https://cacontology.projectvic.org/forensics#MetadataExtractionAction
The action of extracting metadata from digital artifacts including EXIF, file system timestamps, and application metadata.
Instances of cacontology-forensics:MetadataExtractionAction can have the following properties:
| PROPERTY | TYPE | DESCRIPTION | RANGE |
|---|
By the associated SHACL property shapes, instances of cacontology-forensics:MetadataExtractionAction can have the following properties:
| PROPERTY | PROPERTY TYPE | DESCRIPTION | MIN | MAX | VALUE TYPE | OTHER CONSTRAINTS | GLOBAL RANGE |
|---|---|---|---|---|---|---|---|
| cacontology-forensics:MetadataExtractionAction | |||||||
cacontology-forensics:extractionCompleteness |
-- | sh:message Extraction completeness must be between 0.0 and 1.0 (gUFO quality aspect) |
0 | 1 | xsd:double |
sh:minInclusive
0.0
sh:maxInclusive
1.0
|
-- |
cacontology-forensics:metadataTypes |
-- | sh:message Metadata types extracted should be specified (gUFO quality aspect) |
0 | 1 | xsd:string | -- | |
gufo:hasBeginPointInXSDDateTimeStamp |
-- | sh:message Metadata extraction must have exactly one begin timestamp (gUFO temporal) |
1 | 1 | xsd:dateTimeStamp | -- | |
uco-action:usesTool |
-- | sh:message A metadata extraction action must specify at least one extraction tool used |
1 | * | uco-tool:Tool | -- | |
uco-core:object |
-- | sh:message A metadata extraction action must specify at least one source object |
1 | * | uco-core:UcoObject | -- | |
| cac-core:InvestigativeAction | |||||||
gufo:hasBeginPointInXSDDateTimeStamp |
-- | begin time |
0 | 1 | xsd:dateTimeStamp | -- | |
gufo:hasEndPointInXSDDateTimeStamp |
-- | end time |
0 | 1 | xsd:dateTimeStamp | -- | |
rdfs:label |
-- | label |
1 | * | xsd:string | -- | |
| cac-core:Event | |||||||
(cacontology-forensics:examinedBy | cacontology-forensics:performedBy | cacontology-forensics:witnessedBy | cacontology-forensics:authorizedBy) |
-- | sh:message Every forensic event must have at least one participant (gUFO participation) |
1 | * | -- | ||
(cacontology-grooming:targetsVictim | cacontology-grooming:performedBy | cacontology-grooming:witnessedBy | cacontology-grooming:facilitatedBy) |
-- | sh:message Every grooming event must have at least one participant (gUFO participation) |
1 | * | -- | ||
(cacontology-usa-federal:prosecutedBy | cacontology-usa-federal:investigatedBy | cacontology-usa-federal:defendedBy | cacontology-usa-federal:victimizedBy) |
-- | sh:message Every federal criminal event must have at least one participant |
1 | * | -- | ||
(gufo:hasBeginPointInXSDDateTimeStamp | cacontology-enterprises:hasCoercionEventBeginDate | cacontology-enterprises:hasInvestigationBeginDate) |
-- | sh:message gUFO Events must have at least one temporal beginning point. |
1 | * | -- | ||
gufo:hasBeginPointInXSDDateTimeStamp |
-- | begin time Optional temporal begin point for the event. sh:message Event can have at most one begin point; Forensic action must have at most one begin timestamp (gUFO temporal constraint); Grooming behavior must have at most one begin timestamp (gUFO temporal); Production event must have exactly one begin point. |
1 | 1 | xsd:dateTimeStamp | -- | |
gufo:hasEndPointInXSDDateTimeStamp |
-- | end time Optional temporal end point for the event. sh:message Event can have at most one end point; Forensic action must have at most one end timestamp (gUFO temporal constraint); Grooming behavior must have at most one end timestamp (gUFO temporal); Production event may have an end point. |
0 | 1 | xsd:dateTimeStamp | -- | |
rdfs:label |
-- | label Every event should have at least one human-readable label. |
1 | * | xsd:string | -- | |
| case-investigation:InvestigativeAction | |||||||
uco-action:endTime |
-- | sh:message When present, action endTime should be at most one xsd:dateTime literal. |
0 | 1 | xsd:dateTime |
sh:severity
sh:Warning
|
-- |
uco-action:object |
-- | sh:message Action must reference at least one object IRI. |
1 | * | sh:IRI |
sh:severity
sh:Violation
|
-- |
uco-action:performer |
-- | sh:message Action must have exactly one performer IRI. |
1 | 1 | sh:IRI |
sh:severity
sh:Violation
|
-- |
uco-action:result |
-- | sh:message When present, action result values should be IRI nodes. |
0 | * | sh:IRI |
sh:severity
sh:Warning
|
-- |
uco-action:startTime |
-- | sh:message Action must have exactly one startTime (xsd:dateTime). |
1 | 1 | xsd:dateTime |
sh:severity
sh:Warning
|
-- |
| uco-action:Action | |||||||
uco-action:endTime |
-- | sh:message When present, action endTime should be at most one xsd:dateTime literal. |
0 | 1 | xsd:dateTime |
sh:severity
sh:Warning
|
-- |
uco-action:object |
-- | sh:message Action must reference at least one object IRI. |
1 | * | sh:IRI |
sh:severity
sh:Violation
|
-- |
uco-action:performer |
-- | sh:message Action must have exactly one performer IRI. |
1 | 1 | sh:IRI |
sh:severity
sh:Violation
|
-- |
uco-action:result |
-- | sh:message When present, action result values should be IRI nodes. |
0 | * | sh:IRI |
sh:severity
sh:Warning
|
-- |
uco-action:startTime |
-- | sh:message Action must have exactly one startTime (xsd:dateTime). |
1 | 1 | xsd:dateTime |
sh:severity
sh:Warning
|
-- |
@prefix cac-core: <https://cacontology.projectvic.org/core#> .
@prefix cacontology-forensics: <https://cacontology.projectvic.org/forensics#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
cacontology-forensics:MetadataExtractionAction a owl:Class ;
rdfs:label "Metadata Extraction Action"@en ;
rdfs:comment "The action of extracting metadata from digital artifacts including EXIF, file system timestamps, and application metadata."@en ;
rdfs:subClassOf cac-core:InvestigativeAction .