and `Move` activities", "group": "context", "requirement": "optional" } diff --git a/events/system/file_activity.json b/events/system/file_activity.json index 6014a3df3..7ff09e63c 100644 --- a/events/system/file_activity.json +++ b/events/system/file_activity.json @@ -101,7 +101,12 @@ "group": "primary", "requirement": "recommended" }, + "link_target": { + "group": "primary", + "requirement": "recommended" + }, "updated_file": { + "description": "The intended state of the file after the update, including the `Update`, `Rename` and `Set` activities. On Success, represents the actual post-update state.", "group": "primary", "requirement": "recommended" } From 560fe9c03faaa9fb7ff1f9dd55660b74cf989dce Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Tue, 5 May 2026 16:36:14 -0400 Subject: [PATCH 13/26] Enhance updated_file descs --- events/application/file_hosting.json | 2 +- events/system/file_activity.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/events/application/file_hosting.json b/events/application/file_hosting.json index a954a6ffb..2c0641213 100644 --- a/events/application/file_hosting.json +++ b/events/application/file_hosting.json @@ -148,7 +148,7 @@ "requirement": "required" }, "updated_file": { - "description": "The intended state of the file after the update, including the `Update`, `Rename`, and `Move` activities", + "description": "The intended state of the file after the update, including the Update, Rename, and Move activities", "group": "context", "requirement": "optional" } diff --git a/events/system/file_activity.json b/events/system/file_activity.json index 7ff09e63c..e997579e4 100644 --- a/events/system/file_activity.json +++ b/events/system/file_activity.json @@ -106,7 +106,7 @@ "requirement": "recommended" }, "updated_file": { - "description": "The intended state of the file after the update, including the `Update`, `Rename` and `Set` activities. On Success, represents the actual post-update state.", + "description": "The intended state of the file after the update, including the Update, Rename, and Set activities. On Success, represents the actual post-update state.", "group": "primary", "requirement": "recommended" } From afdfb715b7bbf1ac04b4edc266a02cb61b725d2c Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 6 May 2026 17:24:42 -0400 Subject: [PATCH 14/26] Add specificity to file activity update_ description --- events/system/file_activity.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/events/system/file_activity.json b/events/system/file_activity.json index e997579e4..34e33c114 100644 --- a/events/system/file_activity.json +++ b/events/system/file_activity.json @@ -106,7 +106,7 @@ "requirement": "recommended" }, "updated_file": { - "description": "The intended state of the file after the update, including the Update, Rename, and Set activities. On Success, represents the actual post-update state.", + "description": "The intended state of the file after the update, including the Update, Rename, Set Attributes and Set Security activities. On Success, represents the actual post-update state.", "group": "primary", "requirement": "recommended" } From d2082669e49f3d0d94977ca388f47631c1d04619 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 6 May 2026 17:25:42 -0400 Subject: [PATCH 15/26] Update dict desc for updated_file --- dictionary.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dictionary.json b/dictionary.json index c0703fa4a..68eb27ead 100644 --- a/dictionary.json +++ b/dictionary.json @@ -6882,12 +6882,12 @@ }, "updated_entity": { "caption": "Updated Entity", - "description": "The intended state of the entity after the update. On Success, represents the actual post-update state.", + "description": "The upadted entity. See specific usage.", "type": "managed_entity" }, "updated_file": { "caption": "Updated File", - "description": "The intended state of the file after the update. On Success, represents the actual post-update state.", + "description": "The updated file. See specific usage.", "type": "file" }, "updated_resources": { From 2e4cc8829068971655ebe6980caa285b8bf9779b Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 6 May 2026 17:27:55 -0400 Subject: [PATCH 16/26] Enhance