From c68aa34e0fc75c9eb7d632fcb7d8ce0a07b2f3cb Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Wed, 28 May 2025 17:00:11 -0400 Subject: [PATCH 1/8] Bump UCO to 1.4.0 release state; update import IRIs A follow-on patch will regenerate Make-managed files. Signed-off-by: Alex Nelson --- dependencies/UCO | 2 +- ontology/investigation/investigation.ttl | 8 ++++---- ontology/master/case.ttl | 4 ++-- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/dependencies/UCO b/dependencies/UCO index eff5e3b..8335d32 160000 --- a/dependencies/UCO +++ b/dependencies/UCO @@ -1 +1 @@ -Subproject commit eff5e3bc3c646d52347c669b3dccffd6e77e7216 +Subproject commit 8335d32d600f717b7b4f43d74cf40efdf07aa340 diff --git a/ontology/investigation/investigation.ttl b/ontology/investigation/investigation.ttl index 7c82faf..2510614 100644 --- a/ontology/investigation/investigation.ttl +++ b/ontology/investigation/investigation.ttl @@ -1,6 +1,6 @@ # imports: https://ontology.caseontology.org/case/vocabulary/1.3.0 -# imports: https://ontology.unifiedcyberontology.org/uco/action/1.3.0 -# imports: https://ontology.unifiedcyberontology.org/uco/role/1.3.0 +# imports: https://ontology.unifiedcyberontology.org/uco/action/1.4.0 +# imports: https://ontology.unifiedcyberontology.org/uco/role/1.4.0 @prefix investigation: . @prefix owl: . @@ -20,8 +20,8 @@ owl:backwardCompatibleWith investigation:1.2.0 ; owl:imports vocabulary:1.3.0 , - uco-action:1.3.0 , - uco-role:1.3.0 + uco-action:1.4.0 , + uco-role:1.4.0 ; owl:priorVersion investigation:1.2.0 ; owl:versionIRI investigation:1.3.0 ; diff --git a/ontology/master/case.ttl b/ontology/master/case.ttl index baad03d..0a7e709 100644 --- a/ontology/master/case.ttl +++ b/ontology/master/case.ttl @@ -1,6 +1,6 @@ # imports: https://ontology.caseontology.org/case/investigation/1.3.0 # imports: https://ontology.caseontology.org/case/vocabulary/1.3.0 -# imports: https://ontology.unifiedcyberontology.org/uco/uco/1.3.0 +# imports: https://ontology.unifiedcyberontology.org/uco/uco/1.4.0 @prefix dct: . @prefix owl: . @@ -20,7 +20,7 @@ owl:imports , , - + ; owl:priorVersion ; owl:versionIRI ; From 2e01743ed3123b2e17eb1474cb4916298dd54c78 Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Wed, 28 May 2025 17:00:32 -0400 Subject: [PATCH 2/8] Regenerate Make-managed files Signed-off-by: Alex Nelson --- ontology/investigation/catalog-v001.xml | 16 +++++------ ontology/master/catalog-v001.xml | 36 ++++++++++++------------- 2 files changed, 26 insertions(+), 26 deletions(-) diff --git a/ontology/investigation/catalog-v001.xml b/ontology/investigation/catalog-v001.xml index 07e8525..ed75312 100644 --- a/ontology/investigation/catalog-v001.xml +++ b/ontology/investigation/catalog-v001.xml @@ -2,14 +2,14 @@ - - - - - - - - + + + + + + + + diff --git a/ontology/master/catalog-v001.xml b/ontology/master/catalog-v001.xml index 49ac868..bdc7859 100644 --- a/ontology/master/catalog-v001.xml +++ b/ontology/master/catalog-v001.xml @@ -2,24 +2,24 @@ - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + From ba2e7a75d514378adbeda1702dfd2ba2778e2dea Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Wed, 28 May 2025 17:02:50 -0400 Subject: [PATCH 3/8] Bump version A follow-on patch will regenerate Make-managed files. Signed-off-by: Alex Nelson --- ontology/investigation/investigation.ttl | 10 +++++----- ontology/master/case.ttl | 16 ++++++++-------- ontology/vocabulary/vocabulary.ttl | 6 +++--- 3 files changed, 16 insertions(+), 16 deletions(-) diff --git a/ontology/investigation/investigation.ttl b/ontology/investigation/investigation.ttl index 2510614..a572ba4 100644 --- a/ontology/investigation/investigation.ttl +++ b/ontology/investigation/investigation.ttl @@ -1,4 +1,4 @@ -# imports: https://ontology.caseontology.org/case/vocabulary/1.3.0 +# imports: https://ontology.caseontology.org/case/vocabulary/1.4.0 # imports: https://ontology.unifiedcyberontology.org/uco/action/1.4.0 # imports: https://ontology.unifiedcyberontology.org/uco/role/1.4.0 @@ -17,14 +17,14 @@ a owl:Ontology ; rdfs:label "investigation"@en ; rdfs:comment "This ontology defines key concepts, and their associated properties and relationships, for characterizing cyber-investigations in the broadest range of contexts, including security incidents, criminal investigations, civil and regulatory matters, intelligence operations, international disputes, accident inquiries, policy violations, and others." ; - owl:backwardCompatibleWith investigation:1.2.0 ; + owl:backwardCompatibleWith investigation:1.3.0 ; owl:imports - vocabulary:1.3.0 , + vocabulary:1.4.0 , uco-action:1.4.0 , uco-role:1.4.0 ; - owl:priorVersion investigation:1.2.0 ; - owl:versionIRI investigation:1.3.0 ; + owl:priorVersion investigation:1.3.0 ; + owl:versionIRI investigation:1.4.0 ; . investigation:Attorney diff --git a/ontology/master/case.ttl b/ontology/master/case.ttl index 0a7e709..3fdc368 100644 --- a/ontology/master/case.ttl +++ b/ontology/master/case.ttl @@ -1,5 +1,5 @@ -# imports: https://ontology.caseontology.org/case/investigation/1.3.0 -# imports: https://ontology.caseontology.org/case/vocabulary/1.3.0 +# imports: https://ontology.caseontology.org/case/investigation/1.4.0 +# imports: https://ontology.caseontology.org/case/vocabulary/1.4.0 # imports: https://ontology.unifiedcyberontology.org/uco/uco/1.4.0 @prefix dct: . @@ -16,14 +16,14 @@ rdfs:label "case-master"@en ; rdfs:comment "The Cyber-investigation Analysis Standard Expression (CASE) ontology is a community-developed standard that defines concepts used in a broad range of cyber-investigation domains, including digital forensic science, incident response, counter-terrorism, criminal justice, forensic intelligence, and situational awareness. CASE includes all aspects of the digital forensic process, from evidence-gathering and chain of custody, to generating a final report. The goal is to increase sharing and interoperability of cyber-investigation information among organizations and between forensic analytic tools. CASE aligns with and extends the Unified Cyber Ontology (UCO). The preferred namespace abbreviation for this ontology is: case-master."@en ; dct:title "Cyber-investigation Analysis Standard Expression (CASE)"@en ; - owl:backwardCompatibleWith ; + owl:backwardCompatibleWith ; owl:imports - , - , + , + , ; - owl:priorVersion ; - owl:versionIRI ; - owl:versionInfo "1.3.0" ; + owl:priorVersion ; + owl:versionIRI ; + owl:versionInfo "1.4.0" ; . diff --git a/ontology/vocabulary/vocabulary.ttl b/ontology/vocabulary/vocabulary.ttl index e2a34f2..5affbb4 100644 --- a/ontology/vocabulary/vocabulary.ttl +++ b/ontology/vocabulary/vocabulary.ttl @@ -7,9 +7,9 @@ a owl:Ontology ; rdfs:label "vocabularies"@en ; - owl:backwardCompatibleWith vocab:1.2.0 ; - owl:priorVersion vocab:1.2.0 ; - owl:versionIRI vocab:1.3.0 ; + owl:backwardCompatibleWith vocab:1.3.0 ; + owl:priorVersion vocab:1.3.0 ; + owl:versionIRI vocab:1.4.0 ; . vocab:InvestigationFormVocab From 523dc485714ba53245ea34eddbe30f04f841238d Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Wed, 28 May 2025 17:10:48 -0400 Subject: [PATCH 4/8] Regenerate Make-managed files Signed-off-by: Alex Nelson --- ontology/investigation/catalog-v001.xml | 2 +- ontology/master/catalog-v001.xml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/ontology/investigation/catalog-v001.xml b/ontology/investigation/catalog-v001.xml index ed75312..c11624f 100644 --- a/ontology/investigation/catalog-v001.xml +++ b/ontology/investigation/catalog-v001.xml @@ -10,6 +10,6 @@ - + diff --git a/ontology/master/catalog-v001.xml b/ontology/master/catalog-v001.xml index bdc7859..bc112a2 100644 --- a/ontology/master/catalog-v001.xml +++ b/ontology/master/catalog-v001.xml @@ -20,7 +20,7 @@ - - + + From 1cb7c317a7ac4f9b550cdefe286f0be934d1ff67 Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Thu, 29 May 2025 08:56:33 -0400 Subject: [PATCH 5/8] Log changes Signed-off-by: Alex Nelson --- ChangeLog | 45 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 45 insertions(+) diff --git a/ChangeLog b/ChangeLog index 572c76b..053bd62 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,48 @@ +2025-03-18 + * (7ecdaf4) UCO Issue 629: Revise vocabulary pattern + +2025-02-13 + * (256b474) UCO Issue 640: Add `core:informalType` and link as parent of type-describing properties + +2024-12-19 + * (a0a62e9) Issue 167: Adjust top Makefile dependency ordering in submodule initialization + +2024-11-23 + * (b5720af) UCO Issue 624: Add cpeid to DeviceFacet + +2024-11-08 + * (96d45fb) UCO Issue 632: Prepare OperatingSystem to become a subclass of Software + * (f759e47) Pull Request 164: Update NIST licensing text + * (2eb3991) UCO Pull Request 642: Update NIST licensing text + +2024-11-07 + * (820d63d) UCO Pull Request 639: Bump GitHub Action versions + * (cc5535e) UCO Pull Request 638: Refresh validation files to reflect validation tool template updates + +2024-10-18 + * (557269c) UCO Issue 593: Remove owl:onDatatype from vocabulary definitions + +2024-10-16 + * (8a353f8) UCO Issue 612: Warn if a `Disk` instance is not also a `StorageMedium` + +2024-09-11 + * (8ba5929) UCO Issue 549: Add `core:objectStatus` + +2024-07-26 + * (b93add7) UCO Issue 602: Warn about key-uniqueness enforcement to `types:Dictionary` + +2024-06-18 + * (0d409cc) UCO Issue 609: Fix typo + +2024-06-10 + * (5cf57b7) UCO Issues 586, 590: Warn of prior disjointedness declarations in `core:` and `types:`; warn if an `AlternateDataStream` instance is not also a `FileSystemObject` + +2024-05-01 + * (50eb05b) UCO Issues 573, 584, 599: Warn if target or source on an `ObservableRelationship` are not `Observable`s; replace errant reference to non-existent concept `owl:Datatype`; remove 1-member minimum on `core:ContextualCompilation` + +2024-01-24 + * OCCASE-495: Release CASE 1.3.0, with release notes at https://caseontology.org/releases/1.3.0/ + 2024-01-24 * (79afa93) UCO Pull Request 579: Update change request template From 79a90851e400c13b1ec0157a410e1e41f1679f0f Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Thu, 29 May 2025 15:24:32 -0400 Subject: [PATCH 6/8] Bump UCO to post-1.4.0 develop state No effects were observed on