https://unifiedcyberontology.org/ontology/uco/vocabulary#TriggerTypeVocab
Defines an open-vocabulary of the types of triggers associated with a task.
Instances of vocabulary1:TriggerTypeVocab can have the following properties:
| PROPERTY | TYPE | DESCRIPTION | RANGE |
|---|---|---|---|
| From class owl:Thing | |||
| investigation:authorizationIdentifier | owl:DatatypeProperty | The identifier for a particular authorization (e.g. warrant number) | xsd:string |
| investigation:authorizationType | owl:DatatypeProperty | A label categorizing a type of authorization (e.g. warrant) | xsd:string |
| investigation:exhibitNumber | owl:DatatypeProperty | Specifies a unique identifier assigned to a given object at any stage of an investigation to differentiate it from all other objects. | xsd:string |
| investigation:focus | owl:DatatypeProperty | Specifies the topical focus of an investigation. | xsd:string |
| investigation:investigationForm | owl:DatatypeProperty | A label categorizing a type of investigation (case, incident, suspicious-activity, etc.) | vocab:InvestigationFormVocab |
| investigation:investigationStatus | owl:DatatypeProperty | A label characterizing the status of an investigation (open, closed, etc.). | xsd:string |
| investigation:relevantAuthorization | owl:ObjectProperty | Specifies an authorization relevant to a particular investigation. | investigation:Authorization |
| investigation:rootExhibitNumber | owl:DatatypeProperty | Specifies a unique identifier assigned to a given object at the start of its treatment as part of an investigation. The first node in a provenance chain, which can be viewed as a heirarchical tree originating from a single root. | xsd:string |
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix vocabulary1: <https://unifiedcyberontology.org/ontology/uco/vocabulary#> .
vocabulary1:TriggerTypeVocab a rdfs:Datatype ;
rdfs:label "Trigger Type Vocabulary"@en-US ;
rdfs:comment "Defines an open-vocabulary of the types of triggers associated with a task."@en ;
rdfs:subClassOf rdfs:Resource ;
owl:oneOf ( "TASK_TRIGGER_BOOT"^^vocabulary1:TriggerTypeVocab "TASK_TRIGGER_EVENT"^^vocabulary1:TriggerTypeVocab "TASK_TRIGGER_IDLE"^^vocabulary1:TriggerTypeVocab "TASK_TRIGGER_LOGON"^^vocabulary1:TriggerTypeVocab "TASK_TRIGGER_REGISTRATION"^^vocabulary1:TriggerTypeVocab "TASK_TRIGGER_SESSION_STATE_CHANGE"^^vocabulary1:TriggerTypeVocab "TASK_TRIGGER_TIME"^^vocabulary1:TriggerTypeVocab ) .