https://ontology.solveit-df.org/solveit/observable/ForensicImageContainer
A forensic image in a container format that encapsulates acquired data, potentially compressed or encrypted, along with embedded metadata such as case information, examiner identity, acquisition timestamps, hash values, compression settings, and encryption status. It may be stored across one or more files referenced via storedIn.
Instances of solveit-observable:ForensicImageContainer can have the following properties:
| PROPERTY | TYPE | DESCRIPTION | RANGE |
|---|---|---|---|
| From class solveit-observable:ForensicImageContainer | |||
| solveit-observable:embeddedCaseNumber | owl:DatatypeProperty | The case number stored within the forensic image container metadata. | xsd:string |
| solveit-observable:embeddedDescription | owl:DatatypeProperty | The description stored within the forensic image container metadata. | xsd:string |
| solveit-observable:embeddedEvidenceNumber | owl:DatatypeProperty | The evidence number stored within the forensic image container metadata. | xsd:string |
| solveit-observable:embeddedExaminerName | owl:DatatypeProperty | The examiner name stored within the forensic image container metadata. | xsd:string |
| solveit-observable:embeddedNotes | owl:DatatypeProperty | The notes stored within the forensic image container metadata. | xsd:string |
| From class solveit-observable:AcquiredData | |||
| solveit-observable:acquiredFrom | owl:ObjectProperty | The source from which the data was acquired, such as a device, device interface, or storage medium. | uco-observable:ObservableObject |
| solveit-observable:contains | owl:ObjectProperty | The logical content encapsulated within the acquired data, such as bitstream data, files, or metadata. | uco-observable:ObservableObject |
| solveit-observable:storedIn | owl:ObjectProperty | The file or files in which the acquired data is physically stored (e.g., .E01 segment files, a .dd file, a backup archive). | uco-observable:File |
By the associated SHACL property shapes, instances of solveit-observable:ForensicImageContainer can have the following properties:
PROPERTY |
PROPERTY TYPE |
DESCRIPTION |
MIN COUNT |
MAX COUNT |
LOCAL RANGE |
GLOBAL RANGE |
|
|---|---|---|---|---|---|---|---|
| solveit-observable:ForensicImageContainer | |||||||
| solveit-observable:contains | owl:ObjectProperty |
The logical content encapsulated within the acquired data, such as bitstream data, files, or metadata.
|
1 |
uco-observable:ObservableObject
|
|||
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix solveit-observable: <https://ontology.solveit-df.org/solveit/observable/> .
solveit-observable:ForensicImageContainer a owl:Class ;
rdfs:label "Forensic Image Container"@en ;
rdfs:comment "A forensic image in a container format that encapsulates acquired data, potentially compressed or encrypted, along with embedded metadata such as case information, examiner identity, acquisition timestamps, hash values, compression settings, and encryption status. It may be stored across one or more files referenced via storedIn."@en ;
rdfs:subClassOf solveit-observable:AcquiredData .