README.md

Cyber-investigation Analysis Standard Expression (CASE)

Read the Wiki tab to learn everything you need to know about the Cyber-investigation Analysis Standard Expression (CASE) ontology. For learning about the Unified Cyber Ontology, CASE's parent, see UCO.

Examples in this Repository

These will eventually be moved to the Wiki (likely Mapping Guide). Mapping notes & respective JSON-LD output:

• Bulk Extractor Forensic Path (info)
• Call Log
• Device
• Email
• EXIF Data
• Files (info)
• Forensic Lifecycle
• Location
• Message
• Multipart File (info)
• Oresteia (info)
• Raw Data
• Reconstructed File (info)
• SMS and Contacts