https://unifiedcyberontology.org/ontology/uco/observable#WindowsHook
Instances of observable:WindowsHook can have the following properties:
PROPERTY |
PROPERTY TYPE |
DESCRIPTION |
MIN COUNT |
MAX COUNT |
VALUE CONSTRAINTS |
LOCAL TYPE |
GLOBAL RANGE |
---|---|---|---|---|---|---|---|
observable:ObservableObject | |||||||
observable:hasChanged | owl:DatatypeProperty |
|
0 | 1 |
|
xsd:boolean
|
xsd:boolean
|
observable:state | owl:DatatypeProperty |
|
0 | 1 |
|
xsd:string
|
xsd:string
|
core:UcoObject | |||||||
core:createdBy | owl:ObjectProperty |
The identity that created a characterization of a concept.
|
0 | 1 |
|
core:IdentityAbstraction
|
core:IdentityAbstraction
|
core:description | owl:DatatypeProperty |
A description of a particular concept characterization.
|
0 | * |
|
xsd:string
|
xsd:string
|
core:externalReference | owl:ObjectProperty |
Specifies a reference to a resource outside of the UCO.
|
0 | * |
|
core:ExternalReference
|
core:ExternalReference
|
core:hasFacet | owl:ObjectProperty |
Further sets of properties characterizing a concept based on the particular context of the class and of the particular instance of the concept being characterized.
|
0 | * |
|
core:Facet
|
core:Facet
|
core:id | owl:DatatypeProperty |
A globally unique identifier for a characterization of a concept.
|
0 | 1 |
|
types:Identifier
|
types:Identifier
|
core:modifiedTime | owl:DatatypeProperty |
Specifies the time that this particular version of the object was modified. The object creator can use the time it deems most appropriate as the time this version of the object was modified. The value of the modified property for a given object version MUST be later than or equal to the value of the created property. Object creators MUST update the modified property when creating a new version of an object. The modified timestamp MUST be precise to the nearest millisecond (exactly three digits after the decimal place in seconds).
|
0 | * |
|
xsd:dateTime
|
xsd:dateTime
|
core:name | owl:DatatypeProperty |
The name of a particular concept characterization.
|
0 | 1 |
|
xsd:string
|
xsd:string
|
core:objectCreatedTime | owl:DatatypeProperty |
The time at which a characterization of a concept is created. This time pertains to the time of creating the record object, and is not an intrinsic characteristic of the concept.
|
0 | 1 |
|
xsd:dateTime
|
xsd:dateTime
|
core:objectMarking | owl:ObjectProperty |
Marking definitions to be applied to a particular concept characterization in its entirety.
|
0 | * |
|
core:MarkingDefinitionAbstraction
|
core:MarkingDefinitionAbstraction
|
core:specVersion | owl:DatatypeProperty |
The version of UCO ontology or subontology specification used to characterize a concept.
|
0 | 1 |
|
xsd:string
|
xsd:string
|
core:tag | owl:DatatypeProperty |
A generic tag/label.
|
0 | * |
|
xsd:string
|
xsd:string
|
core:type | owl:DatatypeProperty |
The explicitly-defined type of characterization of a concept.
|
0 | * |
|
xsd:string
|
xsd:string
|
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
observable:WindowsHook a owl:Class,
sh:NodeShape ;
rdfs:label "WindowsHook"@en ;
rdfs:comment "A Windows hook is a mechanism by which an application can intercept events, such as messages, mouse actions, and keystrokes within the Windows operating system. A function that intercepts a particular type of event is known as a hook procedure. A hook procedure can act on each event it receives, and then modify or discard the event. [based on https://docs.microsoft.com/en-us/windows/win32/winmsg/about-hooks]"@en ;
rdfs:subClassOf observable:ObservableObject ;
sh:targetClass observable:WindowsHook .