class-specific description for updated_entity --- events/iam/entity_management.json | 1 + 1 file changed, 1 insertion(+) diff --git a/events/iam/entity_management.json b/events/iam/entity_management.json index a4162e75c..1cf297ee5 100644 --- a/events/iam/entity_management.json +++ b/events/iam/entity_management.json @@ -83,6 +83,7 @@ "requirement": "recommended" }, "updated_entity": { + "description": "The intended state of the entity after the update. On Success, represents the actual post-update state.", "group": "primary", "requirement": "recommended" } From ec19c0cea1553681069c1b269f77d527971861b6 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 6 May 2026 17:28:33 -0400 Subject: [PATCH 17/26] Clean up dictionary desc of updated_entity --- dictionary.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dictionary.json b/dictionary.json index 68eb27ead..b85aa2acd 100644 --- a/dictionary.json +++ b/dictionary.json @@ -6882,7 +6882,7 @@ }, "updated_entity": { "caption": "Updated Entity", - "description": "The upadted entity. See specific usage.", + "description": "The updated entity. See specific usage.", "type": "managed_entity" }, "updated_file": { From b70b27013e67cf302698456c4100de8d50b3eead Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 6 May 2026 17:29:30 -0400 Subject: [PATCH 18/26] Clean up dictionary desc of updated_resources --- dictionary.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dictionary.json b/dictionary.json index b85aa2acd..76444e789 100644 --- a/dictionary.json +++ b/dictionary.json @@ -6892,7 +6892,7 @@ }, "updated_resources": { "caption": "Updated Resources", - "description": "The intended state of the resources after the update. On Success, represents the actual post-update state.", + "description": "The updated resources. See specific usage.", "type": "resource_details", "is_array": true }, From ed1a03c819a504303638523ffc74441d295d5de8 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 6 May 2026 17:31:31 -0400 Subject: [PATCH 19/26] Clean up dictionary description and class description for updated_web_resources --- dictionary.json | 2 +- events/application/web_resources_activity.json | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/dictionary.json b/dictionary.json index 76444e789..12a4e2e3e 100644 --- a/dictionary.json +++ b/dictionary.json @@ -6903,7 +6903,7 @@ }, "updated_web_resources": { "caption": "Updated Web Resources", - "description": "The intended state of the web_resources after the update. On Success, represents the actual post-update state.", + "description": "The updated web resources. See specific usage.", "type": "web_resource", "is_array": true }, diff --git a/events/application/web_resources_activity.json b/events/application/web_resources_activity.json index ea7676569..bb91837c2 100644 --- a/events/application/web_resources_activity.json +++ b/events/application/web_resources_activity.json @@ -70,6 +70,7 @@ "requirement": "optional" }, "updated_web_resources": { + "description": "The intended state of the web_resources after the update. On Success, represents the actual post-update state.", "group": "primary", "requirement": "recommended" }, From d718fe4637e997723dfad40f044e46f2ac9b2418 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Wed, 6 May 2026 17:43:56 -0400 Subject: [PATCH 20/26] Clean up dictionary description for updated_user --- dictionary.json | 8 ++------ events/iam/account_change.json | 1 + 2 files changed, 3 insertions(+), 6 deletions(-) diff --git a/dictionary.json b/dictionary.json index 12a4e2e3e..5e60376c1 100644 --- a/dictionary.json +++ b/dictionary.json @@ -6898,7 +6898,7 @@ }, "updated_user": { "caption": "Updated User", - "description": "The intended state of the user after the update. On Success, represents the actual post-update state.", + "description": "The updated user. See specific usage.", "type": "user" }, "updated_web_resources": { @@ -6953,11 +6953,7 @@ "user_result": { "caption": "User Result", "description": "The result of the user account change. It should contain the new values of the changed attributes.", - "type": "user", - "@deprecated": { - "message": "Use the updated_user attribute