Class: WindowsTaskFacet

"A Windows Task facet is a grouping of characteristics unique to a Windows Task (a process that is scheduled to execute on a Windows operating system by the Windows Task Scheduler). [based on http://msdn.microsoft.com/en-us/library/windows/desktop/aa381311(v=vs.85).aspx]"

URI: observable:WindowsTaskFacet

classDiagram class WindowsTaskFacet Facet <|-- WindowsTaskFacet WindowsTaskFacet : account WindowsTaskFacet ..> ObservableObject : account WindowsTaskFacet : accountLogonType WindowsTaskFacet ..> string : accountLogonType WindowsTaskFacet : accountRunLevel WindowsTaskFacet ..> string : accountRunLevel WindowsTaskFacet : actionList WindowsTaskFacet ..> TaskActionType : actionList WindowsTaskFacet : application WindowsTaskFacet ..> ObservableObject : application WindowsTaskFacet : exitCode WindowsTaskFacet ..> integer : exitCode WindowsTaskFacet : flags WindowsTaskFacet ..> TaskFlagEnum : flags WindowsTaskFacet : imageName WindowsTaskFacet ..> string : imageName WindowsTaskFacet : maxRunTime WindowsTaskFacet ..> integer : maxRunTime WindowsTaskFacet : mostRecentRunTime WindowsTaskFacet ..> datetime : mostRecentRunTime WindowsTaskFacet : nextRunTime WindowsTaskFacet ..> datetime : nextRunTime WindowsTaskFacet : observableCreatedTime WindowsTaskFacet ..> datetime : observableCreatedTime WindowsTaskFacet : parameters WindowsTaskFacet ..> string : parameters WindowsTaskFacet : priority WindowsTaskFacet ..> TaskPriorityEnum : priority WindowsTaskFacet : status WindowsTaskFacet ..> TaskStatusEnum : status WindowsTaskFacet : taskComment WindowsTaskFacet ..> string : taskComment WindowsTaskFacet : taskCreator WindowsTaskFacet ..> string : taskCreator WindowsTaskFacet : triggerList WindowsTaskFacet ..> string : triggerList WindowsTaskFacet : workingDirectory WindowsTaskFacet ..> ObservableObject : workingDirectory WindowsTaskFacet : workItemData WindowsTaskFacet ..> ObservableObject : workItemData

Inheritance

UcoThing
- UcoInherentCharacterizationThing
  - Facet
    - WindowsTaskFacet

Slots

Name	Cardinality and Range	Description	Inheritance
account	0..1 ObservableObject	"Specifies the account referenced in an event log entry or used to run the sc...	direct
application	0..1 ObservableObject	"The application associated with this object	direct
workItemData	0..1 ObservableObject	"Specifies application defined data associated with the scheduled task	direct
workingDirectory	0..1 ObservableObject	'Specifies the workingDirectory for the scheduled task	direct
actionList	0..1 TaskActionType	"Specifies a list of actions to be performed by the scheduled task	direct
triggerList	0..1 xsd:string	"Specifies a set of triggers used by the scheduled task	direct
mostRecentRunTime	0..1 xsd:dateTime	"Specifies the most recent run date/time of this scheduled task	direct
nextRunTime	0..1 xsd:dateTime	"Specifies the next run date/time of the scheduled task	direct
observableCreatedTime	0..1 xsd:dateTime	"The date and time at which the observable object being characterized was cre...	direct
exitCode	0..1 xsd:integer	"Specifies the last exitCode of the scheduled task	direct
maxRunTime	0..1 xsd:integer	"Specifies the maximum run time of the scheduled task before terminating, in ...	direct
accountLogonType	0..1 xsd:string	"Specifies the security logon method required to run the tasks associated wit...	direct
accountRunLevel	0..1 xsd:string	"Specifies the permission level of the account that the task will be run at	direct
imageName	0..1 xsd:string	"Specifies the imageName for the task	direct
parameters	0..1 xsd:string	"Specifies the command line parameters used to launch the scheduled task	direct
taskComment	0..1 xsd:string	"Specifies a comment for the scheduled task	direct
taskCreator	0..1 xsd:string	"Specifies the name of the creator of the scheduled task	direct
flags	0..1 xsd:string	"Specifies any flags that modify the behavior of the scheduled task	direct
priority	0..1 xsd:string	"The priority of the email	direct
status	0..1 xsd:string	"Specifies a list of statuses for a given Whois entry	direct

