diff --git a/CHANGELOG.md b/CHANGELOG.md
index 20abe8471..d19b300bd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -68,6 +68,7 @@ Thankyou! -->
1. Added `altitude_ceiling`, `altitude_floor`, `geodetic_altitude`, `aerial_height`, `horizontal_accuracy`, `pressure_altitude`, `radius`, `speed`, `track_direction`, and `vertical_speed` all to support `operating_area` and `unmanned_aerial_system` objects. #1169
1. Added `variable_name` and `variable_value` as `long_string`. #1228
1. Added `imei_list` as an array `string_t`. #1225
+ 1. Added `cpid` as a `uuid_t`. #1246
* #### Objects
1. Added `environment_variable` object. #1172
1. Added `advisory` object. #1176
@@ -110,6 +111,7 @@ Thankyou! -->
1. Added `geodetic_altitude`, `height`, `horizontal_accuracy`, and `pressure_altitude` to `location`. #1169
1. Added `location` to `managed_entity`. #1169
1. Added `imei_list` to the `device` object. #1225
+ 1. Added `cpid` to the `process` object. `cpid` added to process identification `at_least_one` constraint. #1246
### Bugfixes
1. Added sibling definition to `confidence_id` in dictionary, accurately associating `confidence` as its sibling. #1180
diff --git a/dictionary.json b/dictionary.json
index 1a9476673..33c29e98b 100644
--- a/dictionary.json
+++ b/dictionary.json
@@ -1168,6 +1168,13 @@
"description": "The Common Platform Enumeration (CPE) name as described by (NIST) For example: cpe:/a:apple:safari:16.2
.",
"type": "string_t"
},
+ "cpid": {
+ "caption": "Common Process Identifier",
+ "source": "cpid",
+ "references": [{"url": "https://github.com/ocsf/common-process-id", "description": "OCSF Common Process Identifier (CPID) Specification"}],
+ "description": "A unique process identifier that can be assigned deterministically by multiple system data producers.",
+ "type": "uuid_t"
+ },
"cpu_bits": {
"caption": "CPU Bits",
"description": "The cpu architecture, the number of bits used for addressing in memory. For example: 32
or 64
.",
diff --git a/objects/process.json b/objects/process.json
index 1ae0f2f53..b13220475 100644
--- a/objects/process.json
+++ b/objects/process.json
@@ -14,6 +14,9 @@
"cmd_line": {
"requirement": "recommended"
},
+ "cpid":{
+ "requirement": "recommended"
+ },
"created_time": {
"description": "The time when the process was created/started.",
"requirement": "recommended"
@@ -80,7 +83,8 @@
"constraints": {
"at_least_one": [
"pid",
- "uid"
+ "uid",
+ "cpid"
]
}
}