File tree Expand file tree Collapse file tree 4 files changed +8
-8
lines changed Expand file tree Collapse file tree 4 files changed +8
-8
lines changed Original file line number Diff line number Diff line change 1
- # CASE/UCO Plaso implemenation
1
+ # CASE/UCO Plaso implementation
2
2
3
3
This is an implementation of exporting [ plaso] ( https://github.com/log2timeline/plaso ) storage files into an
4
4
RDF graph following the [ CASE/UCO] ( https://casework.github.io/case ) ontology.
Original file line number Diff line number Diff line change 128
128
{
129
129
"@id" : " _:542dd09e-3729-4eee-8601-c24e91348947" ,
130
130
"@type" : " DiskPartition" ,
131
- "paritionOffset " : 180224 ,
131
+ "partitionOffset " : 180224 ,
132
132
"partitionID" : 6
133
133
},
134
134
{
271
271
{
272
272
"@id" : " _:fe69a8ac-8eb6-47fe-b88c-92d9a9084d60" ,
273
273
"@type" : " DiskPartition" ,
274
- "paritionOffset " : 180224 ,
274
+ "partitionOffset " : 180224 ,
275
275
"partitionID" : 6
276
276
},
277
277
{
323
323
"inode" : 11
324
324
}
325
325
]
326
- }
326
+ }
Original file line number Diff line number Diff line change 10
10
case:isDirectional true ;
11
11
case:kindOfRelationship " contained-within" ;
12
12
case:propertyBundle [ a case:DiskPartition ;
13
- case:paritionOffset 180224 ;
13
+ case:partitionOffset 180224 ;
14
14
case:partitionID 6 ] ;
15
15
case:source <7e652c66-4964-49ab-b7c1-282e539f8c67> ;
16
16
case:target <e72c87e4-8d9e-4137-bb1b-001969984793> .
105
105
case:fileName " p2" ;
106
106
case:filePath " /p2" ],
107
107
[ a case:DiskPartition ;
108
- case:paritionOffset 180224 ;
108
+ case:partitionOffset 180224 ;
109
109
case:partitionID 6 ] .
110
110
Original file line number Diff line number Diff line change 110
110
</rdf : Description >
111
111
<rdf : Description rdf : nodeID =" 5bc0a879-9ede-4ba9-9242-a03be5f0aafa" >
112
112
<case : partitionID rdf : datatype =" http://www.w3.org/2001/XMLSchema#integer" >6</case : partitionID >
113
- <case : paritionOffset rdf : datatype =" http://www.w3.org/2001/XMLSchema#integer" >180224</case : paritionOffset >
113
+ <case : partitionOffset rdf : datatype =" http://www.w3.org/2001/XMLSchema#integer" >180224</case : partitionOffset >
114
114
<rdf : type rdf : resource =" http://case.example.org/core#DiskPartition" />
115
115
</rdf : Description >
116
116
<rdf : Description rdf : nodeID =" 7954a3a0-41b8-43f5-9e44-b867662c7caa" >
147
147
<rdf : Description rdf : nodeID =" cbcc5864-d971-49da-827b-eb6743ff32d0" >
148
148
<case : partitionID rdf : datatype =" http://www.w3.org/2001/XMLSchema#integer" >6</case : partitionID >
149
149
<rdf : type rdf : resource =" http://case.example.org/core#DiskPartition" />
150
- <case : paritionOffset rdf : datatype =" http://www.w3.org/2001/XMLSchema#integer" >180224</case : paritionOffset >
150
+ <case : partitionOffset rdf : datatype =" http://www.w3.org/2001/XMLSchema#integer" >180224</case : partitionOffset >
151
151
</rdf : Description >
152
152
<rdf : Description rdf : about =" ff908cca-8a98-4410-8e6d-d06aea6783a4" >
153
153
<case : propertyBundle rdf : nodeID =" eedcdc0d-5064-4949-b6e9-1b3e2dc34d83" />
You can’t perform that action at this time.
0 commit comments