https://ontology.unifiedcyberontology.org/uco/observable/WindowsTaskFacet
A Windows Task facet is a grouping of characteristics unique to a Windows Task (a process that is scheduled to execute on a Windows operating system by the Windows Task Scheduler). [based on http://msdn.microsoft.com/en-us/library/windows/desktop/aa381311(v=vs.85).aspx]
Instances of observable:WindowsTaskFacet can have the following properties:
PROPERTY |
MIN COUNT |
MAX COUNT |
TYPE |
|
|---|---|---|---|---|
| observable:WindowsTaskFacet | ||||
| observable:account | 1 |
observable:ObservableObject
|
||
| observable:accountLogonType | 1 |
xsd:string
|
||
| observable:accountRunLevel | 1 |
xsd:string
|
||
| observable:actionList |
observable:TaskActionType
|
|||
| observable:application | 1 |
observable:ObservableObject
|
||
| observable:exitCode | 1 |
xsd:integer
|
||
| observable:flags |
xsd:string
|
|||
| observable:imageName | 1 |
xsd:string
|
||
| observable:maxRunTime | 1 |
xsd:integer
|
||
| observable:mostRecentRunTime | 1 |
xsd:dateTime
|
||
| observable:nextRunTime | 1 |
xsd:dateTime
|
||
| observable:observableCreatedTime | 1 |
xsd:dateTime
|
||
| observable:parameters | 1 |
xsd:string
|
||
| observable:priority | 1 | |||
| observable:status | 1 |
xsd:string
|
||
| observable:taskComment | 1 |
xsd:string
|
||
| observable:taskCreator | 1 |
xsd:string
|
||
| observable:triggerList |
observable:TriggerType
|
|||
| observable:workItemData | 1 |
observable:ObservableObject
|
||
| observable:workingDirectory | 1 |
observable:ObservableObject
|
||
@prefix core: <https://ontology.unifiedcyberontology.org/uco/core/> .
@prefix observable: <https://ontology.unifiedcyberontology.org/uco/observable/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
observable:WindowsTaskFacet a owl:Class,
sh:NodeShape ;
rdfs:label "WindowsTaskFacet"@en ;
rdfs:comment "A Windows Task facet is a grouping of characteristics unique to a Windows Task (a process that is scheduled to execute on a Windows operating system by the Windows Task Scheduler). [based on http://msdn.microsoft.com/en-us/library/windows/desktop/aa381311(v=vs.85).aspx]"@en ;
rdfs:subClassOf core:Facet ;
sh:property [ sh:class observable:ObservableObject ;
sh:maxCount 1 ;
sh:nodeKind sh:IRI ;
sh:path observable:account ],
[ sh:class observable:ObservableObject ;
sh:maxCount 1 ;
sh:nodeKind sh:IRI ;
sh:path observable:application ],
[ sh:class observable:ObservableObject ;
sh:maxCount 1 ;
sh:nodeKind sh:IRI ;
sh:path observable:workItemData ],
[ sh:class observable:ObservableObject ;
sh:maxCount 1 ;
sh:nodeKind sh:IRI ;
sh:path observable:workingDirectory ],
[ sh:class observable:TaskActionType ;
sh:nodeKind sh:IRI ;
sh:path observable:actionList ],
[ sh:class observable:TriggerType ;
sh:nodeKind sh:IRI ;
sh:path observable:triggerList ],
[ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:mostRecentRunTime ],
[ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:nextRunTime ],
[ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:observableCreatedTime ],
[ sh:datatype xsd:integer ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:exitCode ],
[ sh:datatype xsd:integer ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:maxRunTime ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:accountLogonType ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:accountRunLevel ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:imageName ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:parameters ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:taskComment ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:taskCreator ],
[ sh:datatype xsd:string ;
sh:message "As of UCO 1.4.0, the datatype to use for observable:flags should be xsd:string. Not using xsd:string will be an error in UCO 2.0.0." ;
sh:path observable:flags ;
sh:severity sh:Warning ],
[ sh:datatype xsd:string ;
sh:message "As of UCO 1.4.0, the datatype to use for observable:status should be xsd:string. Not using xsd:string will be an error in UCO 2.0.0." ;
sh:path observable:status ;
sh:severity sh:Warning ],
[ sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:priority ],
[ sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:status ],
[ sh:message "As of UCO 1.4.0, the datatype to use for observable:priority should be xsd:string or xsd:integer. Not using xsd:string or xsd:integer will be an error in UCO 2.0.0." ;
sh:or ( [ sh:datatype xsd:integer ] [ sh:datatype xsd:string ] ) ;
sh:path observable:priority ;
sh:severity sh:Warning ],
[ sh:nodeKind sh:Literal ;
sh:path observable:flags ],
observable:WindowsTaskFacet-flags-in-shape,
observable:WindowsTaskFacet-priority-in-shape,
observable:WindowsTaskFacet-status-in-shape ;
sh:targetClass observable:WindowsTaskFacet .