solveit-observable:ForensicImageContainer


URI

https://ontology.solveit-df.org/solveit/observable/ForensicImageContainer

Label

Forensic Image Container

Description

A forensic image in a container format that encapsulates acquired data, potentially compressed or encrypted, along with embedded metadata such as case information, examiner identity, acquisition timestamps, hash values, compression settings, and encryption status. It may be stored across one or more files referenced via storedIn.

Usage

Instances of solveit-observable:ForensicImageContainer can have the following properties:

PROPERTYTYPEDESCRIPTIONRANGE
From class solveit-observable:ForensicImageContainer
solveit-observable:embeddedCaseNumber owl:DatatypeProperty The case number stored within the forensic image container metadata. xsd:string
solveit-observable:embeddedDescription owl:DatatypeProperty The description stored within the forensic image container metadata. xsd:string
solveit-observable:embeddedEvidenceNumber owl:DatatypeProperty The evidence number stored within the forensic image container metadata. xsd:string
solveit-observable:embeddedExaminerName owl:DatatypeProperty The examiner name stored within the forensic image container metadata. xsd:string
solveit-observable:embeddedNotes owl:DatatypeProperty The notes stored within the forensic image container metadata. xsd:string
From class solveit-observable:AcquiredData
solveit-observable:acquiredFrom owl:ObjectProperty The source from which the data was acquired, such as a device, device interface, or storage medium. uco-observable:ObservableObject
solveit-observable:contains owl:ObjectProperty The logical content encapsulated within the acquired data, such as bitstream data, files, or metadata. uco-observable:ObservableObject
solveit-observable:storedIn owl:ObjectProperty The file or files in which the acquired data is physically stored (e.g., .E01 segment files, a .dd file, a backup archive). uco-observable:File

Property Shapes

By the associated SHACL property shapes, instances of solveit-observable:ForensicImageContainer can have the following properties:

PROPERTY

PROPERTY TYPE

DESCRIPTION

MIN COUNT

MAX COUNT

LOCAL RANGE
(type range for property on this class)

GLOBAL RANGE
(type range for property globally)

solveit-observable:ForensicImageContainer
solveit-observable:contains owl:ObjectProperty The logical content encapsulated within the acquired data, such as bitstream data, files, or metadata.
1 uco-observable:ObservableObject

Implementation

@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix solveit-observable: <https://ontology.solveit-df.org/solveit/observable/> .

solveit-observable:ForensicImageContainer a owl:Class ;
    rdfs:label "Forensic Image Container"@en ;
    rdfs:comment "A forensic image in a container format that encapsulates acquired data, potentially compressed or encrypted, along with embedded metadata such as case information, examiner identity, acquisition timestamps, hash values, compression settings, and encryption status. It may be stored across one or more files referenced via storedIn."@en ;
    rdfs:subClassOf solveit-observable:AcquiredData .