Slot: specVersion
The version of UCO ontology or subontology specification used to characterize a concept.
URI: master:specVersion
Applicable Classes
| Name | Description |
|---|---|
| UcoObject | A UCO object is a representation of a fundamental concept either directly inh... |
| Victim | "A victim is a role played by a person or organization that is/was the target... |
| VictimTargeting | "A victim targeting is a grouping of characteristics unique to people or orga... |
| BenevolentRole | A benevolent role is a role with positive and/or beneficial intent |
| MaliciousRole | A malicious role is a role with malevolent intent |
| NeutralRole | A neutral role is a role with impartial intent |
| Role | A role is a usual or customary function based on contextual perspective |
| Annotation | An annotation is an assertion made in relation to one or more objects |
| Assertion | An assertion is a statement declared to be true |
| AttributedName | An attributed name is a name of an entity issued by some attributed naming au... |
| Bundle | A bundle is a container for a grouping of UCO content with no presumption of ... |
| Compilation | A compilation is a grouping of things |
| ContextualCompilation | A contextual compilation is a grouping of things sharing some context (e |
| ControlledVocabulary | A controlled vocabulary is an explicitly constrained set of string values |
| EnclosingCompilation | An enclosing compilation is a container for a grouping of things |
| Grouping | A grouping is a compilation of referenced UCO content with a shared context |
| IdentityAbstraction | An identity abstraction is a grouping of identifying characteristics unique t... |
| Item | An item is a distinct article or unit |
| MarkingDefinitionAbstraction | A marking definition abstraction is a grouping of characteristics unique to t... |
| ModusOperandi | A modus operandi is a particular method of operation (how a particular entity... |
| Relationship | A relationship is a grouping of characteristics unique to an assertion that o... |
| AnalyticTool | "An analytic tool is an artifact of hardware and/or software utilized to acco... |
| ConfiguredTool | "A ConfiguredTool is a Tool that is known to be configured to run in a more s... |
| DefensiveTool | "A defensive tool is an artifact of hardware and/or software utilized to acco... |
| MaliciousTool | "A malicious tool is an artifact of hardware and/or software utilized to acco... |
| Tool | "A tool is an element of hardware and/or software utilized to carry out a par... |
| Identity | An identity is a grouping of identifying characteristics unique to an individ... |
| Organization | An organization is a grouping of identifying characteristics unique to a grou... |
| Person | A person is a grouping of identifying characteristics unique to a human being... |
| Location | A location is a geospatial place, site, or position |
| Configuration | A configuration is a grouping of characteristics unique to a set of parameter... |
| LogicalPattern | A logical pattern is a grouping of characteristics unique to an informational... |
| Pattern | A pattern is a combination of properties, acts, tendencies, etc |
| API | "An API (application programming interface) is a computing interface that def... |
| ARPCache | "An ARP cache is a collection of Address Resolution Protocol (ARP) entries (m... |
| ARPCacheEntry | "An ARP cache entry is a single Address Resolution Protocol (ARP) response re... |
| Account | "An account is an arrangement with an entity to enable and control the provis... |
| Adaptor | "An adaptor is a device that physically converts the pin outputs but does not... |
| Address | "An address is an identifier assigned to enable routing and management of inf... |
| AlternateDataStream | "An alternate data stream is data content stored within an NTFS file that is ... |
| AndroidDevice | "An Android device is a device running the Android operating system |
| AndroidPhone | An android phone is a smart phone that applies the Android mobile operating s... |
| AppleDevice | "An apple device is a smart device that applies either the MacOS or iOS opera... |
| Appliance | "An appliance is a purpose-built computer with software or firmware that is d... |
| Application | "An application is a particular software program designed for end users |
| ApplicationAccount | "An application account is an account within a particular software program de... |
| ArchiveFile | "An archive file is a file that is composed of one or more computer files alo... |
| Audio | "audio is a digital representation of sound |
| AutonomousSystem | "An autonomous system is a collection of connected Internet Protocol (IP) rou... |
| BlackBerryPhone | "A blackberry phone is a smart phone that applies the Blackberry OS mobile op... |
| BlockDeviceNode | "A block device node is a UNIX filesystem special file that serves as a condu... |
| BluetoothAddress | "A Bluetooth address is a Bluetooth standard conformant identifier assigned t... |
| BotConfiguration | "A bot configuration is a set of contextual settings for a software applicati... |
| BrowserBookmark | "A browser bookmark is a saved shortcut that directs a WWW (World Wide Web) b... |
