https://ontology.unifiedcyberontology.org/uco/observable/AlternateDataStreamFacet
An alternate data stream facet is a grouping of characteristics unique to data content stored within an NTFS file that is independent of the standard content stream of the file and is hidden from access by default NTFS file viewing mechanisms.
Instances of observable:AlternateDataStreamFacet can have the following properties:
PROPERTY |
MIN COUNT |
MAX COUNT |
TYPE |
|
|---|---|---|---|---|
| observable:AlternateDataStreamFacet | ||||
| core:name | 1 |
xsd:string
|
||
| observable:hashes | 1 |
types:Hash
|
||
| observable:size | 1 |
xsd:integer
|
||
@prefix core: <https://ontology.unifiedcyberontology.org/uco/core/> .
@prefix observable: <https://ontology.unifiedcyberontology.org/uco/observable/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix types: <https://ontology.unifiedcyberontology.org/uco/types/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
observable:AlternateDataStreamFacet a owl:Class,
sh:NodeShape ;
rdfs:label "AlternateDataStreamFacet"@en ;
rdfs:comment "An alternate data stream facet is a grouping of characteristics unique to data content stored within an NTFS file that is independent of the standard content stream of the file and is hidden from access by default NTFS file viewing mechanisms."@en ;
rdfs:subClassOf core:Facet ;
sh:property [ sh:class types:Hash ;
sh:maxCount 1 ;
sh:nodeKind sh:IRI ;
sh:path observable:hashes ],
[ sh:datatype xsd:integer ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:size ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path core:name ] ;
sh:targetClass observable:AlternateDataStreamFacet .