instead.", - "since": "1.9.0" - } + "type": "user" }, "users": { "caption": "Users", diff --git a/events/iam/account_change.json b/events/iam/account_change.json index e8df7b192..3fa5a3e50 100644 --- a/events/iam/account_change.json +++ b/events/iam/account_change.json @@ -78,6 +78,7 @@ "profile": null }, "updated_user": { + "description": "The intended state of the user after the update. On Success, represents the actual post-update state.", "group": "primary", "requirement": "recommended" }, From 6958d7e4828caefd7481e05e1d412045ed87583f Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Tue, 26 May 2026 13:30:57 -0400 Subject: [PATCH 21/26] Address link_target in separate PR --- dictionary.json | 5 ----- events/system/file_activity.json | 4 ---- 2 files changed, 9 deletions(-) diff --git a/dictionary.json b/dictionary.json index 5e60376c1..d0e2fef88 100644 --- a/dictionary.json +++ b/dictionary.json @@ -3839,11 +3839,6 @@ "type": "file_path_t", "is_array": true }, - "link_target": { - "caption": "Link Target", - "description": "", - "type": "file" - }, "load_balancer": { "caption": "Load Balancer", "description": "The Load Balancer object contains information related to the device that is distributing incoming traffic to specified destinations.", diff --git a/events/system/file_activity.json b/events/system/file_activity.json index 34e33c114..2f943a203 100644 --- a/events/system/file_activity.json +++ b/events/system/file_activity.json @@ -101,10 +101,6 @@ "group": "primary", "requirement": "recommended" }, - "link_target": { - "group": "primary", - "requirement": "recommended" - }, "updated_file": { "description": "The intended state of the file after the update, including the Update, Rename, Set Attributes and Set Security activities. On Success, represents the actual post-update state.", "group": "primary", From f1ea76346e32555f9e3c5ed8d3e7cb370eeab58b Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Tue, 26 May 2026 14:56:45 -0400 Subject: [PATCH 22/26] Remove updated_user from account_change class since the class itself is also deprecated in 1.9 --- events/iam/account_change.json | 5 ----- 1 file changed, 5 deletions(-) diff --git a/events/iam/account_change.json b/events/iam/account_change.json index 4251de9f1..def4a729e 100644 --- a/events/iam/account_change.json +++ b/events/iam/account_change.json @@ -81,11 +81,6 @@ }, "profile": null }, - "updated_user": { - "description": "The intended state of the user after the update. On Success, represents the actual post-update state.", - "group": "primary", - "requirement": "recommended" - }, "user": { "description": "The user that was a target of an activity.", "group": "primary", From cdcf42533ce41190074b182d86c44647711b04fe Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Tue, 26 May 2026 15:08:46 -0400 Subject: [PATCH 23/26] Add changelog entry for updated attributes --- CHANGELOG.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 776db0a44..6046aa67c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -63,6 +63,7 @@ Thankyou! --> 1. Added `updated_job` that reflects the attempted or the actual updated job. [#1597](https://github.com/ocsf/ocsf-schema/pull/1597) 1. Added `properties` that is a set of characteristics associated with an entity. [#1597](https://github.com/ocsf/ocsf-schema/pull/1597) 1. Added `iam_role`, `iam_roles`, `updated_role`, `updated_group`, `updated_user` attributes. [#1603](https://github.com/ocsf/ocsf-schema/pull/1603) + 1. Added `updated_entity`, `updated_file`, `updated_resources`, and `updated_web_resources` attributes for reporting intended or actual post-update state. [#1618](https://github.com/ocsf/ocsf-schema/pull/1618) 1. Added `initiator` and `initiator_id` attributes for identifying which endpoint initiated a network communication, with generic `Unknown (0)` and `Other (99)` enums. [#1598](https://github.com/ocsf/ocsf-schema/pull/1598) @@ -71,6 +72,7 @@ Thankyou! --> * #### Event Classes 1. Added `updated_job` in `Scheduled Job Activity` class to reflect the actual or attempted state of the job upon update activity. [#1597](https://github.com/ocsf/ocsf-schema/pull/1597) 1. Added `iam_role` and role management support to `group_management`, `authorize_session`. Filled