observable:AlternateDataStream leaf node

owl:Thing
- observable:AlternateDataStream

URI

https://unifiedcyberontology.org/ontology/uco/observable#AlternateDataStream

Label

AlternateDataStream

Description

An alternate data stream is data content stored within an NTFS file that is independent of the standard content stream of the file and is hidden from access by default NTFS file viewing mechanisms.

Shapes (1)

observable:AlternateDataStream

Shape Properties

Instances of observable:AlternateDataStream can have the following properties:

PROPERTY	PROPERTY TYPE	DESCRIPTION	MIN COUNT	MAX COUNT	LOCAL TYPE (type defined for property on this class)	GLOBAL RANGE (type range for property globally)
observable:AlternateDataStream
core:name	owl:DatatypeProperty	The name of a particular concept characterization.	1	1	xsd:string	xsd:string
observable:hashes	owl:ObjectProperty	Specifies any hashes computed over the section.	0	1	types:Hash	types:Hash
observable:size	owl:DatatypeProperty	Specifies the size of the section, in bytes.	0	1	xsd:integer	xsd:integer

Implementation

@prefix core: <https://unifiedcyberontology.org/ontology/uco/core#> .
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix types: <https://unifiedcyberontology.org/ontology/uco/types#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:AlternateDataStream a owl:Class,
        sh:NodeShape ;
    rdfs:label "AlternateDataStream"@en ;
    rdfs:comment "An alternate data stream is data content stored within an NTFS file that is independent of the standard content stream of the file and is hidden from access by default NTFS file viewing mechanisms."@en ;
    sh:property [ sh:class types:Hash ;
            sh:maxCount 1 ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:hashes ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:size ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:minCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path core:name ] ;
    sh:targetClass observable:AlternateDataStream .