1. Home
  2. Entities
  3. Classes
  4. solveit-core:Technique

solveit-core:Technique leaf node

URI

https://ontology.solveit-df.org/solveit/core/Technique

Label

SOLVE-IT Technique

Description

A digital forensic technique representing how one might achieve an objective by performing an action. Based on the SOLVE-IT knowledge base. This class is a metaclass: its instances are owl:Class entities whose own instances are performed investigative actions.

Superclasses (1)

  • uco-action:Technique

    • Shapes (3)

  • :TechniqueIOTermShape
  • :TechniqueIOTermConsistencyShape
  • :TechniqueShape

    • Usage

    Instances of solveit-core:Technique can have the following properties:

    PROPERTYTYPEDESCRIPTIONRANGE
    From class solveit-core:Technique
    solveit-core:hasExample owl:DatatypeProperty Example tool, implementation, or instance for a Technique. xsd:string
    solveit-core:hasSynonym owl:DatatypeProperty Alternative name or synonym for a Technique. xsd:string
    solveit-core:techniqueDescription owl:DatatypeProperty A detailed description of how the technique is performed. xsd:string
    solveit-core:techniqueDetails owl:DatatypeProperty Additional details about the technique. xsd:string
    solveit-core:techniqueID owl:DatatypeProperty The unique identifier for a SOLVE-IT technique (e.g., T1002). xsd:string
    solveit-core:techniqueName owl:DatatypeProperty The name of the technique (e.g., 'Disk imaging'). xsd:string
    solveit-core:hasCASEInputClass owl:ObjectProperty A CASE/UCO term that represents an expected input to this technique. Usually a class (e.g., solveit-observable:WriteProtectedDeviceInterface), but a property where the technique consumes a single value rather than an object (e.g., uco-observable:filePath). No rdfs:range is asserted, because no single one is true of both; :TechniqueIOTermShape carries the constraint instead. owl:Thing
    solveit-core:hasCASEOutputClass owl:ObjectProperty A CASE/UCO term that represents an output of this technique. Usually a class (e.g., uco-observable:Image), but a property where the technique produces a single value rather than an object (e.g., case-investigation:exhibitNumber). No rdfs:range is asserted, because no single one is true of both; :TechniqueIOTermShape carries the constraint instead. owl:Thing
    solveit-core:hasPotentialWeakness owl:ObjectProperty Links a Technique to potential weaknesses (error categories from ASTM E3016-18) that may occur when using this technique. solveit-core:Weakness
    solveit-core:hasSubtechnique owl:ObjectProperty Links a Technique to more specific subtechniques. solveit-core:Technique

    Property Shapes

    By the associated SHACL property shapes, instances of solveit-core:Technique can have the following properties:

    PROPERTY

    PROPERTY TYPE

    DESCRIPTION

    MIN COUNT

    MAX COUNT

    LOCAL RANGE
    (type range for property on this class)

    GLOBAL RANGE
    (type range for property globally)
    solveit-core:Technique

    		owl:Thing

    		1 owl:Thing
    solveit-core:hasCASEInputClass owl:ObjectProperty A CASE/UCO term that represents an expected input to this technique. Usually a class (e.g., solveit-observable:WriteProtectedDeviceInterface), but a property where the technique consumes a single value rather than an object (e.g., uco-observable:filePath). No rdfs:range is asserted, because no single one is true of both; :TechniqueIOTermShape carries the constraint instead.
    		owl:Thing
    solveit-core:hasCASEOutputClass owl:ObjectProperty A CASE/UCO term that represents an output of this technique. Usually a class (e.g., uco-observable:Image), but a property where the technique produces a single value rather than an object (e.g., case-investigation:exhibitNumber). No rdfs:range is asserted, because no single one is true of both; :TechniqueIOTermShape carries the constraint instead.
    		owl:Thing
    solveit-core:techniqueID
    		1 1 owl:Thing

    Implementation

    @prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix solveit-core: <https://ontology.solveit-df.org/solveit/core/> .
@prefix uco-action: <https://ontology.unifiedcyberontology.org/uco/action/> .

solveit-core:Technique a owl:Class ;
    rdfs:label "SOLVE-IT Technique"@en ;
    rdfs:comment "A digital forensic technique representing how one might achieve an objective by performing an action. Based on the SOLVE-IT knowledge base. This class is a metaclass: its instances are owl:Class entities whose own instances are performed investigative actions."@en ;
    rdfs:subClassOf uco-action:Technique .