observable:WhoIsFacet leaf node


URI

https://unifiedcyberontology.org/ontology/uco/observable#WhoIsFacet

Label

WhoIsFacet

Description

A whois facet is a grouping of characteristics unique to a response record conformant to the WHOIS protocol standard (RFC 3912). [based on https://en.wikipedia.org/wiki/WHOIS]

Superclasses (1)

Usage

Instances of observable:WhoIsFacet can have the following properties:

PROPERTYTYPEDESCRIPTIONRANGE
From class owl:Thing
investigation:authorizationIdentifier owl:DatatypeProperty The identifier for a particular authorization (e.g. warrant number) xsd:string
investigation:authorizationType owl:DatatypeProperty A label categorizing a type of authorization (e.g. warrant) xsd:string
investigation:exhibitNumber owl:DatatypeProperty Specifies a unique identifier assigned to a given object at any stage of an investigation to differentiate it from all other objects. xsd:string
investigation:focus owl:DatatypeProperty Specifies the topical focus of an investigation. xsd:string
investigation:investigationForm owl:DatatypeProperty A label categorizing a type of investigation (case, incident, suspicious-activity, etc.) vocab:InvestigationFormVocab
investigation:investigationStatus owl:DatatypeProperty A label characterizing the status of an investigation (open, closed, etc.). xsd:string
investigation:relevantAuthorization owl:ObjectProperty Specifies an authorization relevant to a particular investigation. investigation:Authorization
investigation:rootExhibitNumber owl:DatatypeProperty Specifies a unique identifier assigned to a given object at the start of its treatment as part of an investigation. The first node in a provenance chain, which can be viewed as a heirarchical tree originating from a single root. xsd:string

Property Shapes

By the associated SHACL property shapes, instances of observable:WhoIsFacet can have the following properties:

PROPERTY

PROPERTY TYPE

DESCRIPTION

MIN COUNT

MAX COUNT

LOCAL RANGE
(type range for property on this class)

GLOBAL RANGE
(type range for property globally)

observable:WhoIsFacet
observable:creationDate owl:DatatypeProperty Specifies the date in which the registered domain was created.
0 1 xsd:dateTime
xsd:dateTime
observable:dnssec owl:DatatypeProperty Specifies the DNSSEC property associated with a Whois entry. Acceptable values are: 'Signed' or 'Unsigned'.
0 1 vocabulary1:WhoisDNSSECTypeVocab
vocabulary1:WhoisDNSSECTypeVocab
observable:domainID owl:DatatypeProperty Specifies the domain id for the domain associated with a Whois entry.
0 1 xsd:string
xsd:string
observable:domainName owl:ObjectProperty Specifies the corresponding domain name for a whois entry.
0 1 observable:ObservableObject
observable:ObservableObject
observable:expirationDate owl:DatatypeProperty Specifies the date in which the registered domain will expire.
0 1 xsd:dateTime
xsd:dateTime
observable:ipAddress owl:ObjectProperty Specifies the corresponding ip address for a whois entry. Usually corresponds to a name server lookup.
0 1 observable:ObservableObject
observable:ObservableObject
observable:lookupDate owl:DatatypeProperty Specifies the date and time that the Whois record was queried.
0 1 xsd:dateTime
xsd:dateTime
observable:nameServer owl:ObjectProperty Specifies a list of name server entries for a Whois entry.
0 * observable:ObservableObject
observable:ObservableObject
observable:regionalInternetRegistry owl:DatatypeProperty specifies the name of the Regional Internet Registry (RIR) which allocated the IP address contained in a WHOIS entry.
0 1 vocabulary1:RegionalRegistryTypeVocab
vocabulary1:RegionalRegistryTypeVocab
observable:registrantContactInfo owl:ObjectProperty Specifies contact info for the registrant of a domain within a WHOIS entity.
0 1 observable:ObservableObject
observable:ObservableObject
observable:registrantIDs owl:DatatypeProperty Specifies the registrant IDs associated with a domain lookup.
0 * xsd:string
xsd:string
observable:registrarInfo owl:ObjectProperty Specifies registrar info that would be returned from a registrar lookup.
0 1 observable:WhoisRegistrarInfoType
observable:WhoisRegistrarInfoType
observable:remarks owl:DatatypeProperty Specifies any remarks associated with this Whois entry.
0 1 xsd:string
xsd:string
observable:serverName owl:ObjectProperty Specifies the corresponding server name for a whois entry. This usually corresponds to a name server lookup.
0 1 observable:ObservableObject
observable:ObservableObject
observable:sponsoringRegistrar owl:DatatypeProperty Specifies the name of the sponsoring registrar for a domain.
0 1 xsd:string
xsd:string
observable:status owl:DatatypeProperty Specifies a list of statuses for a given Whois entry.
0 1 vocabulary1:WhoisStatusTypeVocab
owl:Thing
observable:updatedDate owl:DatatypeProperty Specifies the date in which the registered domain information was last updated.
0 1 xsd:dateTime
xsd:dateTime

Implementation

@prefix core: <https://unifiedcyberontology.org/ontology/uco/core#> .
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix vocabulary1: <https://unifiedcyberontology.org/ontology/uco/vocabulary#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:WhoIsFacet a owl:Class,
        sh:NodeShape ;
    rdfs:label "WhoIsFacet"@en ;
    rdfs:comment "A whois facet is a grouping of characteristics unique to a response record conformant to the WHOIS protocol standard (RFC 3912). [based on https://en.wikipedia.org/wiki/WHOIS]"@en ;
    rdfs:subClassOf core:Facet ;
    sh:property [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:domainName ],
        [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:ipAddress ],
        [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:registrantContactInfo ],
        [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:serverName ],
        [ sh:class observable:ObservableObject ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:nameServer ],
        [ sh:class observable:WhoisRegistrarInfoType ;
            sh:maxCount 1 ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:registrarInfo ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:creationDate ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:expirationDate ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:lookupDate ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:updatedDate ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:domainID ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:remarks ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:sponsoringRegistrar ],
        [ sh:datatype xsd:string ;
            sh:nodeKind sh:Literal ;
            sh:path observable:registrantIDs ],
        [ sh:datatype vocabulary1:RegionalRegistryTypeVocab ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:regionalInternetRegistry ],
        [ sh:datatype vocabulary1:WhoisDNSSECTypeVocab ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:dnssec ],
        [ sh:datatype vocabulary1:WhoisStatusTypeVocab ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:status ] ;
    sh:targetClass observable:WhoIsFacet .