Ontology Version: 3.1.0

cacontology-forensics:EvidenceVerificationActionShape leaf node


URI

https://cacontology.projectvic.org/forensics#EvidenceVerificationActionShape

Label

Evidence Verification Action Shape

Property Constraints (5)

Focus nodes of this shape (cacontology-forensics:EvidenceVerificationAction) can have the following properties:

PROPERTY DESCRIPTION MIN MAX VALUE TYPE OTHER CONSTRAINTS
cacontology-forensics:verificationHash Links a forensic artifact to its verification hash digest for integrity checking.
sh:message An evidence verification action must include at least one verification hash
1 * uco-core:UcoObject
cacontology-forensics:verificationMethod
sh:message Verification method must be specified from allowed hash algorithms
1 * xsd:string
sh:in MD5, SHA1, SHA256, SHA512, CRC32
cacontology-forensics:verificationResult
sh:message Verification result must be verified, failed, or incomplete (gUFO quality aspect)
0 1 xsd:string
sh:in verified, failed, incomplete
gufo:hasBeginPointInXSDDateTimeStamp
sh:message Evidence verification must have exactly one begin timestamp (gUFO temporal)
1 1 xsd:dateTimeStamp
uco-core:object
sh:message An evidence verification action must specify at least one object being verified
1 * uco-core:UcoObject

Implementation

@prefix cacontology-forensics: <https://cacontology.projectvic.org/forensics#> .
@prefix gufo: <http://purl.org/nemo/gufo#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix uco-core: <https://ontology.unifiedcyberontology.org/uco/core/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
cacontology-forensics:EvidenceVerificationActionShape a sh:NodeShape ;
    rdfs:label "Evidence Verification Action Shape"@en ;
    sh:property [ sh:datatype xsd:dateTimeStamp ;
            sh:maxCount 1 ;
            sh:message "Evidence verification must have exactly one begin timestamp (gUFO temporal)"@en ;
            sh:minCount 1 ;
            sh:path gufo:hasBeginPointInXSDDateTimeStamp ],
        [ sh:class uco-core:UcoObject ;
            sh:message "An evidence verification action must specify at least one object being verified"@en ;
            sh:minCount 1 ;
            sh:path uco-core:object ],
        [ sh:class uco-core:UcoObject ;
            sh:message "An evidence verification action must include at least one verification hash"@en ;
            sh:minCount 1 ;
            sh:path cacontology-forensics:verificationHash ],
        [ sh:datatype xsd:string ;
            sh:in ( "MD5" "SHA1" "SHA256" "SHA512" "CRC32" ) ;
            sh:message "Verification method must be specified from allowed hash algorithms"@en ;
            sh:minCount 1 ;
            sh:path cacontology-forensics:verificationMethod ],
        [ sh:datatype xsd:string ;
            sh:in ( "verified" "failed" "incomplete" ) ;
            sh:maxCount 1 ;
            sh:message "Verification result must be verified, failed, or incomplete (gUFO quality aspect)"@en ;
            sh:path cacontology-forensics:verificationResult ] ;
    sh:targetClass cacontology-forensics:EvidenceVerificationAction .