forked from casework/CASE-Examples
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathdevice.json
More file actions
78 lines (78 loc) · 3.16 KB
/
device.json
File metadata and controls
78 lines (78 loc) · 3.16 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
{
"@context": {
"@vocab": "http://example.org/local#",
"kb": "http://example.org/kb/",
"acme": "http://custompb.acme.org/core#",
"draft": "http://example.org/draft#",
"uco-core": "https://ontology.unifiedcyberontology.org/uco/core/",
"uco-identity": "https://ontology.unifiedcyberontology.org/uco/identity/",
"uco-location": "https://ontology.unifiedcyberontology.org/uco/location/",
"uco-observable": "https://ontology.unifiedcyberontology.org/uco/observable/",
"xsd": "http://www.w3.org/2001/XMLSchema#"
},
"@graph": [
{
"@id": "kb:organization-c240cf37-0556-439b-9a51-1ca41732010d",
"@type": "uco-identity:Organization",
"uco-core:name": "Dell"
},
{
"@id": "kb:organization-cc0e0667-eadf-4b2e-9618-3f62b1bdae26",
"@type": "uco-identity:Organization",
"uco-core:name": "Microsoft"
},
{
"@id": "kb:forensic_lab_computer1-uuid",
"@type": "uco-observable:Device",
"location": {
"@id": "kb:forensic_lab1-uuid"
},
"uco-core:hasFacet": [
{
"@type": "uco-observable:DeviceFacet",
"uco-observable:deviceType": "Computer",
"uco-observable:manufacturer": {
"@id": "kb:organization-c240cf37-0556-439b-9a51-1ca41732010d"
},
"uco-observable:model": "Inspiron 5000",
"uco-observable:serialNumber": "D1234567"
},
{
"@type": "uco-observable:OperatingSystemFacet",
"uco-core:name": "Windows 7 Ultimate Edition",
"uco-observable:manufacturer": {
"@id": "kb:organization-cc0e0667-eadf-4b2e-9618-3f62b1bdae26"
},
"uco-observable:version": "6.1.7601 Service Pack 1 Build 7601",
"uco-observable:installDate": {
"@type": "xsd:dateTime",
"@value": "2019-07-10T16:33:42Z"
}
},
{
"@type": "uco-observable:ComputerSpecificationFacet",
"uco-observable:biosVersion": "E1762IMS.10M",
"uco-observable:cpuFamily": "Intel Pentium i7",
"uco-observable:totalRam": 4294967296
},
{
"@type": "uco-observable:DomainNameFacet",
"uco-observable:value": "dfl.local",
"uco-observable:isTLD": false
},
{
"@type": "uco-observable:IPv4AddressFacet",
"uco-observable:addressValue": "192.168.1.145"
},
{
"@type": [
"acme:InventoryComputerFacet",
"uco-core:Facet"
],
"acme:name": "DFL-03",
"acme:inventoryNumber": "10503"
}
]
}
]
}