observable:WindowsThreadFacet leaf node

core:Facet
- observable:WindowsThreadFacet

URI

https://ontology.unifiedcyberontology.org/uco/observable/WindowsThreadFacet

Label

WindowsThreadFacet

Description

A Windows thread facet is a grouping os characteristics unique to a single thread of execution within a Windows process.

Superclasses (3)

core:Facet

core:UcoInherentCharacterizationThing

core:UcoThing

Shapes (1)

observable:WindowsThreadFacet

Usage

Instances of observable:WindowsThreadFacet can have the following properties:

PROPERTY	TYPE	DESCRIPTION	RANGE
From class owl:Thing
types:threadNextItem	owl:ObjectProperty	The link to a next item in a thread.	owl:Thing
types:threadPreviousItem	owl:ObjectProperty	A direct link to a previous item in a thread.	owl:Thing

Property Shapes

By the associated SHACL property shapes, instances of observable:WindowsThreadFacet can have the following properties:

PROPERTY	PROPERTY TYPE	DESCRIPTION	MAX COUNT	LOCAL RANGE (type range for property on this class)	GLOBAL RANGE (type range for property globally)
observable:WindowsThreadFacet
observable:context	owl:DatatypeProperty		1	xsd:string	xsd:string
observable:creationFlags	owl:DatatypeProperty			xsd:unsignedInt	xsd:unsignedInt
observable:creationTime	owl:DatatypeProperty		1	xsd:dateTime	xsd:dateTime
observable:observableCreatedTime	owl:DatatypeProperty	The date and time at which the observable object being characterized was created. This time pertains to an intrinsic characteristic of the observable object, and would be consistent across independent characterizations or observations of the observable object.	1	xsd:dateTime	xsd:dateTime
observable:parameterAddress	owl:DatatypeProperty			xsd:hexBinary	xsd:hexBinary
observable:priority	owl:DatatypeProperty	The priority of the email.	1	xsd:integer	owl:Thing
observable:runningStatus	owl:DatatypeProperty		1	xsd:string	xsd:string
observable:securityAttributes	owl:DatatypeProperty		1	xsd:string	xsd:string
observable:stackSize	owl:DatatypeProperty			xsd:nonNegativeInteger	xsd:nonNegativeInteger
observable:startAddress	owl:DatatypeProperty			xsd:hexBinary	xsd:hexBinary
observable:threadID	owl:DatatypeProperty			xsd:nonNegativeInteger	xsd:nonNegativeInteger

Implementation

@prefix core: <https://ontology.unifiedcyberontology.org/uco/core/> .
@prefix observable: <https://ontology.unifiedcyberontology.org/uco/observable/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:WindowsThreadFacet a owl:Class,
        sh:NodeShape ;
    rdfs:label "WindowsThreadFacet"@en ;
    rdfs:comment "A Windows thread facet is a grouping os characteristics unique to a single thread of execution within a Windows process."@en ;
    rdfs:subClassOf core:Facet ;
    sh:property [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:creationTime ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:observableCreatedTime ],
        [ sh:datatype xsd:hexBinary ;
            sh:nodeKind sh:Literal ;
            sh:path observable:parameterAddress ],
        [ sh:datatype xsd:hexBinary ;
            sh:nodeKind sh:Literal ;
            sh:path observable:startAddress ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:priority ],
        [ sh:datatype xsd:nonNegativeInteger ;
            sh:nodeKind sh:Literal ;
            sh:path observable:stackSize ],
        [ sh:datatype xsd:nonNegativeInteger ;
            sh:nodeKind sh:Literal ;
            sh:path observable:threadID ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:context ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:runningStatus ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:securityAttributes ],
        [ sh:datatype xsd:unsignedInt ;
            sh:nodeKind sh:Literal ;
            sh:path observable:creationFlags ] ;
    sh:targetClass observable:WindowsThreadFacet .