cacontology-forensics:RecoveredFileShape leaf node

sh:Shape
- cacontology-forensics:RecoveredFileShape

URI

https://cacontology.projectvic.org/forensics#RecoveredFileShape

Label

Recovered File Shape

Targets (1)

cacontology-forensics:RecoveredFile sh:targetClass

Property Constraints (4)

Focus nodes of this shape (cacontology-forensics:RecoveredFile) can have the following properties:

PROPERTY	DESCRIPTION	MIN	MAX	VALUE TYPE	OTHER CONSTRAINTS
`cacontology-forensics:dataIntegrity`	sh:message Data integrity must be complete, partial, or corrupted (gUFO quality aspect)	0	1	xsd:string	sh:in complete, partial, corrupted
`cacontology-forensics:recoveryConfidence`	sh:message Recovery confidence must be between 0.0 and 1.0 (gUFO quality aspect)	0	1	xsd:double	sh:minInclusive `0.0` sh:maxInclusive `1.0`
cacontology-forensics:recoveryMethod	The method used to recover deleted or hidden files (e.g., 'unallocated space carving', 'file system journal'). sh:message Recovery method must be from allowed list: undelete, carving, slack-space, unallocated-space, registry-recovery	1	1	xsd:string	sh:in undelete, carving, slack-space, unallocated-space, registry-recovery
`gufo:hasBeginPointInXSDDateTimeStamp`	sh:message Recovered file may have recovery timestamp (gUFO temporal)	0	1	xsd:dateTimeStamp

Implementation

@prefix cacontology-forensics: <https://cacontology.projectvic.org/forensics#> .
@prefix gufo: <http://purl.org/nemo/gufo#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
cacontology-forensics:RecoveredFileShape a sh:NodeShape ;
    rdfs:label "Recovered File Shape"@en ;
    sh:property [ sh:datatype xsd:dateTimeStamp ;
            sh:maxCount 1 ;
            sh:message "Recovered file may have recovery timestamp (gUFO temporal)"@en ;
            sh:path gufo:hasBeginPointInXSDDateTimeStamp ],
        [ sh:datatype xsd:string ;
            sh:in ( "undelete" "carving" "slack-space" "unallocated-space" "registry-recovery" ) ;
            sh:maxCount 1 ;
            sh:message "Recovery method must be from allowed list: undelete, carving, slack-space, unallocated-space, registry-recovery"@en ;
            sh:minCount 1 ;
            sh:path cacontology-forensics:recoveryMethod ],
        [ sh:datatype xsd:double ;
            sh:maxCount 1 ;
            sh:maxInclusive 1.0 ;
            sh:message "Recovery confidence must be between 0.0 and 1.0 (gUFO quality aspect)"@en ;
            sh:minInclusive 0.0 ;
            sh:path cacontology-forensics:recoveryConfidence ],
        [ sh:datatype xsd:string ;
            sh:in ( "complete" "partial" "corrupted" ) ;
            sh:maxCount 1 ;
            sh:message "Data integrity must be complete, partial, or corrupted (gUFO quality aspect)"@en ;
            sh:path cacontology-forensics:dataIntegrity ] ;
    sh:targetClass cacontology-forensics:RecoveredFile .