observable:AlternateDataStream leaf node


URI

https://unifiedcyberontology.org/ontology/uco/observable#AlternateDataStream

Label

AlternateDataStream

Description

An alternate data stream is data content stored within an NTFS file that is independent of the standard content stream of the file and is hidden from access by default NTFS file viewing mechanisms.

Target Classes (1)

Shape Properties

Instances of observable:AlternateDataStream can have the following properties:

PROPERTY

MIN COUNT

MAX COUNT

TYPE

observable:AlternateDataStream
core:name 1 1 xsd:string
observable:hashes 0 1 types:Hash
observable:size 0 1 xsd:integer

Implementation

@prefix core: <https://unifiedcyberontology.org/ontology/uco/core#> .
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix types: <https://unifiedcyberontology.org/ontology/uco/types#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:AlternateDataStream a owl:Class,
        sh:NodeShape ;
    rdfs:label "AlternateDataStream"@en ;
    rdfs:comment "An alternate data stream is data content stored within an NTFS file that is independent of the standard content stream of the file and is hidden from access by default NTFS file viewing mechanisms."@en ;
    sh:property [ sh:class types:Hash ;
            sh:maxCount 1 ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:hashes ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:size ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:minCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path core:name ] ;
    sh:targetClass observable:AlternateDataStream .