Cross reference for [Ontology Name] classes, properties and dataproperties back to ToC

This section provides details for each class and property defined by [Ontology Name].

Classes

executablec back to ToC or Class ToC

IRI: http://w3id.org/sepses/vocab/event/log#Executable

This class represent an individual executable of a process
is in range of
has exe op

filec back to ToC or Class ToC

IRI: http://w3id.org/sepses/vocab/event/log#File

The class to represent a file
has super-classes
system object c
is in domain of
is executed by op, is read by op
is in range of
writes op

hostc back to ToC or Class ToC

IRI: http://w3id.org/sepses/vocab/event/log#Host

This class represents a Host e.g. Computer, Server etc.
is in domain of
has host i p op, host name dp, host o s dp
is in range of
originates from op

i p addressc back to ToC or Class ToC

IRI: http://w3id.org/sepses/vocab/event/log#IPAddress

This class represents an IPAddress
is in range of
has host i p op, has socket i p op

local userc back to ToC or Class ToC

IRI: http://w3id.org/sepses/vocab/event/log#LocalUser

It represent a specific local user
has super-classes
user c

processc back to ToC or Class ToC

IRI: http://w3id.org/sepses/vocab/event/log#Process

This class represent an running process
has super-classes
system object c
is in domain of
cmd line dp, forks op, has exe op, has user op, originates from op, sends op, writes op
is in range of
forks op, is executed by op, is read by op, is received by op

root userc back to ToC or Class ToC

IRI: http://w3id.org/sepses/vocab/event/log#RootUser

This class represents Root User
has super-classes
user c

socketc back to ToC or Class ToC

IRI: http://w3id.org/sepses/vocab/event/log#Socket

This class represent network connection (socket), a combination of IPAddress and Port e.g. 127.0.0.1:80
has super-classes
system object c
is in domain of
has socket i p op, is received by op, port dp
is in range of
sends op

system objectc back to ToC or Class ToC

IRI: http://w3id.org/sepses/vocab/event/log#SystemObject

The main class of event entity, represents any entity in an event e.g. process, file, socket etc.
has sub-classes
file c, process c, socket c
is in domain of
prov rel op
is in range of
prov rel op

system userc back to ToC or Class ToC

IRI: http://w3id.org/sepses/vocab/event/log#SystemUser

This class represents a system user
has super-classes
user c

userc back to ToC or Class ToC

IRI: http://w3id.org/sepses/vocab/event/log#User

The main class to represent User
has sub-classes
local user c, root user c, system user c
is in domain of
user name dp
is in range of
has user op

Object Properties

forksop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#forks

This property represents fork connection between Processes , e.g. "sh" process forks "sudo" process.
has super-properties
prov rel op
has domain
process c
has range
process c

has exeop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#hasExe

it represents original executable for a process
has domain
process c
has range
executable c

has host i pop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#hasHostIP

This property connects a socket with an IPAddress
has domain
host c
has range
i p address c

has potential attack techniqueop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#hasPotentialAttackTechnique

This property represents connection to the attack ontology (external class)
has range
technique c

has socket i pop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#hasSocketIP

This property represent an IP Address for a certain Host
has domain
socket c
has range
i p address c

has userop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#hasUser

This property represents User behind the running Process
has domain
process c
has range
user c

is executed byop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#isExecutedBy

This property represents File execution by a Process
has super-properties
prov rel op
has domain
file c
has range
process c

is read byop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#isReadBy

This property represents read event of a File by a Process
has domain
file c
has range
process c

is received byop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#isReceivedBy

This property represents connection received by Process from a Socket
has super-properties
prov rel op
has domain
socket c
has range
process c

originates fromop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#originatesFrom

This property represents Host where a Process coming from
has domain
process c
has range
host c

prov relop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#provRel

The property to represent general connection between event entities e.g. Process to Process, Process to File, Process to Socket etc.
has sub-properties
forks op, is executed by op, is received by op, sends op, writes op
has domain
system object c
has range
system object c

sendsop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#sends

This property represents connection sent by Process to a Socket
has super-properties
prov rel op
has domain
process c
has range
socket c

writesop back to ToC or Object Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#writes

This property represents write event of a File by a Process
has super-properties
prov rel op
has domain
process c
has range
file c

Data Properties

cmd linedp back to ToC or Data Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#cmdLine

Command Line
has domain
process c
has range
string

host namedp back to ToC or Data Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#hostName

Name of a Host
has domain
host c
has range
string

host o sdp back to ToC or Data Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#hostOS

Host operating system
has domain
host c
has range
string

portdp back to ToC or Data Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#port

IP port
has domain
socket c
has range
integer

user namedp back to ToC or Data Property ToC

IRI: http://w3id.org/sepses/vocab/event/log#userName

Name of user
has domain
user c
has range
string

Legend back to ToC

c: Classes
op: Object Properties
dp: Data Properties
ni: Named Individuals