Class: ProcessFacet

"A process facet is a grouping of characteristics unique to an instance of a computer program executed on an operating system."

URI: observable:ProcessFacet

classDiagram class ProcessFacet Facet <|-- ProcessFacet ProcessFacet : arguments ProcessFacet ..> string : arguments ProcessFacet : binary ProcessFacet ..> ObservableObject : binary ProcessFacet : creatorUser ProcessFacet ..> ObservableObject : creatorUser ProcessFacet : currentWorkingDirectory ProcessFacet ..> string : currentWorkingDirectory ProcessFacet : environmentVariables ProcessFacet ..> Dictionary : environmentVariables ProcessFacet : exitStatus ProcessFacet ..> integer : exitStatus ProcessFacet : exitTime ProcessFacet ..> datetime : exitTime ProcessFacet : isHidden ProcessFacet ..> boolean type : isHidden ProcessFacet : observableCreatedTime ProcessFacet ..> datetime : observableCreatedTime ProcessFacet : parent ProcessFacet ..> ObservableObject : parent ProcessFacet : pid ProcessFacet ..> integer : pid ProcessFacet : status ProcessFacet ..> string : status

Inheritance

UcoThing
- UcoInherentCharacterizationThing
  - Facet
    - ProcessFacet

Slots

Name	Cardinality and Range	Description	Inheritance
binary	0..1 ObservableObject		direct
creatorUser	0..1 ObservableObject	"The user that created/owns the process	direct
parent	0..1 ObservableObject	"The process that created this process	direct
environmentVariables	0..1 Dictionary	"A list of environmentVariables associated with the process	direct
isHidden	0..1 BooleanType	"The isHidden property specifies whether the process isHidden or not	direct
exitTime	0..1 xsd:dateTime	"The time at which the process exited	direct
observableCreatedTime	0..1 xsd:dateTime	"The date and time at which the observable object being characterized was cre...	direct
exitStatus	0..1 xsd:integer	"A small number passed from the process to the parent process when it has fin...	direct
pid	0..1 xsd:integer	"The process ID, or PID, of the process	direct
currentWorkingDirectory	0..1 xsd:string		direct
status	0..1 xsd:string	"Specifies a list of statuses for a given Whois entry	direct
arguments	0..1 xsd:string	"A list of arguments utilized in initiating the process	direct

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/uco-observable

Mappings

Mapping Type	Mapped Value
self	observable:ProcessFacet
native	observable:ProcessFacet

LinkML Source

Direct

name: ProcessFacet
description: '"A process facet is a grouping of characteristics unique to an instance
  of a computer program executed on an operating system."'
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
slots:
- binary
- creatorUser
- parent
- environmentVariables
- isHidden
- exitTime
- observableCreatedTime
- exitStatus
- pid
- currentWorkingDirectory
- status
- arguments
slot_usage:
  arguments:
    name: arguments
    multivalued: true
    domain_of:
    - ProcessFacet

Induced

name: ProcessFacet
description: '"A process facet is a grouping of characteristics unique to an instance
  of a computer program executed on an operating system."'
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
slot_usage:
  arguments:
    name: arguments
    multivalued: true
    domain_of:
    - ProcessFacet
attributes:
  binary:
    name: binary
    description: ''
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: binary
    owner: ProcessFacet
    domain_of:
    - ProcessFacet
    range: ObservableObject
  creatorUser:
    name: creatorUser
    description: '"The user that created/owns the process."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: creatorUser
    owner: ProcessFacet
    domain_of:
    - ProcessFacet
    range: ObservableObject
  parent:
    name: parent
    description: '"The process that created this process."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: parent
    owner: ProcessFacet
    domain_of:
    - ProcessFacet
    range: ObservableObject
  environmentVariables:
    name: environmentVariables
    description: '"A list of environmentVariables associated with the process."'
    from_schema: https://w3id.org/lmodel/uco-observable
    exact_mappings:
    - wikidata:Q400857
    narrow_mappings:
    - wikidata:Q530480
    rank: 1000
    alias: environmentVariables
    owner: ProcessFacet
    domain_of:
    - OperatingSystemFacet
    - ProcessFacet
    range: Dictionary
  isHidden:
    name: isHidden
    description: '"The isHidden property specifies whether the process isHidden or
      not."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: isHidden
    owner: ProcessFacet
    domain_of:
    - ProcessFacet
    range: boolean type
  exitTime:
    name: exitTime
    description: '"The time at which the process exited."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: exitTime
    owner: ProcessFacet
    domain_of:
    - ProcessFacet
    range: datetime
  observableCreatedTime:
    name: observableCreatedTime
    description: '"The date and time at which the observable object being characterized
      was created. This time pertains to an intrinsic characteristic of the observable
      object, and would be consistent across independent characterizations or observations
      of the observable object."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: observableCreatedTime
    owner: ProcessFacet
    domain_of:
    - AccountFacet
    - BrowserBookmarkFacet
    - BrowserCookieFacet
    - CalendarEntryFacet
    - DiskPartitionFacet
    - EventRecordFacet
    - FileFacet
    - GeoLocationEntryFacet
    - GeoLocationLogFacet
    - NoteFacet
    - ProcessFacet
    - WindowsTaskFacet
    range: datetime
  exitStatus:
    name: exitStatus
    description: '"A small number passed from the process to the parent process when
      it has finished executing. In general, 0 indicates successful termination, any
      other number indicates a failure."'
    from_schema: https://w3id.org/lmodel/uco-observable
    exact_mappings:
    - wikidata:Q2553232
    rank: 1000
    alias: exitStatus
    owner: ProcessFacet
    domain_of:
    - ProcessFacet
    range: integer
  pid:
    name: pid
    description: '"The process ID, or PID, of the process."'
    from_schema: https://w3id.org/lmodel/uco-observable
    aliases:
    - pid_mode
    exact_mappings:
    - wikidata:Q1541645
    rank: 1000
    alias: pid
    owner: ProcessFacet
    domain_of:
    - ProcessFacet
    range: integer
  currentWorkingDirectory:
    name: currentWorkingDirectory
    from_schema: https://w3id.org/lmodel/uco-observable
    exact_mappings:
    - wikidata:Q1192634
    rank: 1000
    alias: currentWorkingDirectory
    owner: ProcessFacet
    domain_of:
    - ProcessFacet
    range: string
  status:
    name: status
    description: '"Specifies a list of statuses for a given Whois entry."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: status
    owner: ProcessFacet
    domain_of:
    - ProcessFacet
    - WhoisFacet
    - WindowsTaskFacet
    union_of:
    - '{''range'': ''string type''}'
    - '{''range'': ''TaskStatusVocab''}'
    - '{''range'': ''WhoisStatusTypeVocab''}'
    range: string
  arguments:
    name: arguments
    description: '"A list of arguments utilized in initiating the process."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    multivalued: true
    alias: arguments
    owner: ProcessFacet
    domain_of:
    - ProcessFacet
    range: string