Slot: service_file

For a user mode service (service_type_id 3 or 4) this is the

executable program that the SCM launches as the service process.
For a

kernel mode driver (service_type_id 1 or 2) this is the driver

file loaded into the kernel at the request of the SCM.

URI: ocsf:service_file Alias: service_file

Applicable Classes

Name	Description	Modifies Slot
WinService	The Windows Service object describes a Windows service	yes

Properties

Type and Range

Property	Value
Range	File
Domain Of	WinService

Cardinality and Requirements

Property	Value

Aliases

• Service File

Identifier and Mapping Information

Annotations

property	value
ocsf_extension	windows

Schema Source

• from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:service_file
native	ocsf:service_file

LinkML Source

name: service_file
annotations:
  ocsf_extension:
    tag: ocsf_extension
    value: windows
description: 'For a user mode service (<code>service_type_id</code> 3 or 4) this is
  the

  executable program that the SCM launches as the service process.<br>For a

  kernel mode driver (<code>service_type_id</code> 1 or 2) this is the driver

  file loaded into the kernel at the request of the SCM.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Service File
rank: 1000
alias: service_file
domain_of:
- WinService
range: File