https://cacontology.projectvic.org/forensics#MassDigitalEvidenceProcessing
Processing of massive volumes of digital evidence requiring specialized automated tools and distributed processing systems (terabytes of data from platforms with millions of users).
Instances of cacontology-forensics:MassDigitalEvidenceProcessing can have the following properties:
| PROPERTY | TYPE | DESCRIPTION | RANGE |
|---|---|---|---|
| From class cacontology-forensics:MassDigitalEvidenceProcessing | |||
| cacontology-forensics:evidenceVolumeTerabytes | owl:DatatypeProperty | Total volume of evidence in terabytes requiring processing. | xsd:decimal |
| cacontology-forensics:filesProcessedMillions | owl:DatatypeProperty | Number of files processed in millions for large-scale operations. | xsd:decimal |
| cacontology-forensics:processingTimeframeDays | owl:DatatypeProperty | Timeframe required for processing massive evidence volumes in days. | xsd:nonNegativeInteger |
| cacontology-forensics:analysesUserBehavior | owl:ObjectProperty | Links processing to user behavior forensic analysis. | cacontology-forensics:UserBehaviorForensics |
| cacontology-forensics:coordinatesInternationalProcessing | owl:ObjectProperty | Links mass processing to international evidence processing coordination. | cacontology-forensics:InternationalEvidenceProcessing |
| cacontology-forensics:distributesProcessing | owl:ObjectProperty | Links mass processing to distributed processing systems. | cacontology-forensics:DistributedForensicProcessing |
| cacontology-forensics:integratesIntelligenceDatabases | owl:ObjectProperty | Links mass processing to database intelligence integration. | cacontology-forensics:DatabaseIntelligenceIntegration |
| cacontology-forensics:performsGeospatialAnalysis | owl:ObjectProperty | Links evidence processing to geospatial correlation analysis. | cacontology-forensics:GeospatialCorrelation |
| cacontology-forensics:processesEvidence | owl:ObjectProperty | Links mass processing system to evidence being processed. | uco-observable:ObservableObject |
| cacontology-forensics:producesIntelligence | owl:ObjectProperty | Links forensic analysis to intelligence products generated. | uco-observable:ObservableObject |
| cacontology-forensics:utilisesSystem | owl:ObjectProperty | Links processing action to automated systems used. | cacontology-forensics:AutomatedContentAnalysis |
| From class uco-action:Action | |||
| cacontology:occursDuringPhase | owl:ObjectProperty | Links an action to the investigation phase during which it occurs. | cac-core:Phase |
| cacontology-international:executesQuery | owl:ObjectProperty | Links intelligence analysis to federated database queries executed. | cacontology-international:FederatedDatabaseQuery |
| cacontology-partnerships:generatesRequests | owl:ObjectProperty | Links investigation to identification requests generated. | cacontology-partnerships:ObjectIdentificationRequest |
| cacontology-registry:coordinatedWithCompliance | owl:ObjectProperty | Links investigation to compliance-based arrest coordination. | cacontology-registry:ComplianceBasedArrest |
| From class owl:Thing | |||
| cac-bridge-case:disposition | owl:AnnotationProperty | Records the disposition decision for a CASE alignment axiom. | owl:Thing |
| cac-bridge-gufo:disposition | owl:AnnotationProperty | Records the disposition decision for a legacy alignment axiom: retainInReferenceLayer, moveToBridgeLayer, deprecateAndReplace, or pendingReview. | owl:Thing |
| cac-bridge-gufo:migratedFrom | owl:AnnotationProperty | Records the source file from which this alignment was migrated. | owl:Thing |
| cac-bridge-gufo:previousAxiom | owl:AnnotationProperty | Records the original axiom text before migration. | owl:Thing |
| cac-bridge-uco:disposition | owl:AnnotationProperty | Records the disposition decision for a UCO alignment axiom. | owl:Thing |
| cac-core:hasPhase | owl:ObjectProperty | Links an enduring entity, process, or situation to one of its temporal phases. | cac-core:Phase |
| cac-core:usesMethod | owl:ObjectProperty | Links an assessment result or event to the method, algorithm, or technique used. | owl:Thing |
| cacontology-asset-forfeiture:courtJurisdiction | owl:DatatypeProperty | Court jurisdiction for forfeiture proceedings (e.g., 'NSW', 'VIC', 'SA'). Enhanced with gUFO Situation context. | xsd:string |
| cacontology-asset-forfeiture:estimatedValue | owl:DatatypeProperty | Estimated total value of restrained assets (e.g., $30,000). Enhanced with gUFO Object aggregation. | xsd:decimal |
| cacontology-asset-forfeiture:organizationStatus | owl:DatatypeProperty | Operational status of an organization (e.g., 'active', 'inactive'). | xsd:string |
