{"da_to_off":{"head":{"vars":["off_artifact_label","off_artifact_rel_label","off_tech_label","off_tech_id","off_tactic_rel_label","off_tactic_label","off_artifact","off_artifact_rel","off_tech","off_tactic_rel","off_tactic"]},"results":{"bindings":[]}},"da_to_def":{"head":{"vars":["def_tactic_label","def_tactic_rel_label","def_tech_parent_is_toplevel","def_tech_parent_label","def_tech_label","def_artifact_rel_label","def_artifact_label","def_tactic","def_tactic_rel","def_tech","def_artifact_rel","def_artifact"]},"results":{"bindings":[{"def_tactic_label":{"type":"literal","value":"Detect"},"def_tactic_rel_label":{"type":"literal","value":"enables"},"def_tech_parent_is_toplevel":{"datatype":"http://www.w3.org/2001/XMLSchema#boolean","type":"literal","value":"true"},"def_tech_parent_label":{"type":"literal","value":"Process Analysis"},"def_tech_label":{"type":"literal","value":"System Call Analysis"},"def_artifact_rel_label":{"type":"literal","value":"analyzes"},"def_artifact_label":{"type":"literal","value":"System Call"},"def_tactic":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#Detect"},"def_tactic_rel":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#enables"},"def_tech":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#SystemCallAnalysis"},"def_artifact_rel":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#analyzes"},"def_artifact":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#SystemCall"}},{"def_tactic_label":{"type":"literal","value":"Isolate"},"def_tactic_rel_label":{"type":"literal","value":"enables"},"def_tech_parent_is_toplevel":{"datatype":"http://www.w3.org/2001/XMLSchema#boolean","type":"literal","value":"true"},"def_tech_parent_label":{"type":"literal","value":"Access Mediation"},"def_tech_label":{"type":"literal","value":"System Call Filtering"},"def_artifact_rel_label":{"type":"literal","value":"filters"},"def_artifact_label":{"type":"literal","value":"System Call"},"def_tactic":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#Isolate"},"def_tactic_rel":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#enables"},"def_tech":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#SystemCallFiltering"},"def_artifact_rel":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#filters"},"def_artifact":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#SystemCall"}}]}},"neighbors":{"@context":{"rdfs":"http://www.w3.org/2000/01/rdf-schema#","owl":"http://www.w3.org/2002/07/owl#","d3f":"http://d3fend.mitre.org/ontologies/d3fend.owl#","skos":"http://www.w3.org/2004/02/skos/core#"},"@graph":[{"@id":"d3f:AllocateMemory","d3f:creates":[{"@id":"d3f:MemoryBlock"}],"d3f:outbound":[{"@id":"d3f:creates"}],"rdfs:label":["Allocate Memory"],"rdfs:subClassOf":[{"@id":"d3f:SystemCall"}]},{"@id":"d3f:MemoryAllocationFunction","d3f:invokes":[{"@id":"d3f:AllocateMemory"}],"d3f:outbound":[{"@id":"d3f:invokes"}],"rdfs:label":["Memory Allocation Function"]},{"@id":"d3f:MemoryBlock","rdfs:label":["Memory Block"]},{"@id":"d3f:OSAPIAllocateMemory","d3f:invokes":[{"@id":"d3f:AllocateMemory"}],"d3f:outbound":[{"@id":"d3f:invokes"}],"rdfs:label":["OS API Allocate Memory"]},{"@id":"d3f:Subroutine","rdfs:label":["Subroutine"]},{"@id":"d3f:SystemCall","d3f:executes":[{"@id":"d3f:Subroutine"}],"d3f:outbound":[{"@id":"d3f:executes"}],"rdfs:label":["System