| BrowserCookie | "A browser cookie is a piece of of data sent from a website and stored on the... |
| Calendar | "A calendar is a collection of appointments, meetings, and events |
| CalendarEntry | "A calendar entry is an appointment, meeting or event within a collection of ... |
| Call | "A call is a connection as part of a realtime cyber communication between one... |
| CapturedTelecommunicationsInformation | |
| CellSite | |
| CharacterDeviceNode | "A character device node is a UNIX filesystem special file that serves as a c... |
| Code | "Code is a direct representation (source, byte or binary) of a collection of ... |
| Computer | "A computer is an electronic device for storing and processing data, typicall... |
| ComputerSpecification | "A computer specification is the hardware and software of a programmable elec... |
| ConfiguredSoftware | "A configured software is a Software that is known to be configured to run in... |
| Contact | "A contact is a set of identification and communication related details for a... |
| ContactList | "A contact list is a set of multiple individual contacts such as that found i... |
| ContentData | "Content data is a block of digital data |
| CookieHistory | "A cookie history is the stored web cookie history for a particular web brows... |
| Credential | "A credential is a single specific login and password combination for authori... |
| CredentialDump | "A credential dump is a collection (typically forcibly extracted from a syste... |
| DNSCache | "An DNS cache is a temporary locally stored collection of previous Domain Nam... |
| DNSRecord | "A DNS record is a single Domain Name System (DNS) artifact specifying inform... |
| Device | "A device is a piece of equipment or a mechanism designed to serve a special ... |
| DigitalAccount | "A digital account is an arrangement with an entity to enable and control the... |
| DigitalAddress | "A digital address is an identifier assigned to enable routing and management... |
| DigitalCamera | "A digital camera is a camera that captures photographs in digital memory as ... |
| DigitalSignatureInfo | "A digital signature info is a value calculated via a mathematical scheme for... |
| Directory | "A directory is a file system cataloging structure which contains references ... |
| Disk | "A disk is a storage mechanism where data is recorded by various electronic, ... |
| DiskPartition | "A disk partition is a particular managed region on a storage mechanism where... |
| DomainName | "A domainName is an identification string that defines a realm of administrat... |
| Drone | "A drone, unmanned aerial vehicle (UAV), is an aircraft without a human pilot... |
| EmailAccount | "An email account is an arrangement with an entity to enable and control the ... |
| EmailAddress | "An emailAddress is an identifier for an electronic mailbox to which electron... |
| EmailMessage | "An email message is a message that is an instance of an electronic mail corr... |
| EmbeddedDevice | "An embedded device is a highly specialized microprocessor device meant for o... |
| EventLog | "An event log is a collection of event records |
| EventRecord | "An event record is something that happens in a digital context (e |
| File | "A file is a computer resource for recording data discretely on a computer st... |
| FileSystem | "A file system is the process that manages how and where data on a storage me... |
| FileSystemObject | "A file system object is an informational object represented and managed with... |
| ForumPost | "A forum post is message submitted by a user account to an online forum where... |
| ForumPrivateMessage | "A forum private message (aka PM or DM (direct message)) is a one-to-one mess... |
| GUI | "A GUI is a graphical user interface that allows users to interact with elect... |
| GamingConsole | "A gaming console (video game console or game console) is an electronic syste... |
| GenericObservableObject | "A generic observable object is an article or unit within the digital domain |
| GeoLocationEntry | "A geolocation entry is a single application-specific geolocation entry |
| GeoLocationLog | "A geolocation log is a record containing geolocation tracks and/or geolocati... |
| GeoLocationTrack | "A geolocation track is a set of contiguous geolocation entries representing ... |
| HTTPConnection | "An HTTP connection is network connection that is conformant to the Hypertext... |
| Hostname | "A hostname is a label that is assigned to a device connected to a computer n... |
| ICMPConnection | "An ICMP connection is a network connection that is conformant to the Interne... |
| IPAddress | "An IP address is an Internet Protocol (IP) standards conformant identifier a... |
| IPNetmask | "An IP netmask is a 32-bit 'mask' used to divide an IP address into subnets a... |
| IPhone | |
| IPv4Address | "An IPv4 (Internet Protocol version 4) address is an IPv4 standards conforman... |
| IPv6Address | "An IPv6 (Internet Protocol version 6) address is an IPv6 standards conforman... |
| Image | "An image is a complete copy of a hard disk, memory, or other digital media |
| InstantMessagingAddress | "" |
