Ontology Version: 3.1.0

cacontology-forensics:ExtendedInvestigationTimeline leaf node


URI

https://cacontology.projectvic.org/forensics#ExtendedInvestigationTimeline

Label

Extended Investigation Timeline

Description

Investigation timeline spanning weeks, months, or years for complex child exploitation cases.

Usage

Instances of cacontology-forensics:ExtendedInvestigationTimeline can have the following properties:

PROPERTYTYPEDESCRIPTIONRANGE

Property Shapes

By the associated SHACL property shapes, instances of cacontology-forensics:ExtendedInvestigationTimeline can have the following properties:

PROPERTY PROPERTY TYPE DESCRIPTION MIN MAX VALUE TYPE OTHER CONSTRAINTS GLOBAL RANGE
cacontology-forensics:TimelineAnalysisAction
cacontology-forensics:temporalAccuracy --
sh:message Temporal accuracy must be between 0.0 and 1.0 (gUFO quality aspect)
0 1 xsd:double
sh:minInclusive 0.0
sh:maxInclusive 1.0
--
cacontology-forensics:timelineEvent owl:ObjectProperty Links a timeline analysis to specific events or artifacts in chronological order.
sh:message A timeline analysis action must include at least one timeline event
1 * uco-core:UcoObject uco-core:UcoObject
cacontology-forensics:timelineScope --
sh:message Timeline scope must be file-system, application, network, memory, or comprehensive
0 1 xsd:string
sh:in file-system, application, network, memory, comprehensive
--
gufo:hasBeginPointInXSDDateTimeStamp --
sh:message Timeline analysis must have exactly one begin timestamp (gUFO temporal)
1 1 xsd:dateTimeStamp --
uco-action:usesTool --
sh:message A timeline analysis action must specify at least one analysis tool used
1 * uco-tool:Tool --
cac-core:InvestigativeAction
gufo:hasBeginPointInXSDDateTimeStamp -- begin time
0 1 xsd:dateTimeStamp --
gufo:hasEndPointInXSDDateTimeStamp -- end time
0 1 xsd:dateTimeStamp --
rdfs:label -- label
1 * xsd:string --
cac-core:Event
(cacontology-forensics:examinedBy | cacontology-forensics:performedBy | cacontology-forensics:witnessedBy | cacontology-forensics:authorizedBy) --
sh:message Every forensic event must have at least one participant (gUFO participation)
1 * --
(cacontology-grooming:targetsVictim | cacontology-grooming:performedBy | cacontology-grooming:witnessedBy | cacontology-grooming:facilitatedBy) --
sh:message Every grooming event must have at least one participant (gUFO participation)
1 * --
(cacontology-usa-federal:prosecutedBy | cacontology-usa-federal:investigatedBy | cacontology-usa-federal:defendedBy | cacontology-usa-federal:victimizedBy) --
sh:message Every federal criminal event must have at least one participant
1 * --
(gufo:hasBeginPointInXSDDateTimeStamp | cacontology-enterprises:hasCoercionEventBeginDate | cacontology-enterprises:hasInvestigationBeginDate) --
sh:message gUFO Events must have at least one temporal beginning point.
1 * --
gufo:hasBeginPointInXSDDateTimeStamp -- begin time
Optional temporal begin point for the event.
sh:message Event can have at most one begin point; Forensic action must have at most one begin timestamp (gUFO temporal constraint); Grooming behavior must have at most one begin timestamp (gUFO temporal); Production event must have exactly one begin point.
1 1 xsd:dateTimeStamp --
gufo:hasEndPointInXSDDateTimeStamp -- end time
Optional temporal end point for the event.
sh:message Event can have at most one end point; Forensic action must have at most one end timestamp (gUFO temporal constraint); Grooming behavior must have at most one end timestamp (gUFO temporal); Production event may have an end point.
0 1 xsd:dateTimeStamp --
rdfs:label -- label
Every event should have at least one human-readable label.
1 * xsd:string --
case-investigation:InvestigativeAction
uco-action:endTime --
sh:message When present, action endTime should be at most one xsd:dateTime literal.
0 1 xsd:dateTime
sh:severity sh:Warning
--
uco-action:object --
sh:message Action must reference at least one object IRI.
1 * sh:IRI
sh:severity sh:Violation
--
uco-action:performer --
sh:message Action must have exactly one performer IRI.
1 1 sh:IRI
sh:severity sh:Violation
--
uco-action:result --
sh:message When present, action result values should be IRI nodes.
0 * sh:IRI
sh:severity sh:Warning
--
uco-action:startTime --
sh:message Action must have exactly one startTime (xsd:dateTime).
1 1 xsd:dateTime
sh:severity sh:Warning
--
uco-action:Action
uco-action:endTime --
sh:message When present, action endTime should be at most one xsd:dateTime literal.
0 1 xsd:dateTime
sh:severity sh:Warning
--
uco-action:object --
sh:message Action must reference at least one object IRI.
1 * sh:IRI
sh:severity sh:Violation
--
uco-action:performer --
sh:message Action must have exactly one performer IRI.
1 1 sh:IRI
sh:severity sh:Violation
--
uco-action:result --
sh:message When present, action result values should be IRI nodes.
0 * sh:IRI
sh:severity sh:Warning
--
uco-action:startTime --
sh:message Action must have exactly one startTime (xsd:dateTime).
1 1 xsd:dateTime
sh:severity sh:Warning
--

Implementation

@prefix cacontology-forensics: <https://cacontology.projectvic.org/forensics#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
cacontology-forensics:ExtendedInvestigationTimeline a owl:Class ;
    rdfs:label "Extended Investigation Timeline"@en ;
    rdfs:comment "Investigation timeline spanning weeks, months, or years for complex child exploitation cases."@en ;
    rdfs:subClassOf cacontology-forensics:TimelineAnalysisAction .