https://cacontology.projectvic.org/forensics#ForensicToolValidationBusinessRule
Instances of cacontology-forensics:ForensicAcquisitionAction can have the following properties:
PROPERTY |
MIN COUNT |
MAX COUNT |
TYPE |
|
|---|---|---|---|---|
| cacontology-forensics:ForensicAcquisitionAction | ||||
| 1 |
xsd:double
|
|||
| cacontology-forensics:acquisitionMethod | 1 | 1 |
xsd:string
|
|
| 1 |
xsd:string
|
|||
| cacontology-forensics:evidenceSeized | 1 |
uco-core:UcoObject
|
||
| cacontology-forensics:forensicCopy | 1 |
cacontology-forensics:ForensicImage
|
||
| cacontology-forensics:writeBlockingUsed | 1 | 1 |
xsd:boolean
|
|
| 1 | 1 |
xsd:dateTimeStamp
|
||
| 1 |
xsd:dateTimeStamp
|
|||
| 1 |
uco-tool:Tool
|
|||
| 0 | 1 |
xsd:dateTime
|
||
| 1 | 1 |
xsd:dateTime
|
||
@prefix cacontology-forensics: <https://cacontology.projectvic.org/forensics#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
cacontology-forensics:ForensicToolValidationBusinessRule a sh:NodeShape ;
sh:sparql [ sh:message "Critical forensic acquisitions must use validated tools"@en ;
sh:prefixes [ sh:declare [ sh:namespace "https://cacontology.projectvic.org/forensics#"^^xsd:anyURI ;
sh:prefix "cacontology-forensics" ],
[ sh:namespace "https://ontology.unifiedcyberontology.org/uco/action/"^^xsd:anyURI ;
sh:prefix "uco-action" ] ] ;
sh:select """
SELECT $this
WHERE {
$this cacontology-forensics:acquisitionQuality "excellent" .
$this uco-action:usesTool ?tool .
?tool cacontology-forensics:validationStatus ?status .
FILTER (?status != "validated")
}
""" ] ;
sh:targetClass cacontology-forensics:ForensicAcquisitionAction .