| cacontology-asset-forfeiture:organizationType | owl:DatatypeProperty | Classification of an organization (e.g., 'legal_authority', 'enforcement_agency'). | xsd:string |
| cacontology-asset-forfeiture:playsRole | owl:ObjectProperty | Links an entity to a role it plays in forfeiture operations. | cac-core:Role |
| cacontology-athletic:participatesInSituation | owl:ObjectProperty | Links entities to team dynamics situations they participate in. | cacontology-athletic:TeamDynamicsExploitation |
| cacontology-case:participatesInManagement | owl:ObjectProperty | Links entities to case management situations they participate in. | cacontology-case:CaseManagement |
| cacontology-detection:ageEstimate | owl:DatatypeProperty | Estimated age or age range of depicted individuals. | xsd:string |
| cacontology-detection:copineClassification | owl:ObjectProperty | Links content to its COPINE classification level. | cacontology-detection:COPINEClassificationScheme |
| cacontology-detection:sarClassification | owl:ObjectProperty | Links content to its SAR (1-5) classification level. | cacontology-detection:SARClassificationScheme |
| cacontology-detection:similarityScore | owl:DatatypeProperty | The similarity score for perceptual hash matches (0.0-1.0). | xsd:decimal |
| cacontology-detection:tannerStage | owl:DatatypeProperty | Tanner stage assessment for physical development (1-5). | xsd:integer |
| cacontology-forensics:arrestsResulting | owl:DatatypeProperty | Number of arrests resulting from forensic investigations (e.g., 654 for SA JACET). | xsd:nonNegativeInteger |
| cacontology-forensics:caseExhibitNumber | owl:DatatypeProperty | The official exhibit number assigned to evidence for legal proceedings. | xsd:string |
| cacontology-forensics:correlatesObservable | owl:ObjectProperty | Links an attribution assessment or correlation evidence to the IP address, account, or device observables it correlates. | uco-observable:ObservableObject |
| cacontology-forensics:evidenceLocation | owl:DatatypeProperty | The physical or logical location where evidence was found (e.g., 'bedroom computer', 'cloud storage', 'mobile device'). | xsd:string |
| cacontology-forensics:forensicReport | owl:ObjectProperty | Links a forensic action to its associated report or documentation. | uco-observable:ObservableObject |
| cacontology-forensics:referralsReceived | owl:DatatypeProperty | Number of referrals received from national and international law enforcement (e.g., 677 for SA JACET). | xsd:nonNegativeInteger |
| cacontology-forensics:supportsAttributionOf | owl:ObjectProperty | Links an attribution assessment or correlation evidence to the person whose control of the observables it supports. | uco-identity:Person |
| cacontology-forensics:verificationHash | owl:ObjectProperty | Links a forensic artifact to its verification hash digest for integrity checking. | uco-types:Hash |
| cacontology-impact:hasVulnerabilityContext | owl:ObjectProperty | Links a victim context, prevention assessment, or trafficking-risk assessment to an observed vulnerability context. | cacontology-impact:VulnerabilityContext |
| cacontology-legal-outcomes:chargeCount | owl:DatatypeProperty | The total number of criminal charges associated with a ConvictionRecord or LegalProceeding (aggregate total, not the ordinal of a single count). Constrained on ConvictionRecord by ConvictionRecordShape (minInclusive 1, maxInclusive 100). Distinct from countNumber, which is the ordinal count number within a charging instrument. NOTE: some existing example graphs historically used chargeCount on individual CriminalCharge nodes as an ordinal; that usage SHOULD migrate to countNumber in a follow-up (this declaration does not rewrite those examples). | xsd:nonNegativeInteger |
| cacontology-legal-outcomes:governingStatute | owl:DatatypeProperty | Statutory citation governing a condition or penalty (e.g., '34 U.S.C. ยง 20901 et seq.'). | xsd:string |
| cacontology-legal-outcomes:hasPaymentSchedule | owl:ObjectProperty | Links a judgment, prosecution outcome, or monetary penalty grouping to its schedule of payments. | cacontology-legal-outcomes:PaymentSchedule |
| cacontology-legal:countryCode | owl:AnnotationProperty | ISO 3166-1 alpha-2 country code. | owl:Thing |
| cacontology-legal:isCountrySpecific | owl:AnnotationProperty | True if this concept is specific to a particular country's legal system. | owl:Thing |
| cacontology-legal:jurisdictionScope | owl:AnnotationProperty | Indicates the country/region where this concept applies. Use ISO 3166-1 alpha-2 codes (US, GB, AU, etc.) or 'international' for universal concepts. | owl:Thing |
