https://ontology.solveit-df.org/solveit/observable/PhysicalImageContainer
A forensic image container that encapsulates a bitstream (bit-for-bit) copy of a source medium, such as a full disk image in E01 or AFF4 format.
Instances of solveit-observable:PhysicalImageContainer can have the following properties:
| PROPERTY | TYPE | DESCRIPTION | RANGE |
|---|---|---|---|
| From class solveit-observable:ForensicImageContainer | |||
| solveit-observable:embeddedCaseNumber | owl:DatatypeProperty | The case number stored within the forensic image container metadata. | xsd:string |
| solveit-observable:embeddedDescription | owl:DatatypeProperty | The description stored within the forensic image container metadata. | xsd:string |
| solveit-observable:embeddedEvidenceNumber | owl:DatatypeProperty | The evidence number stored within the forensic image container metadata. | xsd:string |
| solveit-observable:embeddedExaminerName | owl:DatatypeProperty | The examiner name stored within the forensic image container metadata. | xsd:string |
| solveit-observable:embeddedNotes | owl:DatatypeProperty | The notes stored within the forensic image container metadata. | xsd:string |
| From class solveit-observable:AcquiredData | |||
| solveit-observable:acquiredFrom | owl:ObjectProperty | The source from which the data was acquired, such as a device, device interface, or storage medium. | uco-observable:ObservableObject |
| solveit-observable:contains | owl:ObjectProperty | The logical content encapsulated within the acquired data, such as bitstream data, files, or metadata. | uco-observable:ObservableObject |
| solveit-observable:storedIn | owl:ObjectProperty | The file or files in which the acquired data is physically stored (e.g., .E01 segment files, a .dd file, a backup archive). | uco-observable:File |
By the associated SHACL property shapes, instances of solveit-observable:PhysicalImageContainer can have the following properties:
PROPERTY |
PROPERTY TYPE |
DESCRIPTION |
MIN COUNT |
MAX COUNT |
LOCAL RANGE |
GLOBAL RANGE |
|
|---|---|---|---|---|---|---|---|
| solveit-observable:PhysicalImageContainer | |||||||
| solveit-observable:contains | owl:ObjectProperty |
The logical content encapsulated within the acquired data, such as bitstream data, files, or metadata.
|
1 |
solveit-observable:Bitstream
|
uco-observable:ObservableObject
|
||
| solveit-observable:ForensicImageContainer | |||||||
| solveit-observable:contains | owl:ObjectProperty |
The logical content encapsulated within the acquired data, such as bitstream data, files, or metadata.
|
1 |
uco-observable:ObservableObject
|
|||
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix solveit-observable: <https://ontology.solveit-df.org/solveit/observable/> .
solveit-observable:PhysicalImageContainer a owl:Class ;
rdfs:label "Physical Image Container"@en ;
rdfs:comment "A forensic image container that encapsulates a bitstream (bit-for-bit) copy of a source medium, such as a full disk image in E01 or AFF4 format."@en ;
rdfs:subClassOf solveit-observable:ForensicImageContainer .