observable:WindowsPrefetchFacet leaf node

core:Facet
- observable:WindowsPrefetchFacet

URI

https://unifiedcyberontology.org/ontology/uco/observable#WindowsPrefetchFacet

Label

WindowsPrefetchFacet

Description

A Windows prefetch facet is a grouping of characteristics unique to entries in the Windows prefetch file (used to speed up application startup starting with Windows XP).

Superclasses (1)

core:Facet

Shapes (1)

observable:WindowsPrefetchFacet

Shape Properties

Instances of observable:WindowsPrefetchFacet can have the following properties:

PROPERTY	PROPERTY TYPE	DESCRIPTION	MIN COUNT	MAX COUNT	LOCAL TYPE (type defined for property on this class)	GLOBAL RANGE (type range for property globally)
observable:WindowsPrefetchFacet
observable:accessedDirectory	owl:ObjectProperty	Directories accessed by the prefetch application during startup.	0	*	observable:ObservableObject	observable:ObservableObject
observable:accessedFile	owl:ObjectProperty	Files (e.g., DLLs and other support files) used by the application during startup.	0	*	observable:ObservableObject	observable:ObservableObject
observable:applicationFileName	owl:DatatypeProperty	Name of the executable of the prefetch file.	0	1	xsd:string	xsd:string
observable:firstRun	owl:DatatypeProperty	Timestamp of when the prefetch application was first run.	0	1	xsd:dateTime	xsd:dateTime
observable:lastRun	owl:DatatypeProperty	Timestamp of when the prefetch application was last run.	0	1	xsd:dateTime	xsd:dateTime
observable:prefetchHash	owl:DatatypeProperty	An eight character hash of the location from which the application was run.	0	1	xsd:string	xsd:string
observable:timesExecuted	owl:DatatypeProperty	The number of times the prefetch application has executed.	0	1	xsd:integer	xsd:integer
observable:volume	owl:ObjectProperty	The volume from which the prefetch application was run. If the applicatin was run from multiple volumes, there will be a separate prefetch file for each.	0	1	observable:ObservableObject	observable:ObservableObject

Implementation

@prefix core: <https://unifiedcyberontology.org/ontology/uco/core#> .
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:WindowsPrefetchFacet a owl:Class,
        sh:NodeShape ;
    rdfs:label "WindowsPrefetchFacet"@en ;
    rdfs:comment "A Windows prefetch facet is a grouping of characteristics unique to entries in the Windows prefetch file (used to speed up application startup starting with Windows XP)."@en ;
    rdfs:subClassOf core:Facet ;
    sh:property [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:volume ],
        [ sh:class observable:ObservableObject ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:accessedDirectory ],
        [ sh:class observable:ObservableObject ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:accessedFile ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:firstRun ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:lastRun ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:timesExecuted ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:applicationFileName ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:prefetchHash ] ;
    sh:targetClass observable:WindowsPrefetchFacet .