Class: AlternateDataStreamType

Specifies properties of an NTFS alternate data stream.

 classDiagram
    class AlternateDataStreamType
    click AlternateDataStreamType href "../AlternateDataStreamType/"
      CommonSchemaComponent <|-- AlternateDataStreamType
        click CommonSchemaComponent href "../CommonSchemaComponent/"

      AlternateDataStreamType : ads_hashes





        AlternateDataStreamType --> "0..1" HashesType : ads_hashes
        click HashesType href "../HashesType/"



      AlternateDataStreamType : ads_name

      AlternateDataStreamType : ads_size

      AlternateDataStreamType : description

      AlternateDataStreamType : id

      AlternateDataStreamType : name

      AlternateDataStreamType : type

Inheritance

StixEntity
- CommonSchemaComponent
  - AlternateDataStreamType

Slots

Name	Cardinality and Range	Description	Inheritance
ads_name	1 String	Specifies the name of the alternate data stream	direct
ads_size	0..1 Integer	Specifies the size of the alternate data stream, in bytes	direct
ads_hashes	0..1 HashesType	Specifies a dictionary of hashes for the alternate data stream	direct
id	0..1 StixIdentifier	STIX object identifier	StixEntity
type	0..1 StixTypeName	STIX object type	StixEntity
name	0..1 String	Human-readable name	StixEntity
description	0..1 String	Human-readable description	StixEntity

Usages

used by	used in	type	used
NtfsExt	alternate_data_streams	range	AlternateDataStreamType

In Subsets

Common

Comments

jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/file.json#/definitions/ntfs-ext/properties/alternate_data_streams/items

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:AlternateDataStreamType
native	attack:AlternateDataStreamType

LinkML Source

Direct

name: AlternateDataStreamType
description: Specifies properties of an NTFS alternate data stream.
comments:
- 'jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/file.json#/definitions/ntfs-ext/properties/alternate_data_streams/items'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slots:
- ads_name
- ads_size
- ads_hashes
slot_usage:
  ads_name:
    name: ads_name
    required: true

Induced

name: AlternateDataStreamType
description: Specifies properties of an NTFS alternate data stream.
comments:
- 'jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/file.json#/definitions/ntfs-ext/properties/alternate_data_streams/items'
in_subset:
- common
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slot_usage:
  ads_name:
    name: ads_name
    required: true
attributes:
  ads_name:
    name: ads_name
    description: Specifies the name of the alternate data stream.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: ads_name
    owner: AlternateDataStreamType
    domain_of:
    - AlternateDataStreamType
    range: string
    required: true
  ads_size:
    name: ads_size
    description: Specifies the size of the alternate data stream, in bytes.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: ads_size
    owner: AlternateDataStreamType
    domain_of:
    - AlternateDataStreamType
    range: integer
    minimum_value: 0
  ads_hashes:
    name: ads_hashes
    description: Specifies a dictionary of hashes for the alternate data stream.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: ads_hashes
    owner: AlternateDataStreamType
    domain_of:
    - AlternateDataStreamType
    range: HashesType
  id:
    name: id
    description: STIX object identifier.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:externalReference
    rank: 1000
    alias: id
    owner: AlternateDataStreamType
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_identifier
  type:
    name: type
    description: STIX object type.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:state
    rank: 1000
    alias: type
    owner: AlternateDataStreamType
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_type_name
  name:
    name: name
    description: Human-readable name.
    from_schema: https://w3id.org/lmodel/attack
    exact_mappings:
    - unified_cyber_ontology:name
    rank: 1000
    alias: name
    owner: AlternateDataStreamType
    domain_of:
    - RelatedAsset
    - StixEntity
    - ExtensionDefinition
    - MarkingDefinition
    - AutonomousSystem
    - File
    range: string
  description:
    name: description
    description: Human-readable description.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - unified_cyber_ontology:description
    rank: 1000
    alias: description
    owner: AlternateDataStreamType
    domain_of:
    - RelatedAsset
    - MutableElement
    - StixEntity
    - ExtensionDefinition
    - ExternalReference
    range: string