https://cacontology.projectvic.org/forensics#MassDigitalEvidenceProcessing
Processing of massive volumes of digital evidence requiring specialized automated tools and distributed processing systems (terabytes of data from platforms with millions of users).
Instances of cacontology-forensics:MassDigitalEvidenceProcessing can have the following properties:
| PROPERTY | TYPE | DESCRIPTION | RANGE |
|---|
By the associated SHACL property shapes, instances of cacontology-forensics:MassDigitalEvidenceProcessing can have the following properties:
| PROPERTY | PROPERTY TYPE | DESCRIPTION | MIN | MAX | VALUE TYPE | OTHER CONSTRAINTS | GLOBAL RANGE |
|---|---|---|---|---|---|---|---|
| cacontology-forensics:MassDigitalEvidenceProcessing | |||||||
| cacontology-forensics:evidenceVolumeTerabytes | owl:DatatypeProperty | Total volume of evidence in terabytes requiring processing. sh:message Evidence volume must be between 0.001 and 10000 terabytes. |
1 | 1 | xsd:decimal |
sh:minInclusive
0.001
sh:maxInclusive
10000.0
|
xsd:decimal |
| cacontology-forensics:filesProcessedMillions | owl:DatatypeProperty | Number of files processed in millions for large-scale operations. sh:message Files processed must be between 0.001 and 1000 million. |
0 | 1 | xsd:decimal |
sh:minInclusive
0.001
sh:maxInclusive
1000.0
|
xsd:decimal |
| cacontology-forensics:processingTimeframeDays | owl:DatatypeProperty | Timeframe required for processing massive evidence volumes in days. sh:message Processing timeframe must be between 1 and 3650 days (10 years). |
1 | 1 | xsd:nonNegativeInteger |
sh:minInclusive
1
sh:maxInclusive
3650
|
xsd:nonNegativeInteger |
rdfs:comment |
-- | sh:message Comment should be between 10 and 1000 characters when provided. |
0 | 1 | xsd:string |
sh:minLength
10
sh:maxLength
1000
|
-- |
rdfs:label |
-- | sh:message Label should be between 5 and 200 characters when provided. |
0 | 1 | xsd:string |
sh:minLength
5
sh:maxLength
200
|
-- |
uco-core:startTime |
-- | sh:message Mass processing must specify start time. |
1 | 1 | xsd:dateTime | -- | |
| uco-action:Action | |||||||
uco-action:endTime |
-- | sh:message When present, action endTime should be at most one xsd:dateTime literal. |
0 | 1 | xsd:dateTime |
sh:severity
sh:Warning
|
-- |
uco-action:object |
-- | sh:message Action must reference at least one object IRI. |
1 | * | sh:IRI |
sh:severity
sh:Violation
|
-- |
uco-action:performer |
-- | sh:message Action must have exactly one performer IRI. |
1 | 1 | sh:IRI |
sh:severity
sh:Violation
|
-- |
uco-action:result |
-- | sh:message When present, action result values should be IRI nodes. |
0 | * | sh:IRI |
sh:severity
sh:Warning
|
-- |
uco-action:startTime |
-- | sh:message Action must have exactly one startTime (xsd:dateTime). |
1 | 1 | xsd:dateTime |
sh:severity
sh:Warning
|
-- |
@prefix cacontology-forensics: <https://cacontology.projectvic.org/forensics#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix uco-action: <https://ontology.unifiedcyberontology.org/uco/action/> .
cacontology-forensics:MassDigitalEvidenceProcessing a owl:Class ;
rdfs:label "Mass Digital Evidence Processing"@en ;
rdfs:comment "Processing of massive volumes of digital evidence requiring specialized automated tools and distributed processing systems (terabytes of data from platforms with millions of users)."@en ;
rdfs:subClassOf uco-action:Action .