forked from casework/CASE-Examples
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathdevice.json
55 lines (55 loc) · 2.17 KB
/
device.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
{
"@context": {
"@vocab": "http://example.org/local#",
"kb": "http://example.org/kb/",
"acme": "http://custompb.acme.org/core#",
"draft": "http://example.org/draft#",
"olo": "http://purl.org/ontology/olo/core#",
"uco-core": "https://unifiedcyberontology.org/ontology/uco/core#",
"uco-observable": "https://unifiedcyberontology.org/ontology/uco/observable#",
"xsd": "http://www.w3.org/2001/XMLSchema#"
},
"@graph": [
{
"@id": "kb:forensic_lab_computer1",
"@type": "uco-observable:ObservableObject",
"location": "kb:forensic_lab1",
"uco-core:hasFacet": [
{
"@type": "uco-observable:DeviceFacet",
"uco-observable:manufacturer": "Dell",
"uco-observable:model": "Inspiron 5000",
"uco-observable:serialNumber": "D1234567"
},
{
"@type": "uco-observable:OperatingSystemFacet",
"uco-core:name": "Windows 7 Ultimate Edition",
"uco-observable:manufacturer": "Microsoft",
"uco-observable:version": "6.1.7601 Service Pack 1 Build 7601"
},
{
"@type": "uco-observable:ComputerSpecificationFacet",
"uco-observable:biosVersion": "E1762IMS.10M",
"uco-observable:cpuFamily": "Intel Pentium i7",
"uco-observable:totalRam": {
"@type": "xsd:long",
"@value": 4294967296
}
},
{
"@type": "uco-observable:DomainNameFacet",
"uco-observable:value": "dfl.local"
},
{
"@type": "uco-observable:IPv4AddressFacet",
"uco-observable:value": "192.168.1.145"
},
{
"@type": "acme:InventoryComputer",
"acme:name": "DFL-03",
"acme:inventoryNumber": "10503"
}
]
}
]
}