observable:WindowsThreadFacet leaf node


URI

https://ontology.unifiedcyberontology.org/uco/observable/WindowsThreadFacet

Label

WindowsThreadFacet

Description

A Windows thread facet is a grouping os characteristics unique to a single thread of execution within a Windows process.

Usage

Instances of observable:WindowsThreadFacet can have the following properties:

PROPERTYTYPEDESCRIPTIONRANGE
From class owl:Thing
core:informalType owl:DatatypeProperty Informal Type serves as a parent property for string-valued properties meant to describe a type without implementing a class design. This property hierarchy supports a balancing point between semantic specificity and operational agility. The known benefits of describing types rather than implementing them include swift extensibility of some existing, or possibly non-existing, subclass hierarchy in UCO without requiring training in ontological development, taxonomic specification, or OWL, SHACL, or RDF maintenance logistics. The known detractions of using string-literals for type descriptions include that used vocabularies may require careful maintenance among data-sharing parties; that vocabularies require independent logistics (external to UCO) for providing definitions (i.e., dictionary-style semantics) to string-literals chosen; and that string-literals cannot by themselves encode hierarchical structure or entailments, such as the informal device type string 'ExamplePhone 8 P4321' entailing 'ExamplePhone 8', 'ExamplePhone', or 'ExamplePhone models discontinued in 2020'. Usage of Informal Type to house strings should be weighed against usage of classes when classes are available, and should periodically be reviewed for potential additions to UCO's class hierarchy or downstream extensions thereof. owl:Thing
types:threadNextItem owl:ObjectProperty The link to a next item in a thread. owl:Thing
types:threadPreviousItem owl:ObjectProperty A direct link to a previous item in a thread. owl:Thing

Property Shapes

By the associated SHACL property shapes, instances of observable:WindowsThreadFacet can have the following properties:

PROPERTY

PROPERTY TYPE

DESCRIPTION

MIN COUNT

MAX COUNT

LOCAL RANGE
(type range for property on this class)

GLOBAL RANGE
(type range for property globally)

observable:WindowsThreadFacet
observable:context owl:DatatypeProperty
1 xsd:string
xsd:string
observable:creationFlags owl:DatatypeProperty
xsd:unsignedInt
xsd:unsignedInt
observable:creationTime owl:DatatypeProperty
1 xsd:dateTime
xsd:dateTime
observable:observableCreatedTime owl:DatatypeProperty The date and time at which the observable object being characterized was created. This time pertains to an intrinsic characteristic of the observable object, and would be consistent across independent characterizations or observations of the observable object.
1 xsd:dateTime
xsd:dateTime
observable:parameterAddress owl:DatatypeProperty
xsd:hexBinary
xsd:hexBinary
observable:priority owl:DatatypeProperty The priority of the email.
1 xsd:integer
owl:Thing
observable:runningStatus owl:DatatypeProperty
1 xsd:string
xsd:string
observable:securityAttributes owl:DatatypeProperty
1 xsd:string
xsd:string
observable:stackSize owl:DatatypeProperty
xsd:nonNegativeInteger
xsd:nonNegativeInteger
observable:startAddress owl:DatatypeProperty
xsd:hexBinary
xsd:hexBinary
observable:threadID owl:DatatypeProperty
xsd:nonNegativeInteger
xsd:nonNegativeInteger

Implementation

@prefix core: <https://ontology.unifiedcyberontology.org/uco/core/> .
@prefix observable: <https://ontology.unifiedcyberontology.org/uco/observable/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:WindowsThreadFacet a owl:Class,
        sh:NodeShape ;
    rdfs:label "WindowsThreadFacet"@en ;
    rdfs:comment "A Windows thread facet is a grouping os characteristics unique to a single thread of execution within a Windows process."@en ;
    rdfs:subClassOf core:Facet ;
    sh:property [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:creationTime ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:observableCreatedTime ],
        [ sh:datatype xsd:hexBinary ;
            sh:nodeKind sh:Literal ;
            sh:path observable:parameterAddress ],
        [ sh:datatype xsd:hexBinary ;
            sh:nodeKind sh:Literal ;
            sh:path observable:startAddress ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:priority ],
        [ sh:datatype xsd:nonNegativeInteger ;
            sh:nodeKind sh:Literal ;
            sh:path observable:stackSize ],
        [ sh:datatype xsd:nonNegativeInteger ;
            sh:nodeKind sh:Literal ;
            sh:path observable:threadID ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:context ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:runningStatus ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:securityAttributes ],
        [ sh:datatype xsd:unsignedInt ;
            sh:nodeKind sh:Literal ;
            sh:path observable:creationFlags ] ;
    sh:targetClass observable:WindowsThreadFacet .