Skip to content

Mappings that specify which CASE object types to use for representing objects in tools.

Notifications You must be signed in to change notification settings

casework/CASE-Mappings

Repository files navigation

Cyber-investigation Analysis Standard Expression (CASE)

Read the CASE Wiki tab to learn everything you need to know about the Cyber-investigation Analysis Standard Expression (CASE) ontology. For learning about the Unified Cyber Ontology, CASE's parent, see UCO.

CASE-Mappings

Current partial mappings (eventually these will be split into fully-completed and partially-completed):

  • BulkExtractor
  • Cellebrite
  • NSRL
  • Sleuthkit

I have a question!

Before you post a Github issue or send an email ensure you've done this checklist:

  1. Determined scope of your task. It is not necessary for most parties to understand all aspects of the ontology, mapping methods, and supporting tools.

  2. Familiarize yourself with the labels and search the Issues tab. Typically, only light-blue and red labels should be used by non-admin Github users while the others should be used by CASE Github admins. All but the red Project labels are found in every casework repository.

About

Mappings that specify which CASE object types to use for representing objects in tools.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published