https://unifiedcyberontology.org/ontology/uco/vocabulary#ObservableObjectRelationshipVocab
Defines an open-vocabulary of inter-observable object relationships.
Instances of vocabulary1:ObservableObjectRelationshipVocab can have the following properties:
PROPERTY | TYPE | DESCRIPTION | RANGE |
---|---|---|---|
From class owl:Thing | |||
investigation:authorizationIdentifier | owl:DatatypeProperty | The identifier for a particular authorization (e.g. warrant number) | xsd:string |
investigation:authorizationType | owl:DatatypeProperty | A label categorizing a type of authorization (e.g. warrant) | xsd:string |
investigation:exhibitNumber | owl:DatatypeProperty | Specifies a unique identifier assigned to a given object at any stage of an investigation to differentiate it from all other objects. | xsd:string |
investigation:focus | owl:DatatypeProperty | Specifies the topical focus of an investigation. | xsd:string |
investigation:investigationForm | owl:DatatypeProperty | A label categorizing a type of investigation (case, incident, suspicious-activity, etc.) | vocab:InvestigationFormVocab |
investigation:investigationStatus | owl:DatatypeProperty | A label characterizing the status of an investigation (open, closed, etc.). | xsd:string |
investigation:relevantAuthorization | owl:ObjectProperty | Specifies an authorization relevant to a particular investigation. | investigation:Authorization |
investigation:rootExhibitNumber | owl:DatatypeProperty | Specifies a unique identifier assigned to a given object at the start of its treatment as part of an investigation. The first node in a provenance chain, which can be viewed as a heirarchical tree originating from a single root. | xsd:string |
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix vocabulary1: <https://unifiedcyberontology.org/ontology/uco/vocabulary#> .
vocabulary1:ObservableObjectRelationshipVocab a rdfs:Datatype ;
rdfs:label "Cyber Item Relationship Vocabulary"@en-US ;
rdfs:comment "Defines an open-vocabulary of inter-observable object relationships."@en ;
rdfs:subClassOf rdfs:Resource ;
owl:oneOf ( "Allocated"^^vocabulary1:ObservableObjectRelationshipVocab "Allocated_By"^^vocabulary1:ObservableObjectRelationshipVocab "Bound"^^vocabulary1:ObservableObjectRelationshipVocab "Bound_By"^^vocabulary1:ObservableObjectRelationshipVocab "Characterized_By"^^vocabulary1:ObservableObjectRelationshipVocab "Characterizes"^^vocabulary1:ObservableObjectRelationshipVocab "Child_Of"^^vocabulary1:ObservableObjectRelationshipVocab "Closed"^^vocabulary1:ObservableObjectRelationshipVocab "Closed_By"^^vocabulary1:ObservableObjectRelationshipVocab "Compressed"^^vocabulary1:ObservableObjectRelationshipVocab "Compressed_By"^^vocabulary1:ObservableObjectRelationshipVocab "Compressed_From"^^vocabulary1:ObservableObjectRelationshipVocab "Compressed_Into"^^vocabulary1:ObservableObjectRelationshipVocab "Connected_From"^^vocabulary1:ObservableObjectRelationshipVocab "Connected_To"^^vocabulary1:ObservableObjectRelationshipVocab "Contained_Within"^^vocabulary1:ObservableObjectRelationshipVocab "Contains"^^vocabulary1:ObservableObjectRelationshipVocab "Copied"^^vocabulary1:ObservableObjectRelationshipVocab "Copied_By"^^vocabulary1:ObservableObjectRelationshipVocab "Copied_From"^^vocabulary1:ObservableObjectRelationshipVocab "Copied_To"^^vocabulary1:ObservableObjectRelationshipVocab "Created"^^vocabulary1:ObservableObjectRelationshipVocab "Created_By"^^vocabulary1:ObservableObjectRelationshipVocab "Decoded"^^vocabulary1:ObservableObjectRelationshipVocab "Decoded_By"^^vocabulary1:ObservableObjectRelationshipVocab "Decompressed"^^vocabulary1:ObservableObjectRelationshipVocab "Decompressed_By"^^vocabulary1:ObservableObjectRelationshipVocab "Decrypted"^^vocabulary1:ObservableObjectRelationshipVocab "Decrypted_By"^^vocabulary1:ObservableObjectRelationshipVocab "Deleted"^^vocabulary1:ObservableObjectRelationshipVocab "Deleted_By"^^vocabulary1:ObservableObjectRelationshipVocab "Deleted_From"^^vocabulary1:ObservableObjectRelationshipVocab "Downloaded"^^vocabulary1:ObservableObjectRelationshipVocab "Downloaded_By"^^vocabulary1:ObservableObjectRelationshipVocab "Downloaded_From"^^vocabulary1:ObservableObjectRelationshipVocab "Downloaded_To"^^vocabulary1:ObservableObjectRelationshipVocab "Dropped"^^vocabulary1:ObservableObjectRelationshipVocab "Dropped_By"^^vocabulary1:ObservableObjectRelationshipVocab "Encoded"^^vocabulary1:ObservableObjectRelationshipVocab "Encoded_By"^^vocabulary1:ObservableObjectRelationshipVocab "Encrypted"^^vocabulary1:ObservableObjectRelationshipVocab "Encrypted_By"^^vocabulary1:ObservableObjectRelationshipVocab "Encrypted_From"^^vocabulary1:ObservableObjectRelationshipVocab "Encrypted_To"^^vocabulary1:ObservableObjectRelationshipVocab "Extracted_From"^^vocabulary1:ObservableObjectRelationshipVocab "FQDN_Of"^^vocabulary1:ObservableObjectRelationshipVocab "Freed"^^vocabulary1:ObservableObjectRelationshipVocab "Freed_By"^^vocabulary1:ObservableObjectRelationshipVocab "Hooked"^^vocabulary1:ObservableObjectRelationshipVocab "Hooked_By"^^vocabulary1:ObservableObjectRelationshipVocab "Initialized_By"^^vocabulary1:ObservableObjectRelationshipVocab "Initialized_To"^^vocabulary1:ObservableObjectRelationshipVocab "Injected"^^vocabulary1:ObservableObjectRelationshipVocab "Injected_As"^^vocabulary1:ObservableObjectRelationshipVocab "Injected_By"^^vocabulary1:ObservableObjectRelationshipVocab "Injected_Into"^^vocabulary1:ObservableObjectRelationshipVocab "Installed"^^vocabulary1:ObservableObjectRelationshipVocab "Installed_By"^^vocabulary1:ObservableObjectRelationshipVocab "Joined"^^vocabulary1:ObservableObjectRelationshipVocab "Joined_By"^^vocabulary1:ObservableObjectRelationshipVocab "Killed"^^vocabulary1:ObservableObjectRelationshipVocab "Killed_By"^^vocabulary1:ObservableObjectRelationshipVocab "Listened_On"^^vocabulary1:ObservableObjectRelationshipVocab "Listened_On_By"^^vocabulary1:ObservableObjectRelationshipVocab "Loaded_From"^^vocabulary1:ObservableObjectRelationshipVocab "Loaded_Into"^^vocabulary1:ObservableObjectRelationshipVocab "Locked"^^vocabulary1:ObservableObjectRelationshipVocab "Locked_By"^^vocabulary1:ObservableObjectRelationshipVocab "Mapped_By"^^vocabulary1:ObservableObjectRelationshipVocab "Mapped_Into"^^vocabulary1:ObservableObjectRelationshipVocab "Merged"^^vocabulary1:ObservableObjectRelationshipVocab "Merged_By"^^vocabulary1:ObservableObjectRelationshipVocab "Modified_Properties_Of"^^vocabulary1:ObservableObjectRelationshipVocab "Monitored"^^vocabulary1:ObservableObjectRelationshipVocab "Monitored_By"^^vocabulary1:ObservableObjectRelationshipVocab "Moved"^^vocabulary1:ObservableObjectRelationshipVocab "Moved_By"^^vocabulary1:ObservableObjectRelationshipVocab "Moved_From"^^vocabulary1:ObservableObjectRelationshipVocab "Moved_To"^^vocabulary1:ObservableObjectRelationshipVocab "Opened"^^vocabulary1:ObservableObjectRelationshipVocab "Opened_By"^^vocabulary1:ObservableObjectRelationshipVocab "Packed"^^vocabulary1:ObservableObjectRelationshipVocab "Packed_By"^^vocabulary1:ObservableObjectRelationshipVocab "Packed_From"^^vocabulary1:ObservableObjectRelationshipVocab "Packed_Into"^^vocabulary1:ObservableObjectRelationshipVocab "Parent_Of"^^vocabulary1:ObservableObjectRelationshipVocab "Paused"^^vocabulary1:ObservableObjectRelationshipVocab "Paused_By"^^vocabulary1:ObservableObjectRelationshipVocab "Previously_Contained"^^vocabulary1:ObservableObjectRelationshipVocab "Properties_Modified_By"^^vocabulary1:ObservableObjectRelationshipVocab "Properties_Queried"^^vocabulary1:ObservableObjectRelationshipVocab "Properties_Queried_By"^^vocabulary1:ObservableObjectRelationshipVocab "Read_From"^^vocabulary1:ObservableObjectRelationshipVocab "Read_From_By"^^vocabulary1:ObservableObjectRelationshipVocab "Received"^^vocabulary1:ObservableObjectRelationshipVocab "Received_By"^^vocabulary1:ObservableObjectRelationshipVocab "Received_From"^^vocabulary1:ObservableObjectRelationshipVocab "Received_Via_Upload"^^vocabulary1:ObservableObjectRelationshipVocab "Redirects_To"^^vocabulary1:ObservableObjectRelationshipVocab "Related_To"^^vocabulary1:ObservableObjectRelationshipVocab "Renamed"^^vocabulary1:ObservableObjectRelationshipVocab "Renamed_By"^^vocabulary1:ObservableObjectRelationshipVocab "Renamed_From"^^vocabulary1:ObservableObjectRelationshipVocab "Renamed_To"^^vocabulary1:ObservableObjectRelationshipVocab "Resolved_To"^^vocabulary1:ObservableObjectRelationshipVocab "Resumed"^^vocabulary1:ObservableObjectRelationshipVocab "Resumed_By"^^vocabulary1:ObservableObjectRelationshipVocab "Root_Domain_Of"^^vocabulary1:ObservableObjectRelationshipVocab "Searched_For"^^vocabulary1:ObservableObjectRelationshipVocab "Searched_For_By"^^vocabulary1:ObservableObjectRelationshipVocab "Sent"^^vocabulary1:ObservableObjectRelationshipVocab "Sent_By"^^vocabulary1:ObservableObjectRelationshipVocab "Sent_To"^^vocabulary1:ObservableObjectRelationshipVocab "Sent_Via_Upload"^^vocabulary1:ObservableObjectRelationshipVocab "Set_From"^^vocabulary1:ObservableObjectRelationshipVocab "Set_To"^^vocabulary1:ObservableObjectRelationshipVocab "Sub-domain_Of"^^vocabulary1:ObservableObjectRelationshipVocab "Supra-domain_Of"^^vocabulary1:ObservableObjectRelationshipVocab "Suspended"^^vocabulary1:ObservableObjectRelationshipVocab "Suspended_By"^^vocabulary1:ObservableObjectRelationshipVocab "Unhooked"^^vocabulary1:ObservableObjectRelationshipVocab "Unhooked_By"^^vocabulary1:ObservableObjectRelationshipVocab "Unlocked"^^vocabulary1:ObservableObjectRelationshipVocab "Unlocked_By"^^vocabulary1:ObservableObjectRelationshipVocab "Unpacked"^^vocabulary1:ObservableObjectRelationshipVocab "Unpacked_By"^^vocabulary1:ObservableObjectRelationshipVocab "Uploaded"^^vocabulary1:ObservableObjectRelationshipVocab "Uploaded_By"^^vocabulary1:ObservableObjectRelationshipVocab "Uploaded_From"^^vocabulary1:ObservableObjectRelationshipVocab "Uploaded_To"^^vocabulary1:ObservableObjectRelationshipVocab "Used"^^vocabulary1:ObservableObjectRelationshipVocab "Used_By"^^vocabulary1:ObservableObjectRelationshipVocab "Values_Enumerated"^^vocabulary1:ObservableObjectRelationshipVocab "Values_Enumerated_By"^^vocabulary1:ObservableObjectRelationshipVocab "Written_To_By"^^vocabulary1:ObservableObjectRelationshipVocab "Wrote_To"^^vocabulary1:ObservableObjectRelationshipVocab ) .