https://cacontology.projectvic.org/forensics#CrossPlatformCorrelationShape
Validation shape for cross platform correlation instances.
Focus nodes of this shape (cacontology-forensics:CrossPlatformCorrelation) can have the following properties:
| PROPERTY | DESCRIPTION | MIN | MAX | VALUE TYPE | OTHER CONSTRAINTS |
|---|---|---|---|---|---|
uco-action:usesTool |
sh:message Cross platform correlation must specify at least one analysis tool. |
1 | * | uco-tool:Tool | |
uco-core:startTime |
sh:message Cross platform correlation must specify start time. |
1 | 1 | xsd:dateTime |
@prefix cacontology-forensics: <https://cacontology.projectvic.org/forensics#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix uco-action: <https://ontology.unifiedcyberontology.org/uco/action/> .
@prefix uco-core: <https://ontology.unifiedcyberontology.org/uco/core/> .
@prefix uco-tool: <https://ontology.unifiedcyberontology.org/uco/tool/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
cacontology-forensics:CrossPlatformCorrelationShape a sh:NodeShape ;
rdfs:label "Cross Platform Correlation Shape"@en ;
rdfs:comment "Validation shape for cross platform correlation instances."@en ;
sh:property [ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:message "Cross platform correlation must specify start time."@en ;
sh:minCount 1 ;
sh:path uco-core:startTime ],
[ sh:class uco-tool:Tool ;
sh:message "Cross platform correlation must specify at least one analysis tool."@en ;
sh:minCount 1 ;
sh:path uco-action:usesTool ] ;
sh:targetClass cacontology-forensics:CrossPlatformCorrelation .