https://unifiedcyberontology.org/ontology/uco/observable#WindowsTaskFacet
A Windows Task facet is a grouping of characteristics unique to a Windows Task (a process that is scheduled to execute on a Windows operating system by the Windows Task Scheduler). [based on http://msdn.microsoft.com/en-us/library/windows/desktop/aa381311(v=vs.85).aspx]
Instances of observable:WindowsTaskFacet can have the following properties:
PROPERTY |
MIN COUNT |
MAX COUNT |
TYPE |
|
|---|---|---|---|---|
| observable:WindowsTaskFacet | ||||
| observable:account | 0 | 1 |
observable:ObservableObject
|
|
| observable:accountLogonType | 0 | 1 |
xsd:string
|
|
| observable:accountRunLevel | 0 | 1 |
xsd:string
|
|
| observable:actionList | 0 | * |
observable:TaskActionType
|
|
| observable:application | 0 | 1 |
observable:ObservableObject
|
|
| observable:exitCode | 0 | 1 |
xsd:integer
|
|
| observable:flags | 0 | * |
vocabulary1:TaskFlagVocab
|
|
| observable:imageName | 0 | 1 |
xsd:string
|
|
| observable:maxRunTime | 0 | 1 |
xsd:integer
|
|
| observable:mostRecentRunTime | 0 | 1 |
xsd:dateTime
|
|
| observable:nextRunTime | 0 | 1 |
xsd:dateTime
|
|
| observable:observableCreatedTime | 0 | 1 |
xsd:dateTime
|
|
| observable:parameters | 0 | 1 |
xsd:string
|
|
| observable:priority | 0 | 1 |
vocabulary1:TaskPriorityVocab
|
|
| observable:status | 0 | 1 |
vocabulary1:TaskStatusVocab
|
|
| observable:taskComment | 0 | 1 |
xsd:string
|
|
| observable:taskCreator | 0 | 1 |
xsd:string
|
|
| observable:triggerList | 0 | * |
observable:TriggerType
|
|
| observable:workItemData | 0 | 1 |
observable:ObservableObject
|
|
| observable:workingDirectory | 0 | 1 |
observable:ObservableObject
|
|
@prefix core: <https://unifiedcyberontology.org/ontology/uco/core#> .
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix vocabulary1: <https://unifiedcyberontology.org/ontology/uco/vocabulary#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
observable:WindowsTaskFacet a owl:Class,
sh:NodeShape ;
rdfs:label "WindowsTaskFacet"@en ;
rdfs:comment "A Windows Task facet is a grouping of characteristics unique to a Windows Task (a process that is scheduled to execute on a Windows operating system by the Windows Task Scheduler). [based on http://msdn.microsoft.com/en-us/library/windows/desktop/aa381311(v=vs.85).aspx]"@en ;
rdfs:subClassOf core:Facet ;
sh:property [ sh:class observable:ObservableObject ;
sh:maxCount 1 ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path observable:account ],
[ sh:class observable:ObservableObject ;
sh:maxCount 1 ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path observable:application ],
[ sh:class observable:ObservableObject ;
sh:maxCount 1 ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path observable:workItemData ],
[ sh:class observable:ObservableObject ;
sh:maxCount 1 ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path observable:workingDirectory ],
[ sh:class observable:TaskActionType ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path observable:actionList ],
[ sh:class observable:TriggerType ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path observable:triggerList ],
[ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:mostRecentRunTime ],
[ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:nextRunTime ],
[ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:observableCreatedTime ],
[ sh:datatype xsd:integer ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:exitCode ],
[ sh:datatype xsd:integer ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:maxRunTime ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:accountLogonType ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:accountRunLevel ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:imageName ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:parameters ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:taskComment ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:taskCreator ],
[ sh:datatype vocabulary1:TaskFlagVocab ;
sh:nodeKind sh:Literal ;
sh:path observable:flags ],
[ sh:datatype vocabulary1:TaskPriorityVocab ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:priority ],
[ sh:datatype vocabulary1:TaskStatusVocab ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:status ] ;
sh:targetClass observable:WindowsTaskFacet .