| Junction | "A junction is a specific NTFS (New Technology file System) reparse point to ... |
| Laptop | "A laptop, laptop computer, or notebook computer is a small, portable persona... |
| Library | "A library is a suite of data and programming code that is used to develop so... |
| MACAddress | "A MAC address is a media access control standards conformant identifier assi... |
| Memory | "memory is a particular region of temporary information storage (e |
| Message | "A message is a discrete unit of electronic communication intended by the sou... |
| MobileAccount | "A mobile account is an arrangement with an entity to enable and control the ... |
| MobileDevice | "A mobile device is a portable computing device |
| MobilePhone | "A mobile phone is a portable telephone that at least can make and receive ca... |
| Mutex | "A mutex is a mechanism that enforces limits on access to a resource when the... |
| NTFSFile | "An NTFS file is a New Technology file System (NTFS) file |
| NamedPipe | "A named pipe is a mechanism for FIFO (first-in-first-out) inter-process comm... |
| NetworkAppliance | "A network appliance is a purpose-built computer with software or firmware th... |
| NetworkConnection | "A network connection is a connection (completed or attempted) across a digit... |
| NetworkFlow | "A network flow is a sequence of data transiting one or more digital network ... |
| NetworkInterface | "A networkInterface is a software or hardware interface between two pieces of... |
| NetworkProtocol | "A network protocol is an established set of structured rules that determine ... |
| NetworkRoute | "A network route is a specific path (of specific network nodes, connections a... |
| NetworkSubnet | "A network subnet is a logical subdivision of an IP network |
| Note | "A note is a brief textual record |
| Observable | "An observable is a characterizable item or action within the digital domain |
| ObservableAction | "An observable action is a grouping of characteristics unique to something th... |
| ObservableObject | "An observable object is a grouping of characteristics unique to a distinct a... |
| ObservablePattern | "An observable pattern is a grouping of characteristics unique to a logical p... |
| ObservableRelationship | "An observable relationship is a grouping of characteristics unique to an ass... |
| Observation | "An observation is a temporal perception of an observable |
| OnlineService | "An online service is a particular provision mechanism of information access,... |
| OperatingSystem | "An operating system is the software that manages computer hardware, software... |
| PDFFile | "A PDF file is a Portable Document Format (PDF) file |
| PaymentCard | "A payment card is a physical token that is part of a payment system issued b... |
| PhoneAccount | "A phone account is an arrangement with an entity to enable and control the p... |
| Pipe | "A pipe is a mechanism for one-way inter-process communication using message ... |
| Post | "A post is message submitted to an online discussion/publishing site (forum, ... |
| Process | "A process is an instance of a computer program executed on an operating syst... |
| ProcessThread | "A process thread is the smallest sequence of programmed instructions that ca... |
| Profile | "A profile is an explicit digital representation of identity and characterist... |
| ProtocolConverter | "A protocol converter is a device that converts from one protocol to another ... |
| RasterPicture | "A raster picture is a raster (or bitmap) image |
| RecoveredObject | "An observable object that was the result of a recovery operation |
| ReparsePoint | "A reparse point is a type of NTFS (New Technology file System) object which ... |
| SIMCard | "A SIM card is a subscriber identification module card intended to securely s... |
| SIPAaddress | "A SIP address is an identifier for Session Initiation Protocol (SIP) communi... |
| SMSMessage | "An SMS message is a message conformant to the short message service (SMS) co... |
| SQLiteBlob | "An SQLite blob is a blob (binary large object) of data within an SQLite data... |
| SecurityAppliance | "A security appliance is a purpose-built computer with software or firmware t... |
| Semaphore | "A semaphore is a variable or abstract dataType used to control access to a c... |
| Server | "A server is a server rack-mount based computer, minicomputer, supercomputer,... |
| ShopListing | "A shop listing is a listing of offered products on an online marketplace/sho... |
| SmartDevice | "A smart device is a microprocessor IoT device that is expected to be connect... |
| SmartPhone | "A smartphone is a portable device that combines mobile telephone and computi... |
| Snapshot | "A snapshot is a file system object representing a snapshot of the contents o... |
| Socket | "A socket is a special file used for inter-process communication, which enabl... |
| SocketAddress | "A socket address (combining and IP address and a port number) is a composite... |
| Software | "Software is a definitely scoped instance of a collection of data or computer... |
| StorageMedium | "A storage medium is any digital storage device that applies electromagnetic ... |
