Skip to content

Class: NTFSFileFacet

"An NTFS file facet is a grouping of characteristics unique to a file on an NTFS (new technology filesystem) file system."

URI: observable:NTFSFileFacet

classDiagram class NTFSFileFacet Facet <|-- NTFSFileFacet NTFSFileFacet : alternateDataStreams NTFSFileFacet ..> AlternateDataStream : alternateDataStreams NTFSFileFacet : entryID NTFSFileFacet ..> integer : entryID NTFSFileFacet : sid NTFSFileFacet ..> string : sid

Inheritance

Slots

Name Cardinality and Range Description Inheritance
alternateDataStreams 0..1
AlternateDataStream
direct
entryID 0..1
xsd:integer
"A unique identifier for the file within the filesystem direct
sid 0..1
xsd:string
direct

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/lmodel/uco-observable

Mappings

Mapping Type Mapped Value
self observable:NTFSFileFacet
native observable:NTFSFileFacet

LinkML Source

Direct

name: NTFSFileFacet
description: '"An NTFS file facet is a grouping of characteristics unique to a file
  on an NTFS (new technology filesystem) file system."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
slots:
- alternateDataStreams
- entryID
- sid
slot_usage:
  alternateDataStreams:
    name: alternateDataStreams
    multivalued: true
    domain_of:
    - NTFSFileFacet

Induced

name: NTFSFileFacet
description: '"An NTFS file facet is a grouping of characteristics unique to a file
  on an NTFS (new technology filesystem) file system."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
slot_usage:
  alternateDataStreams:
    name: alternateDataStreams
    multivalued: true
    domain_of:
    - NTFSFileFacet
attributes:
  alternateDataStreams:
    name: alternateDataStreams
    description: ''
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    multivalued: true
    alias: alternateDataStreams
    owner: NTFSFileFacet
    domain_of:
    - NTFSFileFacet
    range: AlternateDataStream
  entryID:
    name: entryID
    description: '"A unique identifier for the file within the filesystem."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: entryID
    owner: NTFSFileFacet
    domain_of:
    - NTFSFileFacet
    range: integer
  sid:
    name: sid
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: sid
    owner: NTFSFileFacet
    domain_of:
    - NTFSFileFacet
    range: string