1. Home
  2. Entities
  3. Shapes
  4. observable:WindowsTaskFacet

observable:WindowsTaskFacet leaf node

URI

https://ontology.unifiedcyberontology.org/uco/observable/WindowsTaskFacet

Label

WindowsTaskFacet

Description

A Windows Task facet is a grouping of characteristics unique to a Windows Task (a process that is scheduled to execute on a Windows operating system by the Windows Task Scheduler). [based on http://msdn.microsoft.com/en-us/library/windows/desktop/aa381311(v=vs.85).aspx]

Superclasses (3)

  • core:Facet
  • core:UcoInherentCharacterizationThing
  • core:UcoThing

    • Target Classes (1)

  • observable:WindowsTaskFacet

    • Shape Properties

    Instances of observable:WindowsTaskFacet can have the following properties:

    PROPERTY

    MIN COUNT

    MAX COUNT

    TYPE
    observable:WindowsTaskFacet
    observable:account 1 observable:ObservableObject
    observable:accountLogonType 1 xsd:string
    observable:accountRunLevel 1 xsd:string
    observable:actionList observable:TaskActionType
    observable:application 1 observable:ObservableObject
    observable:exitCode 1 xsd:integer
    observable:flags vocabulary:TaskFlagVocab
    observable:imageName 1 xsd:string
    observable:maxRunTime 1 xsd:integer
    observable:mostRecentRunTime 1 xsd:dateTime
    observable:nextRunTime 1 xsd:dateTime
    observable:observableCreatedTime 1 xsd:dateTime
    observable:parameters 1 xsd:string
    observable:priority 1 vocabulary:TaskPriorityVocab
    observable:status 1 vocabulary:TaskStatusVocab
    observable:taskComment 1 xsd:string
    observable:taskCreator 1 xsd:string
    observable:triggerList observable:TriggerType
    observable:workItemData 1 observable:ObservableObject
    observable:workingDirectory 1 observable:ObservableObject

    Implementation

    @prefix core: <https://ontology.unifiedcyberontology.org/uco/core/> .
@prefix observable: <https://ontology.unifiedcyberontology.org/uco/observable/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix vocabulary: <https://ontology.unifiedcyberontology.org/uco/vocabulary/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

observable:WindowsTaskFacet a owl:Class,
        sh:NodeShape ;
    rdfs:label "WindowsTaskFacet"@en ;
    rdfs:comment "A Windows Task facet is a grouping of characteristics unique to a Windows Task (a process that is scheduled to execute on a Windows operating system by the Windows Task Scheduler). [based on http://msdn.microsoft.com/en-us/library/windows/desktop/aa381311(v=vs.85).aspx]"@en ;
    rdfs:subClassOf core:Facet ;
    sh:property [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:IRI ;
            sh:path observable:account ],
        [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:IRI ;
            sh:path observable:application ],
        [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:IRI ;
            sh:path observable:workItemData ],
        [ sh:class observable:ObservableObject ;
            sh:maxCount 1 ;
            sh:nodeKind sh:IRI ;
            sh:path observable:workingDirectory ],
        [ sh:class observable:TaskActionType ;
            sh:nodeKind sh:IRI ;
            sh:path observable:actionList ],
        [ sh:class observable:TriggerType ;
            sh:nodeKind sh:IRI ;
            sh:path observable:triggerList ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:mostRecentRunTime ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:nextRunTime ],
        [ sh:datatype xsd:dateTime ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:observableCreatedTime ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:exitCode ],
        [ sh:datatype xsd:integer ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:maxRunTime ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:accountLogonType ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:accountRunLevel ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:imageName ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:parameters ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:taskComment ],
        [ sh:datatype xsd:string ;
            sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:path observable:taskCreator ],
        [ sh:datatype vocabulary:TaskFlagVocab ;
            sh:message "Value is outside the default vocabulary TaskFlagVocab." ;
            sh:path observable:flags ;
            sh:severity sh:Info ],
        [ sh:datatype vocabulary:TaskPriorityVocab ;
            sh:message "Value is outside the default vocabulary TaskPriorityVocab." ;
            sh:path observable:priority ;
            sh:severity sh:Info ],
        [ sh:datatype vocabulary:TaskStatusVocab ;
            sh:message "Value is outside the default vocabulary TaskStatusVocab." ;
            sh:path observable:status ;
            sh:severity sh:Info ],
        [ sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:or ( [ sh:datatype vocabulary:TaskPriorityVocab ] [ sh:datatype xsd:integer ] [ sh:datatype xsd:string ] ) ;
            sh:path observable:priority ],
        [ sh:maxCount 1 ;
            sh:nodeKind sh:Literal ;
            sh:or ( [ sh:datatype vocabulary:TaskStatusVocab ] [ sh:datatype xsd:string ] ) ;
            sh:path observable:status ],
        [ sh:message "Value is not member of the vocabulary TaskFlagVocab." ;
            sh:or ( [ sh:datatype vocabulary:TaskFlagVocab ;
                        sh:in ( "TASK_FLAG_DELETE_WHEN_DONE"^^vocabulary:TaskFlagVocab "TASK_FLAG_DISABLED"^^vocabulary:TaskFlagVocab "TASK_FLAG_DONT_START_IF_ON_BATTERIES"^^vocabulary:TaskFlagVocab "TASK_FLAG_HIDDEN"^^vocabulary:TaskFlagVocab "TASK_FLAG_INTERACTIVE"^^vocabulary:TaskFlagVocab "TASK_FLAG_KILL_IF_GOING_ON_BATTERIES"^^vocabulary:TaskFlagVocab "TASK_FLAG_KILL_ON_IDLE_END"^^vocabulary:TaskFlagVocab "TASK_FLAG_RESTART_ON_IDLE_RESUME"^^vocabulary:TaskFlagVocab "TASK_FLAG_RUN_IF_CONNECTED_TO_INTERNET"^^vocabulary:TaskFlagVocab "TASK_FLAG_RUN_ONLY_IF_LOGGED_ON"^^vocabulary:TaskFlagVocab "TASK_FLAG_START_ONLY_IF_IDLE"^^vocabulary:TaskFlagVocab "TASK_FLAG_SYSTEM_REQUIRED"^^vocabulary:TaskFlagVocab "TASK_FLAG_ZERO"^^vocabulary:TaskFlagVocab ) ] [ sh:datatype xsd:string ] ) ;
            sh:path observable:flags ],
        [ sh:message "Value is not member of the vocabulary TaskPriorityVocab." ;
            sh:or ( [ sh:datatype vocabulary:TaskPriorityVocab ;
                        sh:in ( "ABOVE_NORMAL_PRIORITY_CLASS"^^vocabulary:TaskPriorityVocab "BELOW_NORMAL_PRIORITY_CLASS"^^vocabulary:TaskPriorityVocab "HIGH_PRIORITY_CLASS"^^vocabulary:TaskPriorityVocab "IDLE_PRIORITY_CLASS"^^vocabulary:TaskPriorityVocab "NORMAL_PRIORITY_CLASS"^^vocabulary:TaskPriorityVocab "REALTIME_PRIORITY_CLASS"^^vocabulary:TaskPriorityVocab ) ] [ sh:datatype xsd:integer ] [ sh:datatype xsd:string ] ) ;
            sh:path observable:priority ],
        [ sh:message "Value is not member of the vocabulary TaskStatusVocab." ;
            sh:or ( [ sh:datatype vocabulary:TaskStatusVocab ;
                        sh:in ( "SCHED_E_ACCOUNT_DBASE_CORRUPT"^^vocabulary:TaskStatusVocab "SCHED_E_ACCOUNT_INFORMATION_NOT_SET"^^vocabulary:TaskStatusVocab "SCHED_E_ACCOUNT_NAME_NOT_FOUND"^^vocabulary:TaskStatusVocab "SCHED_E_CANNOT_OPEN_TASK"^^vocabulary:TaskStatusVocab "SCHED_E_INVALID_TASK"^^vocabulary:TaskStatusVocab "SCHED_E_NO_SECURITY_SERVICES"^^vocabulary:TaskStatusVocab "SCHED_E_SERVICE_NOT_INSTALLED"^^vocabulary:TaskStatusVocab "SCHED_E_SERVICE_NOT_RUNNING"^^vocabulary:TaskStatusVocab "SCHED_E_TASK_NOT_READY"^^vocabulary:TaskStatusVocab "SCHED_E_TASK_NOT_RUNNING"^^vocabulary:TaskStatusVocab "SCHED_E_TRIGGER_NOT_FOUND"^^vocabulary:TaskStatusVocab "SCHED_E_UNKNOWN_OBJECT_VERSION"^^vocabulary:TaskStatusVocab "SCHED_E_UNSUPPORTED_ACCOUNT_OPTION"^^vocabulary:TaskStatusVocab "SCHED_S_EVENT_TRIGGER"^^vocabulary:TaskStatusVocab "SCHED_S_TASK_DISABLED"^^vocabulary:TaskStatusVocab "SCHED_S_TASK_HAS_NOT_RUN"^^vocabulary:TaskStatusVocab "SCHED_S_TASK_NOT_SCHEDULED"^^vocabulary:TaskStatusVocab "SCHED_S_TASK_NO_MORE_RUNS"^^vocabulary:TaskStatusVocab "SCHED_S_TASK_NO_VALID_TRIGGERS"^^vocabulary:TaskStatusVocab "SCHED_S_TASK_READY"^^vocabulary:TaskStatusVocab "SCHED_S_TASK_RUNNING"^^vocabulary:TaskStatusVocab "SCHED_S_TASK_TERMINATED"^^vocabulary:TaskStatusVocab "TASK_STATE_QUEUED"^^vocabulary:TaskStatusVocab "TASK_STATE_UNKNOWN"^^vocabulary:TaskStatusVocab ) ] [ sh:datatype xsd:string ] ) ;
            sh:path observable:status ],
        [ sh:nodeKind sh:Literal ;
            sh:or ( [ sh:datatype vocabulary:TaskFlagVocab ] [ sh:datatype xsd:string ] ) ;
            sh:path observable:flags ] ;
    sh:targetClass observable:WindowsTaskFacet .