| SymbolicLink | "A symbolic link is a file that contains a reference to another file or direc... |
| TCPConnection | "A TCP connection is a network connection that is conformant to the Transfer" |
| TableField | "A database table field and its associated value contained within a relationa... |
| Tablet | "A tablet is a mobile computer that is primarily operated by touching the scr... |
| Tweet | "A tweet is message submitted by a Twitter user account to the Twitter microb... |
| UNIXAccount | "A UNIX account is an account on a UNIX operating system |
| UNIXFile | "A UNIX file is a file pertaining to the UNIX operating system |
| UNIXProcess | "A UNIX process is an instance of a computer program executed on a UNIX opera... |
| URL | "A URL is a uniform resource locator (URL) acting as a resolvable address to ... |
| URLHistory | "A URL history characterizes the stored URL history for a particular web brow... |
| URLVisit | "A URL visit characterizes the properties of a visit of a URL within a partic... |
| UserAccount | "A user account is an account controlling a user's access to a network, syste... |
| UserSession | "A user session is a temporary and interactive information interchange betwee... |
| Volume | "A volume is a single accessible storage area (volume) with a single file sys... |
| WearableDevice | "A wearable device is an electronic device that is designed to be worn on a p... |
| WebPage | "A web page is a specific collection of information provided by a website and... |
| Whois | "Whois is a response record conformant to the WHOIS protocol standard (RFC 39... |
| WifiAddress | "A Wi-Fi address is a media access control (MAC) standards-conformant identif... |
| Wiki | "A wiki is an online hypertext publication collaboratively edited and managed... |
| WikiArticle | "A wiki article is one or more pages in a wiki focused on characterizing a pa... |
| WindowsAccount | "A Windows account is a user account on a Windows operating system |
| WindowsActiveDirectoryAccount | "A Windows Active Directory account is an account managed by directory-based ... |
| WindowsComputerSpecification | "A Windows computer specification is the hardware ans software of a programma... |
| WindowsCriticalSection | "A Windows critical section is a Windows object that provides synchronization... |
| WindowsEvent | "A Windows event is a notification record of an occurance of interest (system... |
| WindowsFileMapping | "A windows file mapping is the association of a file's contents with a portio... |
| WindowsHandle | "A Windows handle is an abstract reference to a resource within the Windows o... |
| WindowsHook | "A Windows hook is a mechanism by which an application can intercept events, ... |
| WindowsMailSlot | "A Windows mailslot is is a pseudofile that resides in memory, and may be acc... |
| WindowsNetworkShare | "A Windows network share is a Windows computer resource made available from o... |
| WindowsPEBinaryFile | "A Windows PE binary file is a Windows portable executable (PE) file |
| WindowsPrefetch | "The Windows prefetch contains entries in a Windows prefetch file (used to sp... |
| WindowsProcess | "A Windows process is a program running on a Windows operating system |
| WindowsRegistryHive | "The Windows registry hive is a particular logical group of keys, subkeys, an... |
| WindowsRegistryKey | "A Windows registry key is a particular key within a Windows registry (a hier... |
| WindowsService | "A Windows service is a specific Windows service (a computer program that ope... |
| WindowsSystemRestore | "A Windows system restore is a capture of a Windows computer's state (includi... |
| WindowsTask | "A Windows task is a process that is scheduled to execute on a Windows operat... |
| WindowsThread | "A Windows thread is a single thread of execution within a Windows process |
| WindowsWaitableTime | "A Windows waitable timer is a synchronization object within the Windows oper... |
| WirelessNetworkConnection | "A wireless network connection is a connection (completed or attempted) acros... |
| WriteBlocker | "A write blocker is a device that allows read-only access to storage mediums ... |
| X509Certificate | "A X |
| X509V3Certificate | "An X |
| Action | "An action is something that may be done or performed |
| ActionLifecycle | "An action lifecycle is an action pattern consisting of an ordered set of mul... |
| ActionPattern | "An action pattern is a grouping of characteristics unique to a combination o... |
| MarkingDefinition | A MarkingDefinition is a grouping of characteristics unique to the expression... |
| Analysis | "An analysis is an action of detailed examination of something in order to un... |
| AnalyticResult | "An analytic result is a characterization of the understanding resulting from... |
Properties
- Range: String
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/uco-master
LinkML Source
name: specVersion
description: The version of UCO ontology or subontology specification used to characterize
a concept.
from_schema: https://w3id.org/lmodel/uco-master
close_mappings:
- lm_core:version
rank: 1000
alias: specVersion
domain_of:
- UcoObject
range: string