observable:DiskPartitionFacet leaf node

core:Facet
- observable:DiskPartitionFacet

URI

https://unifiedcyberontology.org/ontology/uco/observable#DiskPartitionFacet

Label

DiskPartitionFacet

Description

A disk partition facet is a grouping of characteristics unique to a particular managed region on a storage mechanism.

Superclasses (1)

core:Facet

Shapes (1)

observable:DiskPartitionFacet

Usage

Instances of observable:DiskPartitionFacet can have the following properties:

PROPERTY	TYPE	DESCRIPTION	RANGE
From class owl:Thing
investigation:authorizationIdentifier	owl:DatatypeProperty	The identifier for a particular authorization (e.g. warrant number)	xsd:string
investigation:authorizationType	owl:DatatypeProperty	A label categorizing a type of authorization (e.g. warrant)	xsd:string
investigation:exhibitNumber	owl:DatatypeProperty	Specifies a unique identifier assigned to a given object at any stage of an investigation to differentiate it from all other objects.	xsd:string
investigation:focus	owl:DatatypeProperty	Specifies the topical focus of an investigation.	xsd:string
investigation:investigationForm	owl:DatatypeProperty	A label categorizing a type of investigation (case, incident, suspicious-activity, etc.)	vocab:InvestigationFormVocab
investigation:investigationStatus	owl:DatatypeProperty	A label characterizing the status of an investigation (open, closed, etc.).	xsd:string
investigation:relevantAuthorization	owl:ObjectProperty	Specifies an authorization relevant to a particular investigation.	investigation:Authorization
investigation:rootExhibitNumber	owl:DatatypeProperty	Specifies a unique identifier assigned to a given object at the start of its treatment as part of an investigation. The first node in a provenance chain, which can be viewed as a heirarchical tree originating from a single root.	xsd:string

Property Shapes

By the associated SHACL property shapes, instances of observable:DiskPartitionFacet can have the following properties:

PROPERTY	PROPERTY TYPE	DESCRIPTION	MIN COUNT	MAX COUNT	LOCAL RANGE (type range for property on this class)	GLOBAL RANGE (type range for property globally)
observable:DiskPartitionFacet
observable:diskPartitionType	owl:DatatypeProperty	Specifies the type of partition being characterized.	0	1	xsd:string	xsd:string
observable:mountPoint	owl:DatatypeProperty	Specifies the mount point of the partition.	0	1	xsd:string	xsd:string
observable:observableCreatedTime	owl:DatatypeProperty	The date and time at which the observable object being characterized was created. This time pertains to an intrinsic characteristic of the observable object, and would be consistent across independent characterizations or observations of the observable object.	0	1	xsd:dateTime	xsd:dateTime
observable:partitionID	owl:DatatypeProperty	Specifies the identifier of the partition, as provided by the containing partition table. This identifier is the index value within the partition table, and is expected to be an incrementing alphanumeric value (numeric in most partition systems), not a GUID or UUID. Sorting partitions by this index should first attempt to sort a numeric cast of the value.	0	1	xsd:string	xsd:string
observable:partitionLength	owl:DatatypeProperty	Specifies the length of the partition, in bytes.	0	1	xsd:integer	xsd:integer
observable:partitionOffset	owl:DatatypeProperty	Specifies the starting offset of the partition, in bytes.	0	1	xsd:integer	xsd:integer
observable:spaceLeft	owl:DatatypeProperty	Specifies the amount of space left on the partition, in bytes.	0	1	xsd:integer	xsd:integer
observable:spaceUsed	owl:DatatypeProperty	Specifies the amount of space used on the partition, in bytes.	0	1	xsd:integer	xsd:integer
observable:totalSpace	owl:DatatypeProperty	Specifies the total amount of space available on the partition, in bytes.	0	1	xsd:integer	xsd:integer

Implementation

@prefix core: <https://unifiedcyberontology.org/ontology/uco/core#> .
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:DiskPartitionFacet a owl:Class,
        sh:NodeShape ;
    rdfs:label "DiskPartitionFacet"@en ;
    rdfs:comment "A disk partition facet is a grouping of characteristics unique to a particular managed region on a storage mechanism."@en ;
    rdfs:subClassOf core:Facet ;
    sh:property [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:observableCreatedTime ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:partitionLength ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:partitionOffset ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:spaceLeft ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:spaceUsed ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:totalSpace ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:diskPartitionType ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:mountPoint ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:partitionID ] ;
    sh:targetClass observable:DiskPartitionFacet .