| cacontology-platforms:encryptionLevel | owl:DatatypeProperty | The level of encryption used by the service (e.g., 'none', 'in-transit', 'end-to-end'). | xsd:string |
| cacontology-platforms:hasContentModerationCapability | owl:ObjectProperty | Links a platform to its content moderation capabilities. | cacontology-platforms:ContentModerationCapability |
| cacontology-platforms:hasDataRetentionPolicy | owl:ObjectProperty | Links a platform to its data retention policy. | cacontology-platforms:DataRetentionPolicy |
| cacontology-platforms:hasLegalComplianceCapability | owl:ObjectProperty | Links a platform to its legal compliance capabilities. | cacontology-platforms:LegalComplianceCapability |
| cacontology-platforms:hasUserVerificationSystem | owl:ObjectProperty | Links a platform to its user verification system. | cacontology-platforms:UserVerificationSystem |
| cacontology-platforms:operatedBy | owl:ObjectProperty | Links a platform or service to the organization that operates it. | cacontology-platforms:ElectronicServiceProvider |
| cacontology-platforms:platformType | owl:DatatypeProperty | The type or category of the platform (e.g., 'social media', 'messaging', 'file hosting'). | xsd:string |
| cacontology-platforms:primaryUserBase | owl:DatatypeProperty | The primary demographic of platform users (e.g., 'adults', 'teens', 'children', 'all ages'). | xsd:string |
| cacontology-platforms:requiresRegistration | owl:DatatypeProperty | Whether the platform requires user registration to access services. | xsd:boolean |
| cacontology-platforms:subsidiaryOf | owl:ObjectProperty | Links a platform or organization to its parent company. | uco-identity:Organization |
| cacontology:caseNumber | owl:DatatypeProperty | Court or agency case identifier for an investigation or proceeding (e.g., PACER docket number '3:20-cr-00029-SLG-MMS'). Declared as a subproperty of uco-core:externalIdentifier so consumers inherit UCO identifier semantics; the richer canonical pattern uco-core:externalReference remains available for fully-qualified references. | xsd:string |
| cacontology:jurisdiction | owl:DatatypeProperty | Legal authority scope of an investigation, proceeding, agency, or action (e.g., 'federal', 'E.D. Wis.', 'Victoria, Australia'). Declared once at core level to consolidate the per-module string variants; for structured jurisdictional entities use cacontology-multi:Jurisdiction and its subclasses. | xsd:string |
| cacontology:located_at | owl:ObjectProperty | Direct edge from an entity to a location. UCO idiom alternatives: uco-core:Relationship with kindOfRelationship 'Located_At', or uco-action:location for Actions; this property supports direct edges where a reified Relationship is unnecessary. | uco-location:Location |
| cacontology:nextStep | owl:ObjectProperty | Denotes the chronologically next action in the lifecycle. | owl:Thing |
| cacontology:participatesInEvent | owl:ObjectProperty | Links a participant (person, role, or organization) to an event they take part in. Referenced by cacontology-core-shapes SPARQL constraints; declared here to close the declaration gap (Issue #41). | cac-core:Event |
| cacontology:previousStep | owl:ObjectProperty | Denotes the chronologically previous action in the lifecycle. | owl:Thing |
| hotline:playsRole | owl:ObjectProperty | Links an entity to a role it plays in hotline operations. | cac-core:Role |
By the associated SHACL property shapes, instances of cacontology-forensics:MassDigitalEvidenceProcessing can have the following properties:
PROPERTY |
PROPERTY TYPE |
DESCRIPTION |
MIN COUNT |
MAX COUNT |
LOCAL RANGE |
GLOBAL RANGE |
|
|---|---|---|---|---|---|---|---|
| cacontology-forensics:MassDigitalEvidenceProcessing | |||||||
| cacontology-forensics:evidenceVolumeTerabytes |
|
1 | 1 |
xsd:decimal
|
owl:Thing | ||
| cacontology-forensics:filesProcessedMillions | owl:DatatypeProperty |
Number of files processed in millions for large-scale operations.
|
0 | 1 |
xsd:decimal
|
xsd:decimal
|
|
| cacontology-forensics:processingTimeframeDays |
|
1 | 1 |
xsd:nonNegativeInteger
|
owl:Thing | ||
|
|
1 | 1 |
xsd:dateTime
|
owl:Thing | |||
@prefix cacontology-forensics: <https://cacontology.projectvic.org/forensics#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix uco-action: <https://ontology.unifiedcyberontology.org/uco/action/> .
cacontology-forensics:MassDigitalEvidenceProcessing a owl:Class ;
rdfs:label "Mass Digital Evidence Processing"@en ;
rdfs:comment "Processing of massive volumes of digital evidence requiring specialized automated tools and distributed processing systems (terabytes of data from platforms with millions of users)."@en ;
rdfs:subClassOf uco-action:Action .