Process' environment variables array can be simplified #1272
Labels
enhancement
New feature or request
system_activity
Issues related to System Activity Category
v1.4.0 or later
Changes marked for versions beyond v1.3.0 of OCSF
The 1.4.0-dev draft added the ability to store a Process' environment variables as an array. To accommodate situations where the variable's name and/or value are very long and must be truncated, the long_string object was used as it provides built-in truncation indicators. However, when
long_string
is used in an array, as it is appropriate for storing multiple environment variables, the output data can be overly complex. @zschmerber shared in thesystem-activity
Slack channel the following example:We should revisit the
environment_variable
object definition and seek ways to simplify the data representation.The text was updated successfully, but these errors were encountered: