https://cacontology.projectvic.org/forensics#TimelineAnalysisActionShape
Instances of cacontology-forensics:TimelineAnalysisAction can have the following properties:
PROPERTY |
MIN COUNT |
MAX COUNT |
TYPE |
|
|---|---|---|---|---|
| cacontology-forensics:TimelineAnalysisAction | ||||
| 1 |
xsd:double
|
|||
| cacontology-forensics:timelineEvent | 1 |
uco-core:UcoObject
|
||
| 1 |
xsd:string
|
|||
| 1 | 1 |
xsd:dateTimeStamp
|
||
| 1 |
uco-tool:Tool
|
|||
@prefix cacontology-forensics: <https://cacontology.projectvic.org/forensics#> .
@prefix gufo: <http://purl.org/nemo/gufo#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix uco-action: <https://ontology.unifiedcyberontology.org/uco/action/> .
@prefix uco-core: <https://ontology.unifiedcyberontology.org/uco/core/> .
@prefix uco-tool: <https://ontology.unifiedcyberontology.org/uco/tool/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
cacontology-forensics:TimelineAnalysisActionShape a sh:NodeShape ;
rdfs:label "Timeline Analysis Action Shape"@en ;
sh:property [ sh:datatype xsd:dateTimeStamp ;
sh:maxCount 1 ;
sh:message "Timeline analysis must have exactly one begin timestamp (gUFO temporal)"@en ;
sh:minCount 1 ;
sh:path gufo:hasBeginPointInXSDDateTimeStamp ],
[ sh:class uco-core:UcoObject ;
sh:message "A timeline analysis action must include at least one timeline event"@en ;
sh:minCount 1 ;
sh:path cacontology-forensics:timelineEvent ],
[ sh:class uco-tool:Tool ;
sh:message "A timeline analysis action must specify at least one analysis tool used"@en ;
sh:minCount 1 ;
sh:path uco-action:usesTool ],
[ sh:datatype xsd:string ;
sh:in ( "file-system" "application" "network" "memory" "comprehensive" ) ;
sh:maxCount 1 ;
sh:message "Timeline scope must be file-system, application, network, memory, or comprehensive"@en ;
sh:path cacontology-forensics:timelineScope ],
[ sh:datatype xsd:double ;
sh:maxCount 1 ;
sh:maxInclusive 1.0 ;
sh:message "Temporal accuracy must be between 0.0 and 1.0 (gUFO quality aspect)"@en ;
sh:minInclusive 0.0 ;
sh:path cacontology-forensics:temporalAccuracy ] ;
sh:targetClass cacontology-forensics:TimelineAnalysisAction .