out the `group_management` class with complete lifecycle as well as added `resources`, `policies` to the discrete activities. [#1603](https://github.com/ocsf/ocsf-schema/pull/1603) + 1. Added `updated_*` attributes to `Entity Management`, `File Activity`, `File Hosting`, and `Web Resources Activity` for class-specific update result reporting. [#1618](https://github.com/ocsf/ocsf-schema/pull/1618) 1. Added `initiator_id` and `initiator` to `Network Activity` with network-specific enums `Source Endpoint (1)` and `Destination Endpoint (2)`, and updated `src_endpoint` and `dst_endpoint` descriptions to reflect bi-flow and asymmetric flow scenarios. [#1598](https://github.com/ocsf/ocsf-schema/pull/1598) * #### Profiles * #### Objects @@ -99,6 +101,7 @@ Thankyou! --> ### Deprecated 1. Deprecated `is_src_dst_assignment_known` dictionary attribute and its usage in `Network Activity` in favour of `initiator_id`. [#1598](https://github.com/ocsf/ocsf-schema/pull/1598) 1. Deprecated `message` attribute in the `http_response` object. The `code` and `status` attributes already convey the HTTP status code and reason phrase. [#1616](https://github.com/ocsf/ocsf-schema/pull/1616) +1. Deprecated `entity_result`, `file_result`, `resources_result`, and `web_resources_result` in favor of the corresponding `updated_*` attributes. [#1618](https://github.com/ocsf/ocsf-schema/pull/1618) 1. Deprecated `resource` in `Group Management` in favor of `resources`. [#1603](https://github.com/ocsf/ocsf-schema/pull/1603) 1. Deprecated usage of `cmd_line` attribute in favor of `job_actions.cmd_line` in the `job` object. [#1597](https://github.com/ocsf/ocsf-schema/pull/1597) 1. Deprecated usage of `last_run_time` attribute in favor of `job_triggers.last_run_time` in the `job` object. [#1597](https://github.com/ocsf/ocsf-schema/pull/1597) From 82827d53d9bcf97ab1ee9083c69d58c0c9ec3895 Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Tue, 26 May 2026 15:16:14 -0400 Subject: [PATCH 24/26] Add the post-update state verbiage to file hosting desc --- events/application/file_hosting.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/events/application/file_hosting.json b/events/application/file_hosting.json index 2c0641213..4ba22000c 100644 --- a/events/application/file_hosting.json +++ b/events/application/file_hosting.json @@ -148,7 +148,7 @@ "requirement": "required" }, "updated_file": { - "description": "The intended state of the file after the update, including the Update, Rename, and Move activities", + "description": "The intended state of the file after the update, including the Update, Rename, and Move activities. On Success, represents the actual post-update state.", "group": "context", "requirement": "optional" } From 008ff1018755108f5182e45b59d2dd0beaa63bde Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Tue, 26 May 2026 15:21:28 -0400 Subject: [PATCH 25/26] Update minor typo in changelog --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6046aa67c..d6cb2ad7b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -92,7 +92,7 @@ Thankyou! --> * #### Observables * #### Platform Extensions * #### Dictionary Attributes - 1. Impoved `job` object description to describe cases beyond System Activity class. + 1. Improved `job` object description to describe cases beyond System Activity class. ### Bugfixes 1. Fixed the static anti-pattern checker so dictionary attributes are analyzed with the full compiled dictionary; the `missing-sibling` rule no longer false-positives when the sibling exists in `dictionary.json`. [#1613](https://github.com/ocsf/ocsf-schema/pull/1613) From ecf1c3c180c4fbe22039accc9a0bf581651fc38b Mon Sep 17 00:00:00 2001 From: Mike Radka Date: Tue, 26 May 2026 15:47:40 -0400 Subject: [PATCH 26/26] Add metaschemas and CLSID to project-words for linter --- .github/.project-words.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/.project-words.txt b/.github/.project-words.txt index 7c485fa1d..48bcf3c4d 100644 --- a/.github/.project-words.txt +++ b/.github/.project-words.txt @@ -28,6 +28,7 @@ callsign CASB CDMA cdxgen +CLSID CMDB containerd cpid @@ -105,6 +106,7 @@ meid memoizee metaschema Metaschema +metaschemas minifilter MISP mklink