observable:EventRecordFacet leaf node


URI

https://ontology.unifiedcyberontology.org/uco/observable/EventRecordFacet

Label

EventRecordFacet

Description

An event record facet is a grouping of characteristics unique to something that happens in a digital context (e.g., operating system events).

Target Classes (1)

Shape Properties

Instances of observable:EventRecordFacet can have the following properties:

PROPERTY

MIN COUNT

MAX COUNT

TYPE

observable:EventRecordFacet
observable:account 1 observable:ObservableObject
observable:application 1 observable:ObservableObject
observable:cyberAction 1 observable:ObservableAction
observable:endTime 1 xsd:dateTime
1 xsd:string
observable:eventRecordDevice 1 observable:ObservableObject
observable:eventRecordID 1 xsd:string
observable:eventRecordRaw 1 xsd:string
observable:eventRecordServiceName 1 xsd:string
observable:eventRecordText 1 xsd:string
observable:eventType 1 xsd:string
observable:observableCreatedTime 1 xsd:dateTime
observable:startTime 1 xsd:dateTime

Implementation

@prefix core: <https://ontology.unifiedcyberontology.org/uco/core/> .
@prefix observable: <https://ontology.unifiedcyberontology.org/uco/observable/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:EventRecordFacet a owl:Class,
        sh:NodeShape ;
    rdfs:label "EventRecordFacet"@en ;
    rdfs:comment "An event record facet is a grouping of characteristics unique to something that happens in a digital context (e.g., operating system events)."@en ;
    rdfs:subClassOf core:Facet ;
    sh:property [ sh:class observable:ObservableAction ;
            sh:maxCount 1 ;
            sh:nodeKind sh:IRI ;
            sh:path observable:cyberAction ],
        [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:IRI ;
            sh:path observable:account ],
        [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:IRI ;
            sh:path observable:application ],
        [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:IRI ;
            sh:path observable:eventRecordDevice ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:endTime ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:observableCreatedTime ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:startTime ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:eventID ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:eventRecordID ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:eventRecordRaw ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:eventRecordServiceName ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:eventRecordText ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:eventType ] ;
    sh:targetClass observable:EventRecordFacet .