CASE
CASE copied to clipboard
casework
Cyber-investigation Analysis Standard Expression (CASE) Ontology
This pull request's review details are being tracked on [UCO PR 628](https://github.com/ucoProject/UCO/pull/628). Voting progress is being tracked on [UCO Issue 593](https://github.com/ucoProject/UCO/issues/593).
This Issue pertains to a Make workflow matter that only occurs on fresh `git clone`s of the CASE repository, and is mitigable with a command repetition (which for some users...
Change proposal written with the assistance of AI. # Background In the discussion at [CASE Issue #178](https://github.com/casework/CASE/issues/178#issuecomment-3224721633), @chrishargreaves highlighted the role of Technician in investigative contexts. Currently, the CASE investigation...
This change proposal written with the assistance of AI. Turtle representations are CASE SHACL validated. # Background In the discussion during the CDO Ontology Committee meeting on October 21, 2025,...
This Pull Request resolves all requirements of Issue # 178 . ## Summary Added investigator role subclasses and SHACL shapes in ontology/investigation/investigation.ttl: Academic, Civil Society, Corporate, Human Rights, Insurance, Intelligence,...
Adds `investigation:Technician` as a new role class to the CASE investigation ontology, addressing Issue #184. A technician is a forensics role focused on technical tasks during investigations, such as evidence...
I know there is not tight integration between these projects at the moment, but there are increasing numbers of output entities that are identified through populating SOLVE-IT techniques, that are...
Change proposal written with the assistance of AI. # Background Current CASE releases provide a single, very broad `investigation:Investigator` class. In practice, however, investigators fall into well-defined, mutually exclusive categories...
I'm currently modelling output from chat applications: There seems to be: observable:sender but there isn't observable:recipient or any synonyms as far as I can tell? (I'm searching Entities A-Z btw)...
# Background Keyword searching is an important technique in digital forensics. It is indexed in SOLVE-IT in: T1049: Keyword searching Also has sub techniques: T1125:Keyword search (live) T1126:Keyword search (live)...