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/uco-observable

Mappings

Mapping Type	Mapped Value
self	observable:WindowsTaskFacet
native	observable:WindowsTaskFacet

LinkML Source

Direct

name: WindowsTaskFacet
description: '"A Windows Task facet is a grouping of characteristics unique to a Windows
  Task (a process that is scheduled to execute on a Windows operating system by the
  Windows Task Scheduler). [based on http://msdn.microsoft.com/en-us/library/windows/desktop/aa381311(v=vs.85).aspx]"'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
slots:
- account
- application
- workItemData
- workingDirectory
- actionList
- triggerList
- mostRecentRunTime
- nextRunTime
- observableCreatedTime
- exitCode
- maxRunTime
- accountLogonType
- accountRunLevel
- imageName
- parameters
- taskComment
- taskCreator
- flags
- priority
- status
slot_usage:
  actionList:
    name: actionList
    multivalued: true
    domain_of:
    - WindowsTaskFacet
  triggerList:
    name: triggerList
    multivalued: true
    domain_of:
    - WindowsTaskFacet
  flags:
    name: flags
    domain_of:
    - WindowsTaskFacet
    range: TaskFlagEnum
  priority:
    name: priority
    domain_of:
    - EmailMessageFacet
    - WindowsProcessFacet
    - WindowsTaskFacet
    - WindowsThreadFacet
    range: TaskPriorityEnum
    maximum_cardinality: 1
  status:
    name: status
    domain_of:
    - ProcessFacet
    - WhoisFacet
    - WindowsTaskFacet
    range: TaskStatusEnum
    maximum_cardinality: 1