Call"]}]},"da_to_weak":{"@context":{"rdfs":"http://www.w3.org/2000/01/rdf-schema#","owl":"http://www.w3.org/2002/07/owl#","d3f":"http://d3fend.mitre.org/ontologies/d3fend.owl#","skos":"http://www.w3.org/2004/02/skos/core#"},"@graph":[]},"sensors":{"@context":{"rdfs":"http://www.w3.org/2000/01/rdf-schema#","owl":"http://www.w3.org/2002/07/owl#","d3f":"http://d3fend.mitre.org/ontologies/d3fend.owl#","skos":"http://www.w3.org/2004/02/skos/core#"},"@graph":[{"@id":"d3f:KernelAPISensor","d3f:monitors":[{"@id":"d3f:SystemCall"}],"d3f:outbound":[{"@id":"d3f:monitors"}],"rdfs:label":["Kernel API Sensor"]},{"@id":"d3f:SystemCall","rdfs:label":["System Call"]},{"@id":"d3f:monitors","rdfs:label":["monitors"]}]},"da_to_events":{"head":{"vars":["event","event_parent","event_rel","event_rel_inverse","artifact","artifact_parent","event_label","event_parent_label","event_rel_label","event_rel_inverse_label","artifact_label","artifact_parent_label"]},"results":{"bindings":[{"event":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#SystemCallEvent"},"event_parent":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#KernelEvent"},"event_rel":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#has-participant"},"event_rel_inverse":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#participates-in"},"artifact":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#AllocateMemory"},"artifact_parent":{"type":"uri","value":"http://d3fend.mitre.org/ontologies/d3fend.owl#SystemCall"},"event_label":{"type":"literal","value":"System Call Event"},"event_parent_label":{"type":"literal","value":"Kernel Event"},"event_rel_label":{"type":"literal","value":"has-participant"},"event_rel_inverse_label":{"type":"literal","value":"participates-in"},"artifact_label":{"type":"literal","value":"Allocate Memory"},"artifact_parent_label":{"type":"literal","value":"System Call"}}]}},"artifactld":{"@context":{"rdfs":"http://www.w3.org/2000/01/rdf-schema#","owl":"http://www.w3.org/2002/07/owl#","d3f":"http://d3fend.mitre.org/ontologies/d3fend.owl#","skos":"http://www.w3.org/2004/02/skos/core#"},"@graph":[{"@id":"d3f:AllocateMemory","@type":["owl:NamedIndividual","owl:Class"],"d3f:creates":{"@id":"d3f:MemoryBlock"},"rdfs:label":"Allocate Memory","rdfs:subClassOf":{"@id":"d3f:SystemCall"}},{"@id":"d3f:MemoryBlock"},{"@id":"d3f:SystemCall"}]},"da_graph":{"@context":{"rdfs":"http://www.w3.org/2000/01/rdf-schema#","owl":"http://www.w3.org/2002/07/owl#","d3f":"http://d3fend.mitre.org/ontologies/d3fend.owl#","skos":"http://www.w3.org/2004/02/skos/core#"},"@graph":[{"@id":"d3f:AllocateMemory","rdfs:label":"Allocate Memory"},{"@id":"d3f:Artifact","rdfs:hasSubClass":{"@id":"d3f:DigitalArtifact"},"rdfs:label":"Artifact"},{"@id":"d3f:DigitalArtifact","rdfs:hasSubClass":{"@id":"d3f:DigitalInformationBearer"},"rdfs:label":"Digital Artifact"},{"@id":"d3f:DigitalInformationBearer","rdfs:hasSubClass":{"@id":"d3f:SystemCall"},"rdfs:label":"Digital Information Bearer"},{"@id":"d3f:SystemCall","rdfs:hasSubClass":{"@id":"d3f:AllocateMemory"},"rdfs:label":"System Call"}]},"description":{"@context":{"rdfs":"http://www.w3.org/2000/01/rdf-schema#","owl":"http://www.w3.org/2002/07/owl#","d3f":"http://d3fend.mitre.org/ontologies/d3fend.owl#","skos":"http://www.w3.org/2004/02/skos/core#"},"@graph":[{"@id":"d3f:AllocateMemory","@type":["owl:NamedIndividual","owl:Class"],"d3f:creates":{"@id":"d3f:MemoryBlock"},"rdfs:label":"Allocate Memory","rdfs:subClassOf":{"@id":"d3f:SystemCall"}},{"@id":"d3f:MemoryBlock"},{"@id":"d3f:SystemCall"}]}}