observable:AlternateDataStreamFacet leaf node


URI

https://ontology.unifiedcyberontology.org/uco/observable/AlternateDataStreamFacet

Label

AlternateDataStreamFacet

Description

An alternate data stream facet is a grouping of characteristics unique to data content stored within an NTFS file that is independent of the standard content stream of the file and is hidden from access by default NTFS file viewing mechanisms.

Usage

Instances of observable:AlternateDataStreamFacet can have the following properties:

PROPERTYTYPEDESCRIPTIONRANGE
From class owl:Thing
types:threadNextItem owl:ObjectProperty The link to a next item in a thread. owl:Thing
types:threadPreviousItem owl:ObjectProperty A direct link to a previous item in a thread. owl:Thing

Property Shapes

By the associated SHACL property shapes, instances of observable:AlternateDataStreamFacet can have the following properties:

PROPERTY

PROPERTY TYPE

DESCRIPTION

MIN COUNT

MAX COUNT

LOCAL RANGE
(type range for property on this class)

GLOBAL RANGE
(type range for property globally)

observable:AlternateDataStreamFacet
core:name owl:DatatypeProperty The name of a particular concept characterization.
1 xsd:string
xsd:string
observable:hashes owl:ObjectProperty Specifies any hashes computed over the section.
1 types:Hash
types:Hash
observable:size owl:DatatypeProperty Specifies the size of the section, in bytes.
1 xsd:integer
xsd:integer

Implementation

@prefix core: <https://ontology.unifiedcyberontology.org/uco/core/> .
@prefix observable: <https://ontology.unifiedcyberontology.org/uco/observable/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix types: <https://ontology.unifiedcyberontology.org/uco/types/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:AlternateDataStreamFacet a owl:Class,
        sh:NodeShape ;
    rdfs:label "AlternateDataStreamFacet"@en ;
    rdfs:comment "An alternate data stream facet is a grouping of characteristics unique to data content stored within an NTFS file that is independent of the standard content stream of the file and is hidden from access by default NTFS file viewing mechanisms."@en ;
    rdfs:subClassOf core:Facet ;
    sh:property [ sh:class types:Hash ;
            sh:maxCount 1 ;
            sh:nodeKind sh:IRI ;
            sh:path observable:hashes ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:size ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path core:name ] ;
    sh:targetClass observable:AlternateDataStreamFacet .