observable:DiskPartitionFacet leaf node


URI

https://unifiedcyberontology.org/ontology/uco/observable#DiskPartitionFacet

Label

DiskPartitionFacet

Description

A disk partition facet is a grouping of characteristics unique to a particular managed region on a storage mechanism.

Superclasses (1)

Usage

Instances of observable:DiskPartitionFacet can have the following properties:

PROPERTYTYPEDESCRIPTIONRANGE
From class owl:Thing
investigation:authorizationIdentifier owl:DatatypeProperty The identifier for a particular authorization (e.g. warrant number) xsd:string
investigation:authorizationType owl:DatatypeProperty A label categorizing a type of authorization (e.g. warrant) xsd:string
investigation:exhibitNumber owl:DatatypeProperty Specifies a unique identifier assigned to a given object at any stage of an investigation to differentiate it from all other objects. xsd:string
investigation:focus owl:DatatypeProperty Specifies the topical focus of an investigation. xsd:string
investigation:investigationForm owl:DatatypeProperty A label categorizing a type of investigation (case, incident, suspicious-activity, etc.) vocab:InvestigationFormVocab
investigation:investigationStatus owl:DatatypeProperty A label characterizing the status of an investigation (open, closed, etc.). xsd:string
investigation:relevantAuthorization owl:ObjectProperty Specifies an authorization relevant to a particular investigation. investigation:Authorization
investigation:rootExhibitNumber owl:DatatypeProperty Specifies a unique identifier assigned to a given object at the start of its treatment as part of an investigation. The first node in a provenance chain, which can be viewed as a heirarchical tree originating from a single root. xsd:string

Property Shapes

By the associated SHACL property shapes, instances of observable:DiskPartitionFacet can have the following properties:

PROPERTY

PROPERTY TYPE

DESCRIPTION

MIN COUNT

MAX COUNT

LOCAL RANGE
(type range for property on this class)

GLOBAL RANGE
(type range for property globally)

observable:DiskPartitionFacet
observable:diskPartitionType owl:DatatypeProperty Specifies the type of partition being characterized.
0 1 xsd:string
xsd:string
observable:mountPoint owl:DatatypeProperty Specifies the mount point of the partition.
0 1 xsd:string
xsd:string
observable:observableCreatedTime owl:DatatypeProperty The date and time at which the observable object being characterized was created. This time pertains to an intrinsic characteristic of the observable object, and would be consistent across independent characterizations or observations of the observable object.
0 1 xsd:dateTime
xsd:dateTime
observable:partitionID owl:DatatypeProperty Specifies the identifier of the partition, as provided by the containing partition table. This identifier is the index value within the partition table, and is expected to be an incrementing alphanumeric value (numeric in most partition systems), not a GUID or UUID. Sorting partitions by this index should first attempt to sort a numeric cast of the value.
0 1 xsd:string
xsd:string
observable:partitionLength owl:DatatypeProperty Specifies the length of the partition, in bytes.
0 1 xsd:integer
xsd:integer
observable:partitionOffset owl:DatatypeProperty Specifies the starting offset of the partition, in bytes.
0 1 xsd:integer
xsd:integer
observable:spaceLeft owl:DatatypeProperty Specifies the amount of space left on the partition, in bytes.
0 1 xsd:integer
xsd:integer
observable:spaceUsed owl:DatatypeProperty Specifies the amount of space used on the partition, in bytes.
0 1 xsd:integer
xsd:integer
observable:totalSpace owl:DatatypeProperty Specifies the total amount of space available on the partition, in bytes.
0 1 xsd:integer
xsd:integer

Implementation

@prefix core: <https://unifiedcyberontology.org/ontology/uco/core#> .
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:DiskPartitionFacet a owl:Class,
        sh:NodeShape ;
    rdfs:label "DiskPartitionFacet"@en ;
    rdfs:comment "A disk partition facet is a grouping of characteristics unique to a particular managed region on a storage mechanism."@en ;
    rdfs:subClassOf core:Facet ;
    sh:property [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:observableCreatedTime ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:partitionLength ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:partitionOffset ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:spaceLeft ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:spaceUsed ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:totalSpace ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:diskPartitionType ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:mountPoint ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:partitionID ] ;
    sh:targetClass observable:DiskPartitionFacet .