Make-managed files. Signed-off-by: Alex Nelson --- dependencies/UCO | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dependencies/UCO b/dependencies/UCO index 8335d32..633074a 160000 --- a/dependencies/UCO +++ b/dependencies/UCO @@ -1 +1 @@ -Subproject commit 8335d32d600f717b7b4f43d74cf40efdf07aa340 +Subproject commit 633074aa502313e8806d9fda5f70f9a6d4fb903f From 74b080aed483ff59a3c502160115c7f3d27fdae0 Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Thu, 29 May 2025 17:07:27 -0400 Subject: [PATCH 7/8] Bump UCO to post-1.4.0 develop-2.0.0 state A follow-on patch will regenerate Make-managed files. Signed-off-by: Alex Nelson --- dependencies/UCO | 2 +- ontology/investigation/investigation.ttl | 8 ++++---- ontology/master/case.ttl | 4 ++-- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/dependencies/UCO b/dependencies/UCO index 2c97100..748aea0 160000 --- a/dependencies/UCO +++ b/dependencies/UCO @@ -1 +1 @@ -Subproject commit 2c97100ea602a3ea4de89d4afb736f15df12772f +Subproject commit 748aea047c92c2da2d5eec4002faeb357b1a41d7 diff --git a/ontology/investigation/investigation.ttl b/ontology/investigation/investigation.ttl index 7c82faf..2510614 100644 --- a/ontology/investigation/investigation.ttl +++ b/ontology/investigation/investigation.ttl @@ -1,6 +1,6 @@ # imports: https://ontology.caseontology.org/case/vocabulary/1.3.0 -# imports: https://ontology.unifiedcyberontology.org/uco/action/1.3.0 -# imports: https://ontology.unifiedcyberontology.org/uco/role/1.3.0 +# imports: https://ontology.unifiedcyberontology.org/uco/action/1.4.0 +# imports: https://ontology.unifiedcyberontology.org/uco/role/1.4.0 @prefix investigation: . @prefix owl: . @@ -20,8 +20,8 @@ owl:backwardCompatibleWith investigation:1.2.0 ; owl:imports vocabulary:1.3.0 , - uco-action:1.3.0 , - uco-role:1.3.0 + uco-action:1.4.0 , + uco-role:1.4.0 ; owl:priorVersion investigation:1.2.0 ; owl:versionIRI investigation:1.3.0 ; diff --git a/ontology/master/case.ttl b/ontology/master/case.ttl index baad03d..0a7e709 100644 --- a/ontology/master/case.ttl +++ b/ontology/master/case.ttl @@ -1,6 +1,6 @@ # imports: https://ontology.caseontology.org/case/investigation/1.3.0 # imports: https://ontology.caseontology.org/case/vocabulary/1.3.0 -# imports: https://ontology.unifiedcyberontology.org/uco/uco/1.3.0 +# imports: https://ontology.unifiedcyberontology.org/uco/uco/1.4.0 @prefix dct: . @prefix owl: . @@ -20,7 +20,7 @@ owl:imports , , - + ; owl:priorVersion ; owl:versionIRI ; From e2f59ec87574e50ce49a56ea00463f8767147211 Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Thu, 29 May 2025 17:23:19 -0400 Subject: [PATCH 8/8] Regenerate Make-managed files Signed-off-by: Alex Nelson --- ontology/investigation/catalog-v001.xml | 16 +++++------ ontology/master/catalog-v001.xml | 36 ++++++++++++------------- 2 files changed, 26 insertions(+), 26 deletions(-) diff --git a/ontology/investigation/catalog-v001.xml b/ontology/investigation/catalog-v001.xml index 07e8525..ed75312 100644 --- a/ontology/investigation/catalog-v001.xml +++ b/ontology/investigation/catalog-v001.xml @@ -2,14 +2,14 @@ - - - - - - - - + + + + + + + + diff --git a/ontology/master/catalog-v001.xml b/ontology/master/catalog-v001.xml index 49ac868..bdc7859 100644 --- a/ontology/master/catalog-v001.xml +++ b/ontology/master/catalog-v001.xml @@ -2,24 +2,24 @@ - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + +