Skip to content

Slot: xattributes

An unordered collection of zero or more name/value pairs where each pair

represents a file or folder extended attribute.

For example: Windows

alternate data stream attributes (ADS stream name, ADS size, etc.),

user-defined or application-defined attributes, ACL, owner, primary group, etc.

Examples from DCS:

  • ads_name
  • ads_size
  • dacl
  • owner
  • primary_group
  • link_name

    - name of the link associated to the

    file.

  • hard_link_count - the number of links that are

    associated to the file.

URI: ocsf:xattributes Alias: xattributes

Applicable Classes

Name Description Modifies Slot
LinuxProcess Extends the process object to add Linux specific fields no
File The File object represents the metadata associated with a file stored in a no
WindowsProcess Extends the process object to add Windows specific fields no
Process The Process object describes a running instance of a launched program yes
MacosProcess Extends the process object to add macOS specific fields no

Properties

Type and Range

Property Value
Range Object
Domain Of File, Process

Cardinality and Requirements

Property Value

Aliases

  • Extended Attributes

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:xattributes
native ocsf:xattributes

LinkML Source

name: xattributes
description: 'An unordered collection of zero or more name/value pairs where each
  pair

  represents a file or folder extended attribute.</p>For example: Windows

  alternate data stream attributes (ADS stream name, ADS size, etc.),

  user-defined or application-defined attributes, ACL, owner, primary group, etc.

  Examples from DCS:

  </p><ul><li><strong>ads_name</strong></li><li><strong>ads_size</strong></li><li><strong>dacl</strong></li><li><strong>owner</strong></li><li><strong>primary_group</strong></li><li><strong>link_name</strong>

  - name of the link associated to the

  file.</li><li><strong>hard_link_count</strong> - the number of links that are

  associated to the file.</li></ul>'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Extended Attributes
rank: 1000
alias: xattributes
domain_of:
- File
- Process
range: Object