@base <http://purl.org/cyber/misp> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix : <#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix stx: <stix#> .
@prefix uco: <../cyber#> .
@prefix xml: <http://www.w3.org/XML/1998/namespace> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix capec: <capec#> .

<>
    a owl:Ontology ;
    rdfs:comment "An OWL ontology for representing cybersecurity information using subset of the MISP (Malware Information Sharing Platform) data model used in STIX 2.0. See https://github.com/MISP/" ;
    owl:versionIRI <> .

:AS
    a owl:Class ;
    rdfs:comment "Autonomous system" ;
    rdfs:label "Autonomous system" ;
    rdfs:subClassOf :MispThing .

:Btc
    a owl:Class ;
    rdfs:label "Bitcoin Address" ;
    rdfs:subClassOf :MispThing .

:CampaignId
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:CampaignName
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:Comment
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:Datetime
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:EmailAttachment
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:GithubRepository
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:GithubUsername
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:Hex
    a owl:Class ;
    rdfs:label "A value in hexadecimal format" ;
    rdfs:subClassOf :MispThing .

:Jabber
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:MispThing
    a owl:Class .

:MobileApplication
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:NamedPipe
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:Other
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:PatternInFile
    a owl:Class ;
    rdfs:label "Pattern in file that identifies the malware" ;
    rdfs:subClassOf :MispThing .

:PatternInMemory
    a owl:Class ;
    rdfs:comment "Pattern in memory dump that identifies the malware" ;
    rdfs:subClassOf :MispThing .

:PatternInTraffic
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:Pdb
    a owl:Class ;
    rdfs:comment "Microsoft Program database (PDB) path information" ;
    rdfs:subClassOf :MispThing .

:Prtn
    a owl:Class ;
    rdfs:comment "Premium-Rate Telephone Number" ;
    rdfs:subClassOf :MispThing .

:Sigma
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:Snort
    a owl:Class ;
    rdfs:comment "An IDS rule in Snort rule-format" ;
    rdfs:subClassOf :MispThing .

:Text
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:ThreatActor
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:UserAgent
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:WhoisCreationDate
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:WhoisRegistrantEmail
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:WhoisRegistrantName
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:WhoisRegistrantPhone
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:WhoisRegistrar
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:WindowsScheduledTask
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:WindowsServiceName
    a owl:Class ;
    rdfs:subClassOf :MispThing .

:Yara
    a owl:Class ;
    rdfs:comment "Yara signature" ;
    rdfs:subClassOf :MispThing .

:comment
    a owl:DatatypeProperty .

:timestamp
    a owl:DatatypeProperty .

:toIds
    a owl:DatatypeProperty .

:value
    a owl:DatatypeProperty .