Skip to content

v0.1.0

v0.1.0 — M0 + M1: OCSF 1.8 core library
@docJerem docJerem tagged this 16 Apr 15:45 
First release of the ocsf Elixir library.

Scope: Authentication class (3002) with full OCSF 1.8 compliance.

Features:
- OCSF.Events.Authentication: logon, logoff, preauth,
  authentication_ticket, account_switch builders
- OCSF.Event struct with new/1, from_map/1, Jason.Encoder
- OCSF.validate/1: 12-step structural validation
- Serialization: to_map/1, to_json/1 (OCSF-compliant nested JSON)
- Deserialization: from_map/1 with round-trip guarantee
- OCSF.Flatten: nested map to __-joined flat projection
- OCSF.Policy: allow/deny/transform PII redaction
- OCSF.EventCodeFormat: format-driven event_code generation
- OCSF.Correlation: process-dict correlation scope
- OCSF.Telemetry: telemetry event emission
- OCSF.Classification: data class taxonomy + PII helpers
- All enum modules: Category, Class, Activity, Severity, Status,
  StatusDetail, AuthProtocol (verified against official OCSF schema)
- UUIDv7 via uuid_v7 library

QA:
- 259 tests, 0 failures, 99.55% coverage
- mix audit fully clean (credo, dialyzer, doctor, sobelow)
- Schema conformance validated against vendored OCSF 1.8 schema
- Enum values + captions verified against official definitions
- Golden fixtures: logon_success, logon_failure, preauth
- Python cross-validation via ocsf-lib confirms compliance
- Benchmarks: ~400K events/sec builder throughput
Assets 2
Loading