Class: NtfsExt

The NTFS extension specifies a default extension for capturing properties specific to the storage of the file on the NTFS file system.

URI: attack:NtfsExt

 classDiagram
    class NtfsExt
    click NtfsExt href "../NtfsExt/"
      CommonSchemaComponent <|-- NtfsExt
        click CommonSchemaComponent href "../CommonSchemaComponent/"

      NtfsExt : alternate_data_streams





        NtfsExt --> "*" AlternateDataStreamType : alternate_data_streams
        click AlternateDataStreamType href "../AlternateDataStreamType/"



      NtfsExt : description

      NtfsExt : id

      NtfsExt : name

      NtfsExt : sid

      NtfsExt : type

Inheritance

StixEntity
- CommonSchemaComponent
  - NtfsExt

Slots

Name	Cardinality and Range	Description	Inheritance
sid	0..1 String	Specifies the security ID (SID) value assigned to the file	direct
alternate_data_streams	* AlternateDataStreamType	Specifies a list of NTFS alternate data streams that exist for the file	direct
id	0..1 StixIdentifier	STIX object identifier	StixEntity
type	0..1 StixTypeName	STIX object type	StixEntity
name	0..1 String	Human-readable name	StixEntity
description	0..1 String	Human-readable description	StixEntity

In Subsets

Observables

Comments

stix_extension_key: ntfs-ext stix_parent_type: file jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/file.json

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:NtfsExt
native	attack:NtfsExt

LinkML Source

Direct

name: NtfsExt
description: The NTFS extension specifies a default extension for capturing properties
  specific to the storage of the file on the NTFS file system.
comments:
- 'stix_extension_key: ntfs-ext stix_parent_type: file jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/file.json'
in_subset:
- observables
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slots:
- sid
- alternate_data_streams

Induced

name: NtfsExt
description: The NTFS extension specifies a default extension for capturing properties
  specific to the storage of the file on the NTFS file system.
comments:
- 'stix_extension_key: ntfs-ext stix_parent_type: file jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/file.json'
in_subset:
- observables
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
attributes:
  sid:
    name: sid
    description: Specifies the security ID (SID) value assigned to the file.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: sid
    owner: NtfsExt
    domain_of:
    - NtfsExt
    range: string
  alternate_data_streams:
    name: alternate_data_streams
    description: Specifies a list of NTFS alternate data streams that exist for the
      file.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: alternate_data_streams
    owner: NtfsExt
    domain_of:
    - NtfsExt
    range: AlternateDataStreamType
    multivalued: true
    inlined: true
  id:
    name: id
    description: STIX object identifier.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:externalReference
    rank: 1000
    alias: id
    owner: NtfsExt
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_identifier
  type:
    name: type
    description: STIX object type.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:state
    rank: 1000
    alias: type
    owner: NtfsExt
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_type_name
  name:
    name: name
    description: Human-readable name.
    from_schema: https://w3id.org/lmodel/attack
    exact_mappings:
    - unified_cyber_ontology:name
    rank: 1000
    alias: name
    owner: NtfsExt
    domain_of:
    - RelatedAsset
    - StixEntity
    - ExtensionDefinition
    - MarkingDefinition
    - AutonomousSystem
    - File
    range: string
  description:
    name: description
    description: Human-readable description.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - unified_cyber_ontology:description
    rank: 1000
    alias: description
    owner: NtfsExt
    domain_of:
    - RelatedAsset
    - MutableElement
    - StixEntity
    - ExtensionDefinition
    - ExternalReference
    range: string