https://unifiedcyberontology.org/ontology/uco/vocabulary#TriggerFrequencyVocab
Defines an open-vocabulary of the frequency types that a trigger may use. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/aa383620(v=vs.85).aspx and http://msdn.microsoft.com/en-us/library/windows/desktop/aa383987(v=vs.85).aspx.
Instances of vocabulary1:TriggerFrequencyVocab can have the following properties:
| PROPERTY | TYPE | DESCRIPTION | RANGE |
|---|---|---|---|
| From class owl:Thing | |||
| investigation:authorizationIdentifier | owl:DatatypeProperty | The identifier for a particular authorization (e.g. warrant number) | xsd:string |
| investigation:authorizationType | owl:DatatypeProperty | A label categorizing a type of authorization (e.g. warrant) | xsd:string |
| investigation:exhibitNumber | owl:DatatypeProperty | Specifies a unique identifier assigned to a given object at any stage of an investigation to differentiate it from all other objects. | xsd:string |
| investigation:focus | owl:DatatypeProperty | Specifies the topical focus of an investigation. | xsd:string |
| investigation:investigationForm | owl:DatatypeProperty | A label categorizing a type of investigation (case, incident, suspicious-activity, etc.) | vocab:InvestigationFormVocab |
| investigation:investigationStatus | owl:DatatypeProperty | A label characterizing the status of an investigation (open, closed, etc.). | xsd:string |
| investigation:relevantAuthorization | owl:ObjectProperty | Specifies an authorization relevant to a particular investigation. | investigation:Authorization |
| investigation:rootExhibitNumber | owl:DatatypeProperty | Specifies a unique identifier assigned to a given object at the start of its treatment as part of an investigation. The first node in a provenance chain, which can be viewed as a heirarchical tree originating from a single root. | xsd:string |
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix vocabulary1: <https://unifiedcyberontology.org/ontology/uco/vocabulary#> .
vocabulary1:TriggerFrequencyVocab a rdfs:Datatype ;
rdfs:label "Trigger Frequency Vocabulary"@en-US ;
rdfs:comment "Defines an open-vocabulary of the frequency types that a trigger may use. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/aa383620(v=vs.85).aspx and http://msdn.microsoft.com/en-us/library/windows/desktop/aa383987(v=vs.85).aspx."@en ;
rdfs:subClassOf rdfs:Resource ;
owl:oneOf ( "TASK_EVENT_TRIGGER_AT_LOGON"^^vocabulary1:TriggerFrequencyVocab "TASK_EVENT_TRIGGER_AT_SYSTEMSTART"^^vocabulary1:TriggerFrequencyVocab "TASK_EVENT_TRIGGER_ON_IDLE"^^vocabulary1:TriggerFrequencyVocab "TASK_TIME_TRIGGER_DAILY"^^vocabulary1:TriggerFrequencyVocab "TASK_TIME_TRIGGER_MONTHLYDATE"^^vocabulary1:TriggerFrequencyVocab "TASK_TIME_TRIGGER_MONTHLYDOW"^^vocabulary1:TriggerFrequencyVocab "TASK_TIME_TRIGGER_ONCE"^^vocabulary1:TriggerFrequencyVocab "TASK_TIME_TRIGGER_WEEKLY"^^vocabulary1:TriggerFrequencyVocab ) .