https://ontology.unifiedcyberontology.org/uco/observable/AlternateDataStream
An alternate data stream is data content stored within an NTFS file that is independent of the standard content stream of the file and is hidden from access by default NTFS file viewing mechanisms.
Instances of observable:AlternateDataStream can have the following properties:
PROPERTY |
MIN COUNT |
MAX COUNT |
TYPE |
|
|---|---|---|---|---|
| observable:ObservableObject | ||||
| observable:hasChanged | 1 |
xsd:boolean
|
||
| observable:state | 1 |
xsd:string
|
||
| core:UcoObject | ||||
| core:createdBy | 1 |
core:IdentityAbstraction
|
||
| core:description |
xsd:string
|
|||
| core:externalReference | 0 |
core:ExternalReference
|
||
| core:hasFacet |
core:Facet
|
|||
| core:modifiedTime |
xsd:dateTime
|
|||
| core:name | 1 |
xsd:string
|
||
| core:objectCreatedTime | 1 |
xsd:dateTime
|
||
| core:objectMarking |
core:MarkingDefinitionAbstraction
|
|||
| core:specVersion | 1 |
xsd:string
|
||
| core:tag |
xsd:string
|
|||
@prefix observable: <https://ontology.unifiedcyberontology.org/uco/observable/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
observable:AlternateDataStream a owl:Class,
sh:NodeShape ;
rdfs:label "AlternateDataStream"@en ;
rdfs:comment "An alternate data stream is data content stored within an NTFS file that is independent of the standard content stream of the file and is hidden from access by default NTFS file viewing mechanisms."@en ;
rdfs:subClassOf observable:ObservableObject ;
sh:targetClass observable:AlternateDataStream .