Class: WindowsPrefetchFacet

"A Windows prefetch facet is a grouping of characteristics unique to entries in the Windows prefetch file (used to speed up application startup starting with Windows XP)."

URI: observable:WindowsPrefetchFacet

classDiagram class WindowsPrefetchFacet Facet <|-- WindowsPrefetchFacet WindowsPrefetchFacet : accessedDirectory WindowsPrefetchFacet ..> ObservableObject : accessedDirectory WindowsPrefetchFacet : accessedFile WindowsPrefetchFacet ..> ObservableObject : accessedFile WindowsPrefetchFacet : applicationFileName WindowsPrefetchFacet ..> string : applicationFileName WindowsPrefetchFacet : firstRun WindowsPrefetchFacet ..> datetime : firstRun WindowsPrefetchFacet : lastRun WindowsPrefetchFacet ..> datetime : lastRun WindowsPrefetchFacet : prefetchHash WindowsPrefetchFacet ..> string : prefetchHash WindowsPrefetchFacet : timesExecuted WindowsPrefetchFacet ..> integer : timesExecuted WindowsPrefetchFacet : volume WindowsPrefetchFacet ..> ObservableObject : volume

Inheritance

UcoThing
- UcoInherentCharacterizationThing
  - Facet
    - WindowsPrefetchFacet

Slots

Name	Cardinality and Range	Description	Inheritance
volume	0..1 ObservableObject	"The volume from which the prefetch application was run	direct
accessedDirectory	0..1 ObservableObject	"Directories accessed by the prefetch application during startup	direct
accessedFile	0..1 ObservableObject	" files (e	direct
firstRun	0..1 xsd:dateTime	"Timestamp of when the prefetch application was firstRun	direct
lastRun	0..1 xsd:dateTime	"Timestamp of when the prefetch application was lastRun	direct
timesExecuted	0..1 xsd:integer	"The number of times the prefetch application has executed	direct
applicationFileName	0..1 xsd:string	"Name of the executable of the prefetch file	direct
prefetchHash	0..1 xsd:string	"An eight character hash of the location from which the application was run	direct

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/uco-observable

Mappings

Mapping Type	Mapped Value
self	observable:WindowsPrefetchFacet
native	observable:WindowsPrefetchFacet

LinkML Source

Direct

name: WindowsPrefetchFacet
description: '"A Windows prefetch facet is a grouping of characteristics unique to
  entries in the Windows prefetch file (used to speed up application startup starting
  with Windows XP)."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
slots:
- volume
- accessedDirectory
- accessedFile
- firstRun
- lastRun
- timesExecuted
- applicationFileName
- prefetchHash
slot_usage:
  accessedDirectory:
    name: accessedDirectory
    multivalued: true
    domain_of:
    - WindowsPrefetchFacet
  accessedFile:
    name: accessedFile
    multivalued: true
    domain_of:
    - WindowsPrefetchFacet

Induced

name: WindowsPrefetchFacet
description: '"A Windows prefetch facet is a grouping of characteristics unique to
  entries in the Windows prefetch file (used to speed up application startup starting
  with Windows XP)."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
slot_usage:
  accessedDirectory:
    name: accessedDirectory
    multivalued: true
    domain_of:
    - WindowsPrefetchFacet
  accessedFile:
    name: accessedFile
    multivalued: true
    domain_of:
    - WindowsPrefetchFacet
attributes:
  volume:
    name: volume
    description: '"The volume from which the prefetch application was run. If the
      applicatin was run from multiple volumes, there will be a separate prefetch
      file for each."'
    from_schema: https://w3id.org/lmodel/uco-observable
    aliases:
    - volumes
    exact_mappings:
    - WIKIDATA:Q1125653
    rank: 1000
    alias: volume
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: ObservableObject
  accessedDirectory:
    name: accessedDirectory
    description: '"Directories accessed by the prefetch application during startup."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    multivalued: true
    alias: accessedDirectory
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: ObservableObject
  accessedFile:
    name: accessedFile
    description: '" files (e.g., DLLs and other support files) used by the application
      during startup."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    multivalued: true
    alias: accessedFile
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: ObservableObject
  firstRun:
    name: firstRun
    description: '"Timestamp of when the prefetch application was firstRun."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: firstRun
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: datetime
  lastRun:
    name: lastRun
    description: '"Timestamp of when the prefetch application was lastRun."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: lastRun
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: datetime
  timesExecuted:
    name: timesExecuted
    description: '"The number of times the prefetch application has executed."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: timesExecuted
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: integer
  applicationFileName:
    name: applicationFileName
    description: '"Name of the executable of the prefetch file."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: applicationFileName
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: string
  prefetchHash:
    name: prefetchHash
    description: '"An eight character hash of the location from which the application
      was run."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: prefetchHash
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: string