https://unifiedcyberontology.org/ontology/uco/observable#FileFacet
A file facet is a grouping of characteristics unique to the storage of a file (computer resource for recording data discretely in a computer storage device) on a file system (process that manages how and where data on a storage device is stored, accessed and managed). [based on https://en.wikipedia.org/Computer_file and https://www.techopedia.com/definition/5510/file-system] - When used to characterize a file the sizeInBytes property conveys the recorded size of a file in a file system.
Instances of observable:FileFacet can have the following properties:
PROPERTY | TYPE | DESCRIPTION | RANGE |
---|---|---|---|
From class owl:Thing | |||
investigation:authorizationIdentifier | owl:DatatypeProperty | The identifier for a particular authorization (e.g. warrant number) | xsd:string |
investigation:authorizationType | owl:DatatypeProperty | A label categorizing a type of authorization (e.g. warrant) | xsd:string |
investigation:exhibitNumber | owl:DatatypeProperty | Specifies a unique identifier assigned to a given object at any stage of an investigation to differentiate it from all other objects. | xsd:string |
investigation:focus | owl:DatatypeProperty | Specifies the topical focus of an investigation. | xsd:string |
investigation:investigationForm | owl:DatatypeProperty | A label categorizing a type of investigation (case, incident, suspicious-activity, etc.) | vocab:InvestigationFormVocab |
investigation:investigationStatus | owl:DatatypeProperty | A label characterizing the status of an investigation (open, closed, etc.). | xsd:string |
investigation:relevantAuthorization | owl:ObjectProperty | Specifies an authorization relevant to a particular investigation. | investigation:Authorization |
investigation:rootExhibitNumber | owl:DatatypeProperty | Specifies a unique identifier assigned to a given object at the start of its treatment as part of an investigation. The first node in a provenance chain, which can be viewed as a heirarchical tree originating from a single root. | xsd:string |
By the associated SHACL property shapes, instances of observable:FileFacet can have the following properties:
PROPERTY |
PROPERTY TYPE |
DESCRIPTION |
MIN COUNT |
MAX COUNT |
LOCAL RANGE |
GLOBAL RANGE |
|
---|---|---|---|---|---|---|---|
observable:FileFacet | |||||||
observable:accessedTime | owl:DatatypeProperty |
The date and time at which the Object was accessed.
|
0 | 1 |
xsd:dateTime
|
xsd:dateTime
|
|
observable:allocationStatus | owl:DatatypeProperty |
The allocation status of a file.
|
0 | 1 |
xsd:string
|
xsd:string
|
|
observable:extension | owl:DatatypeProperty |
The file name extension: everything after the last dot. Not present if the file has no dot in its name.
|
0 | 1 |
xsd:string
|
xsd:string
|
|
observable:fileName | owl:DatatypeProperty |
Specifies the name associated with a file in a file system.
|
0 | * |
xsd:string
|
xsd:string
|
|
observable:filePath | owl:DatatypeProperty |
Specifies the file path for the location of a file within a filesystem.
|
0 | * |
xsd:string
|
xsd:string
|
|
observable:fileSystemType | owl:DatatypeProperty |
The specific type of a file system.
|
0 | 1 |
xsd:string
|
xsd:string
|
|
observable:isDirectory | owl:DatatypeProperty |
Specifies whether a file entry represents a directory.
|
0 | * |
xsd:boolean
|
xsd:boolean
|
|
observable:metadataChangeTime | owl:DatatypeProperty |
The date and time at which the file metadata was last modified.
|
0 | 1 |
xsd:dateTime
|
xsd:dateTime
|
|
observable:modifiedTime | owl:DatatypeProperty |
The date and time at which the Object was last modified.
|
0 | 1 |
xsd:dateTime
|
xsd:dateTime
|
|
observable:observableCreatedTime | owl:DatatypeProperty |
The date and time at which the observable object being characterized was created. This time pertains to an intrinsic characteristic of the observable object, and would be consistent across independent characterizations or observations of the observable object.
|
0 | 1 |
xsd:dateTime
|
xsd:dateTime
|
|
observable:sizeInBytes | owl:DatatypeProperty |
The size of the data in bytes.
|
0 | 1 |
xsd:integer
|
xsd:integer
|
@prefix core: <https://unifiedcyberontology.org/ontology/uco/core#> .
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
observable:FileFacet a owl:Class,
sh:NodeShape ;
rdfs:label "FileFacet"@en ;
rdfs:comment "A file facet is a grouping of characteristics unique to the storage of a file (computer resource for recording data discretely in a computer storage device) on a file system (process that manages how and where data on a storage device is stored, accessed and managed). [based on https://en.wikipedia.org/Computer_file and https://www.techopedia.com/definition/5510/file-system]"@en ;
rdfs:subClassOf core:Facet ;
sh:property [ rdfs:comment "When used to characterize a file the sizeInBytes property conveys the recorded size of a file in a file system."@en ;
sh:datatype xsd:integer ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:sizeInBytes ],
[ sh:datatype xsd:boolean ;
sh:nodeKind sh:Literal ;
sh:path observable:isDirectory ],
[ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:accessedTime ],
[ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:metadataChangeTime ],
[ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:modifiedTime ],
[ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:observableCreatedTime ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:allocationStatus ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:extension ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:fileSystemType ],
[ sh:datatype xsd:string ;
sh:nodeKind sh:Literal ;
sh:path observable:fileName ],
[ sh:datatype xsd:string ;
sh:nodeKind sh:Literal ;
sh:path observable:filePath ] ;
sh:targetClass observable:FileFacet .