Class: AlternateDataStreamFacet

"An alternate data stream facet is a grouping of characteristics unique to data content stored within an NTFS file that is independent of the standard content stream of the file and isHidden from access by default NTFS file viewing mechanisms."

URI: observable:AlternateDataStreamFacet

classDiagram class AlternateDataStreamFacet Facet <|-- AlternateDataStreamFacet AlternateDataStreamFacet : hashes AlternateDataStreamFacet ..> Hash : hashes AlternateDataStreamFacet : name AlternateDataStreamFacet ..> string : name AlternateDataStreamFacet : size AlternateDataStreamFacet ..> positive integer : size

Inheritance

UcoThing
- UcoInherentCharacterizationThing
  - Facet
    - AlternateDataStreamFacet

Slots

Name	Cardinality and Range	Description	Inheritance
hashes	0..1 Hash	"Specifies any hashes computed over the section	direct
name	0..1 xsd:string	The name of a particular concept characterization	direct
size	0..1 PositiveInteger	The number of item belonging to a collection	direct

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/uco-observable

Mappings

Mapping Type	Mapped Value
self	observable:AlternateDataStreamFacet
native	observable:AlternateDataStreamFacet

LinkML Source

Direct

name: AlternateDataStreamFacet
description: '"An alternate data stream facet is a grouping of characteristics unique
  to data content stored within an NTFS file that is independent of the standard content
  stream of the file and isHidden from access by default NTFS file viewing mechanisms."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
slots:
- hashes
- name
- size

Induced

name: AlternateDataStreamFacet
description: '"An alternate data stream facet is a grouping of characteristics unique
  to data content stored within an NTFS file that is independent of the standard content
  stream of the file and isHidden from access by default NTFS file viewing mechanisms."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
attributes:
  hashes:
    name: hashes
    description: '"Specifies any hashes computed over the section."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: hashes
    owner: AlternateDataStreamFacet
    domain_of:
    - AlternateDataStreamFacet
    - WindowsPESection
    range: Hash
  name:
    name: name
    description: The name of a particular concept characterization.
    comments:
    - This annotation is typically used to describe an artifact such as a controlled
      vocabulary, document, ontology, or other similar resource.
    from_schema: https://w3id.org/lmodel/uco-core
    aliases:
    - label
    - display name
    - title
    - alt label
    exact_mappings:
    - CSO:named_entity
    - gr:name
    - lm_core:name
    - om:name
    - REPR:name
    - schema:name
    broad_mappings:
    - CSO:named_entity
    slot_uri: rdfs:label
    alias: name
    owner: AlternateDataStreamFacet
    domain_of:
    - AlternateDataStreamFacet
    - EnvironmentVariable
    - OnlineServiceFacet
    - ProfileFacet
    - WindowsPESection
    - WindowsRegistryValue
    - UcoObject
    range: string
  size:
    name: size
    description: The number of item belonging to a collection.
    comments:
    - CO defines the size of a collection as the sum of the number of times entities
      that are part of the collection appear in it. This means that co:size considers
      how much each entity is involved by a particular collection, i.e.
    - the size of the set {a, b, c} is three
    - the size of the bag [a, a, b, b, b, c] is five
    - the size of the list (a, b, c, b, a, b, c, c) is seven</dc:description>
    from_schema: https://w3id.org/lmodel/collections
    aliases:
    - has size
    exact_mappings:
    - co:size
    domain: Collection
    alias: size
    owner: AlternateDataStreamFacet
    domain_of:
    - AlternateDataStreamFacet
    - WindowsPESection
    - Collection
    range: positive integer