CASE Examples

This repository holds example data illustrating usage of the Cyber-investigation Analysis Standard Expression (CASE) language.

Further illustration can be found at the CASE narratives gallery.

Illustrations in this repository

Mapping notes & respective JSON-LD output:

• Accounts
• Bulk Extractor Forensic Path (info)
• Call Log
• Device
• EXIF Data
• Files (info)
• Forensic Lifecycle
• Location
• Message
• Mobile device and SIM card
• Multipart File (info)
• Network connection
• Oresteia (info)
• Raw Data
• Reconstructed File (info)
• SMS and Contacts