Induced

name: WindowsTaskFacet
description: '"A Windows Task facet is a grouping of characteristics unique to a Windows
  Task (a process that is scheduled to execute on a Windows operating system by the
  Windows Task Scheduler). [based on http://msdn.microsoft.com/en-us/library/windows/desktop/aa381311(v=vs.85).aspx]"'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: Facet
slot_usage:
  actionList:
    name: actionList
    multivalued: true
    domain_of:
    - WindowsTaskFacet
  triggerList:
    name: triggerList
    multivalued: true
    domain_of:
    - WindowsTaskFacet
  flags:
    name: flags
    domain_of:
    - WindowsTaskFacet
    range: TaskFlagEnum
  priority:
    name: priority
    domain_of:
    - EmailMessageFacet
    - WindowsProcessFacet
    - WindowsTaskFacet
    - WindowsThreadFacet
    range: TaskPriorityEnum
    maximum_cardinality: 1
  status:
    name: status
    domain_of:
    - ProcessFacet
    - WhoisFacet
    - WindowsTaskFacet
    range: TaskStatusEnum
    maximum_cardinality: 1
attributes:
  account:
    name: account
    description: '"Specifies the account referenced in an event log entry or used
      to run the scheduled task. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/aa381228(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    exact_mappings:
    - sumo:Account
    rank: 1000
    alias: account
    owner: WindowsTaskFacet
    domain_of:
    - EventRecordFacet
    - WindowsTaskFacet
    range: ObservableObject
  application:
    name: application
    description: '"The application associated with this object."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: application
    owner: WindowsTaskFacet
    domain_of:
    - ApplicationAccountFacet
    - BrowserBookmarkFacet
    - BrowserCookieFacet
    - CalendarEntryFacet
    - CalendarFacet
    - CallFacet
    - EmailMessageFacet
    - EventRecordFacet
    - GeoLocationEntryFacet
    - GeoLocationLogFacet
    - GeoLocationTrackFacet
    - MessageFacet
    - NoteFacet
    - WindowsTaskFacet
    range: ObservableObject
  workItemData:
    name: workItemData
    description: '"Specifies application defined data associated with the scheduled
      task. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/aa381271(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: workItemData
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: ObservableObject
  workingDirectory:
    name: workingDirectory
    description: '''Specifies the workingDirectory for the scheduled task. See also:
      http://msdn.microsoft.com/en-us/library/windows/desktop/aa381878(v=vs.85).aspx'''
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: workingDirectory
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: ObservableObject
  actionList:
    name: actionList
    description: '"Specifies a list of actions to be performed by the scheduled task."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    multivalued: true
    alias: actionList
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: TaskActionType
  triggerList:
    name: triggerList
    description: '"Specifies a set of triggers used by the scheduled task. See also:
      http://msdn.microsoft.com/en-us/library/windows/desktop/aa383264(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    multivalued: true
    alias: triggerList
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: string
  mostRecentRunTime:
    name: mostRecentRunTime
    description: '"Specifies the most recent run date/time of this scheduled task.
      See also: http://msdn.microsoft.com/en-us/library/windows/desktop/aa381254(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: mostRecentRunTime
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: datetime
  nextRunTime:
    name: nextRunTime
    description: '"Specifies the next run date/time of the scheduled task. See also:
      http://msdn.microsoft.com/en-us/library/windows/desktop/aa381257(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: nextRunTime
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: datetime
  observableCreatedTime:
    name: observableCreatedTime
    description: '"The date and time at which the observable object being characterized
      was created. This time pertains to an intrinsic characteristic of the observable
      object, and would be consistent across independent characterizations or observations
      of the observable object."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: observableCreatedTime
    owner: WindowsTaskFacet
    domain_of:
    - AccountFacet
    - BrowserBookmarkFacet
    - BrowserCookieFacet
    - CalendarEntryFacet
    - DiskPartitionFacet
    - EventRecordFacet
    - FileFacet
    - GeoLocationEntryFacet
    - GeoLocationLogFacet
    - NoteFacet
    - ProcessFacet
    - WindowsTaskFacet
    range: datetime
  exitCode:
    name: exitCode
    description: '"Specifies the last exitCode of the scheduled task. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/aa381245(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: exitCode
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: integer
  maxRunTime:
    name: maxRunTime
    description: '"Specifies the maximum run time of the scheduled task before terminating,
      in milliseconds. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/aa381874(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: maxRunTime
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: integer
  accountLogonType:
    name: accountLogonType
    description: '"Specifies the security logon method required to run the tasks associated
      with the account. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/aa383013(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: accountLogonType
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: string
  accountRunLevel:
    name: accountRunLevel
    description: '"Specifies the permission level of the account that the task will
      be run at."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: accountRunLevel
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: string
  imageName:
    name: imageName
    description: '"Specifies the imageName for the task."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: imageName
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: string
  parameters:
    name: parameters
    description: '"Specifies the command line parameters used to launch the scheduled
      task. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/aa381875(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: parameters
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: string
  taskComment:
    name: taskComment
    description: '"Specifies a comment for the scheduled task. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/aa381232(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: taskComment
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: string
  taskCreator:
    name: taskCreator
    description: '"Specifies the name of the creator of the scheduled task. See also:
      http://msdn.microsoft.com/en-us/library/windows/desktop/aa381235(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: taskCreator
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: string
  flags:
    name: flags
    description: '"Specifies any flags that modify the behavior of the scheduled task.
      See also: http://msdn.microsoft.com/en-us/library/windows/desktop/aa381248(v=vs.85).aspx."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: flags
    owner: WindowsTaskFacet
    domain_of:
    - WindowsTaskFacet
    range: TaskFlagEnum
  priority:
    name: priority
    description: '"The priority of the email."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: priority
    owner: WindowsTaskFacet
    domain_of:
    - EmailMessageFacet
    - WindowsProcessFacet
    - WindowsTaskFacet
    - WindowsThreadFacet
    range: TaskPriorityEnum
    maximum_cardinality: 1
  status:
    name: status
    description: '"Specifies a list of statuses for a given Whois entry."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    alias: status
    owner: WindowsTaskFacet
    domain_of:
    - ProcessFacet
    - WhoisFacet
    - WindowsTaskFacet
    range: TaskStatusEnum
    maximum_cardinality: 1