Skip to content
Mappings that specify which CASE object types to use for representing objects in tools.
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
BulkExtractor-mapping-examples
Cellebrite-mapping-examples
NSRL-mapping-examples
SleuthKit-mapping-examples
BulkExtractor-mapping.md
Cellebrite-mapping.md
NSRL-mapping.md
README.md
SleuthKit-mapping.md
mapping-index.md

README.md

Cyber-investigation Analysis Standard Expression (CASE)

Read the CASE Wiki tab to learn everything you need to know about the Cyber-investigation Analysis Standard Expression (CASE) ontology. For learning about the Unified Cyber Ontology, CASE's parent, see UCO.

CASE-Mappings

Current partial mappings (eventually these will be split into fully-completed and partially-completed):

  • BulkExtractor
  • Cellebrite
  • NSRL
  • Sleuthkit

I have a question!

Before you post a Github issue or send an email ensure you've done this checklist:

  1. Determined scope of your task. It is not necessary for most parties to understand all aspects of the ontology, mapping methods, and supporting tools.

  2. Familiarize yourself with the labels and search the Issues tab. Typically, only light-blue and red labels should be used by non-admin Github users while the others should be used by CASE Github admins. All but the red Project labels are found in every casework repository.

You can’t perform that action at this time.