objects.Win_Service_Object.xsd Maven / Gradle / Ivy
The newest version!
Change to This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.
Win_Service_Object
2.1
01/22/2014
The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML.
Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included.
Windows_Service object is intended to characterize Windows services. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/ms685141(v=vs.85).aspx.
The WindowsServiceObjectType type is intended to characterize Windows services.
A list of description items for this service.
The Display_Name field specifies the displayed name of the service in Windows GUI controls. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/ms683228(v=vs.85).aspx.
The Group_Name field specifies the name of the load ordering group of which this service is a member.
The Name field specifies the name of the service. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/ms683229(v=vs.85).aspx.
The Service_DLL field specifies name of the DLL instantiated in the service.
The Certificate Authority (CA) that issued the certificate used to sign the service DLL.
The subject of the certifcate (the entity being authenticated).
Hashes for the Service DLL file.
The Service_DLL_Signature_Description field provides a description of the digital signature for the service DLL.
The Startup_Command_Line field specifies the full command line used to start the service.
Service start options. See http://msdn.microsoft.com/en-us/library/windows/desktop/ms682450(v=vs.85).aspx.
Status information for a service. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/ms685996(v=vs.85).aspx.
The Type field specifies the type of the service.
The Started_As field specifies the name of the account under which the service was started.
Indicates whether or not the DLL is signed.
Indicates whether or not the DLL's signature was verified.
A collection of service descriptions.
A description of the service. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/ms685156(v=vs.85).aspx.
ServiceModeType specifies Windows service modes via a union of the ServiceModeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.
This attribute is optional and specifies the expected type for the value of the specified property.
ServiceModeType specifies Windows service states via a union of the ServiceStatusEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.
This attribute is optional and specifies the expected type for the value of the specified property.
ServiceType specifies Windows service types via a union of the ServiceTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications.
This attribute is optional and specifies the expected type for the value of the specified property.
The ServiceModeEnum type is an enumeration of service modes. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/ms682450(v=vs.85).aspx.
A service started automatically by the service control manager during system startup.
A device driver started by the system loader. This value is valid only for driver services.
A service started by the service control manager when a process calls the StartService function.
A service that cannot be started. Attempts to start the service result in the error code ERROR_SERVICE_DISABLED.
A device driver started by the IoInitSystem function. This value is valid only for driver services.
The ServiceStatusEnum type is an enumeration of potential service states. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/ms685996(v=vs.85).aspx.
The service continue is pending.
The service pause is pending.
The service is paused.
The service is running.
The service is starting.
The service is stopping.
The service is not running.
The ServiceTypeEnum type is an enumeration of service types. See also: http://msdn.microsoft.com/en-us/library/windows/desktop/ms685996(v=vs.85).aspx.
The service is a device driver.
The service is a file system driver.
The service runs in its own process.
The service shares a process with other services.