Skip to content

Class: WindowsPrefetchFacet

"A Windows prefetch facet is a grouping of characteristics unique to entries in the Windows prefetch file (used to speed up application startup starting with Windows XP)."

URI: observable:WindowsPrefetchFacet

classDiagram class WindowsPrefetchFacet Facet <|-- WindowsPrefetchFacet WindowsPrefetchFacet : accessedDirectory WindowsPrefetchFacet ..> ObservableObject : accessedDirectory WindowsPrefetchFacet : accessedFile WindowsPrefetchFacet ..> ObservableObject : accessedFile WindowsPrefetchFacet : applicationFileName WindowsPrefetchFacet ..> string : applicationFileName WindowsPrefetchFacet : firstRun WindowsPrefetchFacet ..> datetime : firstRun WindowsPrefetchFacet : lastRun WindowsPrefetchFacet ..> datetime : lastRun WindowsPrefetchFacet : prefetchHash WindowsPrefetchFacet ..> string : prefetchHash WindowsPrefetchFacet : timesExecuted WindowsPrefetchFacet ..> integer : timesExecuted WindowsPrefetchFacet : volume WindowsPrefetchFacet ..> ObservableObject : volume

Inheritance

Slots

Name Cardinality and Range Description Inheritance
volume 0..1
ObservableObject
"The volume from which the prefetch application was run direct
accessedDirectory 0..1
ObservableObject
"Directories accessed by the prefetch application during startup direct
accessedFile 0..1
ObservableObject
" files (e direct
firstRun 0..1
xsd:dateTime
"Timestamp of when the prefetch application was firstRun direct
lastRun 0..1
xsd:dateTime
"Timestamp of when the prefetch application was lastRun direct
timesExecuted 0..1
xsd:integer
"The number of times the prefetch application has executed direct
applicationFileName 0..1
xsd:string
"Name of the executable of the prefetch file direct
prefetchHash 0..1
xsd:string
"An eight character hash of the location from which the application was run direct

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/lmodel/uco-observable

Mappings

Mapping Type Mapped Value
self observable:WindowsPrefetchFacet
native observable:WindowsPrefetchFacet

LinkML Source

Direct

name: WindowsPrefetchFacet
description: '"A Windows prefetch facet is a grouping of characteristics unique to
  entries in the Windows prefetch file (used to speed up application startup starting
  with Windows XP)."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
slots:
- volume
- accessedDirectory
- accessedFile
- firstRun
- lastRun
- timesExecuted
- applicationFileName
- prefetchHash
slot_usage:
  accessedDirectory:
    name: accessedDirectory
    multivalued: true
    domain_of:
    - WindowsPrefetchFacet
  accessedFile:
    name: accessedFile
    multivalued: true
    domain_of:
    - WindowsPrefetchFacet

Induced

name: WindowsPrefetchFacet
description: '"A Windows prefetch facet is a grouping of characteristics unique to
  entries in the Windows prefetch file (used to speed up application startup starting
  with Windows XP)."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
slot_usage:
  accessedDirectory:
    name: accessedDirectory
    multivalued: true
    domain_of:
    - WindowsPrefetchFacet
  accessedFile:
    name: accessedFile
    multivalued: true
    domain_of:
    - WindowsPrefetchFacet
attributes:
  volume:
    name: volume
    description: '"The volume from which the prefetch application was run. If the
      applicatin was run from multiple volumes, there will be a separate prefetch
      file for each."'
    from_schema: https://w3id.org/lmodel/uco-observable
    aliases:
    - volumes
    exact_mappings:
    - WIKIDATA:Q1125653
    rank: 1000
    alias: volume
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: ObservableObject
  accessedDirectory:
    name: accessedDirectory
    description: '"Directories accessed by the prefetch application during startup."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    multivalued: true
    alias: accessedDirectory
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: ObservableObject
  accessedFile:
    name: accessedFile
    description: '" files (e.g., DLLs and other support files) used by the application
      during startup."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    multivalued: true
    alias: accessedFile
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: ObservableObject
  firstRun:
    name: firstRun
    description: '"Timestamp of when the prefetch application was firstRun."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: firstRun
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: datetime
  lastRun:
    name: lastRun
    description: '"Timestamp of when the prefetch application was lastRun."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: lastRun
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: datetime
  timesExecuted:
    name: timesExecuted
    description: '"The number of times the prefetch application has executed."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: timesExecuted
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: integer
  applicationFileName:
    name: applicationFileName
    description: '"Name of the executable of the prefetch file."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: applicationFileName
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: string
  prefetchHash:
    name: prefetchHash
    description: '"An eight character hash of the location from which the application
      was run."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: prefetchHash
    owner: WindowsPrefetchFacet
    domain_of:
    - WindowsPrefetchFacet
    range: string