Definition Type: Element
Name: file_item
Namespace: http://oval.mitre.org/XMLSchema/system_characteristics#windows
Type: system_characteristics:itemType
Containing Schema: windows-system-characteristics-schema.xsd
Abstract
Documentation:
This element stores file metadata. The time information can be retrieved by the _stst function.
Collapse XSD Schema Diagram:
Drilldown into data in schema windows-system-characteristics-schema_xsd Drilldown into object in schema windows-system-characteristics-schema_xsd Drilldown into message in schema system-characteristics-schema_xsd Drilldown into id in schema system-characteristics-schema_xsd Drilldown into itemType in schema system-characteristics-schema_xsdXSD Diagram of file_item in schema windows-system-characteristics-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code:
<xsd:element name="file_item" substitutionGroup="system_characteristics:item">
    <xsd:annotation>
        <xsd:documentation>This element stores file metadata.  The time information can be retrieved by the _stst function.</xsd:documentation>
        <xsd:appinfo>
            <item_name>File Item</item_name>
            <extends>itemType</extends>
            <valid_sections>message, object, data</valid_sections>
            <example>
                <file_item id="2">
                    <object>
                        <path>C:\WINDOWS\system32\mshtml.dll</path>
                    </object>
                    <data>
                        <owner datatype="string" status="exists">Administrators</owner>
                        <size datatype="string" status="exists">3004928</size>
                        <a_time datatype="string" status="exists">1103205891</a_time>
                        <c_time datatype="string" status="exists">1089236248</c_time>
                        <m_time datatype="string" status="exists">1096480024</m_time>
                        <ms_checksum datatype="int" status="exists">3058159</ms_checksum>
                        <md5 datatype="string" status="exists">8dad986b8288c58937e1c8d8a117b389</md5>
                        <version datatype="int" status="exists">
                            <major>6</major>
                            <minor>0</minor>
                            <build>2900</build>
                            <private>2523</private>
                        </version>
                        <type datatype="string" status="exists">FILE_TYPE_DISK</type>
                        <development_class datatype="string" status="exists">xpsp_sp2_gdr</development_class>
                    </data>
                </file_item>
            </example>
        </xsd:appinfo>
    </xsd:annotation>
    <xsd:complexType>
        <xsd:complexContent>
            <xsd:extension base="system_characteristics:itemType">
                <xsd:sequence>
                    <xsd:element name="object" minOccurs="1" maxOccurs="1">
                        <xsd:complexType>
                            <xsd:complexContent>
                                <xsd:extension base="system_characteristics:objectType">
                                    <xsd:sequence>
                                        <xsd:element name="path" type="system_characteristics:objectStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Specifies the absolute path to a file on the machine.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>file_item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>none</content>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                    </xsd:sequence>
                                </xsd:extension>
                            </xsd:complexContent>
                        </xsd:complexType>
                    </xsd:element>
                    <xsd:element name="data" minOccurs="0" maxOccurs="1">
                        <xsd:complexType>
                            <xsd:complexContent>
                                <xsd:extension base="system_characteristics:dataType">
                                    <xsd:sequence>
                                        <xsd:element name="owner" type="system_characteristics:dataStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>A string that contains the name of the owner.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>file_item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="size" type="system_characteristics:dataIntType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Size of the file in bytes.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>file_item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>integer</content>
                                                    <valid_datatypes>integer</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="a_time" type="system_characteristics:dataStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Time of last access of file. Valid on NTFS but not on FAT formatted disk drives.  The string should represent the FILETIME structure which is a 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC).</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>file_item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="c_time" type="system_characteristics:dataStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Time of creation of file. Valid on NTFS but not on FAT formatted disk drives.  The string should represent the FILETIME structure which is a 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC).</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>file_item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="m_time" type="system_characteristics:dataStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Time of last modification of file.  The string should represent the FILETIME structure which is a 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC).</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>file_item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="ms_checksum" type="system_characteristics:dataStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>the md5 checksum of the file.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>file_item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="md5" type="system_characteristics:dataStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>The md5 hash of the file</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>file_item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="version" type="windows:dataFileVersionType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>The version of the file.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>file_item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>none</content>
                                                    <valid_datatypes>version</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="type" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>The type child element marks wether the file item describes a directory, named pipe, standard file, etc.  These types are the return values for GetFileType, with the exception of FILE_ATTRIBUTE_DIRECTORY which is obtained by looking at GetFileAttributesEx.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>file_item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                            <xsd:complexType>
                                                <xsd:simpleContent>
                                                    <xsd:restriction base="system_characteristics:dataStringType">
                                                        <xsd:enumeration value="FILE_ATTRIBUTE_DIRECTORY" />
                                                        <xsd:enumeration value="FILE_TYPE_CHAR" />
                                                        <xsd:enumeration value="FILE_TYPE_DISK" />
                                                        <xsd:enumeration value="FILE_TYPE_PIPE" />
                                                        <xsd:enumeration value="FILE_TYPE_REMOTE" />
                                                        <xsd:enumeration value="FILE_TYPE_UNKNOWN" />
                                                        <xsd:enumeration value="" />
                                                    </xsd:restriction>
                                                </xsd:simpleContent>
                                            </xsd:complexType>
                                        </xsd:element>
                                        <xsd:element name="development_class" type="system_characteristics:dataStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>The development_class element allows the distinction to be made between the GDR development environment and the QFE development environment.  This field holds the text found in front of the mmmmmm-nnnn version, for example srv03_gdr.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>file_item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                    </xsd:sequence>
                                </xsd:extension>
                            </xsd:complexContent>
                        </xsd:complexType>
                    </xsd:element>
                </xsd:sequence>
            </xsd:extension>
        </xsd:complexContent>
    </xsd:complexType>
</xsd:element>
Collapse Child Elements:
Name Type Min Occurs Max Occurs
message system_characteristics:message 0 1
object windows:object 1 1
data windows:data 0 1
Collapse Child Attributes:
Name Type Default Value Use
id system_characteristics:id Required
Collapse Derivation Tree:
Collapse References:
system_characteristics:item