observable:WindowsPESection leaf node


URI

https://unifiedcyberontology.org/ontology/uco/observable#WindowsPESection

Label

WindowsPESection

Description

A Windows PE section is a grouping of characteristics unique to a specific default or custom-defined region of a Windows PE (Portable Executable) file, consisting of an individual portion of the actual executable content of the file delineated according to unique purpose and memory protection requirements.

Target Classes (1)

Shape Properties

Instances of observable:WindowsPESection can have the following properties:

PROPERTY

MIN COUNT

MAX COUNT

TYPE

observable:WindowsPESection
core:name 1 1 xsd:string
observable:entropy 0 1 xsd:double
observable:hashes 0 * types:Hash
observable:size 0 1 xsd:integer

Implementation

@prefix core: <https://unifiedcyberontology.org/ontology/uco/core#> .
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix types: <https://unifiedcyberontology.org/ontology/uco/types#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:WindowsPESection a owl:Class,
        sh:NodeShape ;
    rdfs:label "WindowsPESection"@en ;
    rdfs:comment "A Windows PE section is a grouping of characteristics unique to a specific default or custom-defined region of a Windows PE (Portable Executable) file, consisting of an individual portion of the actual executable content of the file delineated according to unique purpose and memory protection requirements."@en ;
    sh:property [ sh:class types:Hash ;
            sh:nodeKind sh:BlankNodeOrIRI ;
            sh:path observable:hashes ],
        [ sh:datatype xsd:double ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:entropy ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:size ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:minCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path core:name ] ;
    sh:targetClass observable:WindowsPESection .