-
Notifications
You must be signed in to change notification settings - Fork 15
/
Copy pathexif_data.json
262 lines (262 loc) · 12 KB
/
exif_data.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
{
"@context": {
"@vocab": "http://example.org/local#",
"kb": "http://example.org/kb/",
"case-investigation": "https://ontology.caseontology.org/case/investigation/",
"uco-action": "https://ontology.unifiedcyberontology.org/uco/action/",
"uco-core": "https://ontology.unifiedcyberontology.org/uco/core/",
"uco-identity": "https://ontology.unifiedcyberontology.org/uco/identity/",
"uco-location": "https://ontology.unifiedcyberontology.org/uco/location/",
"uco-observable": "https://ontology.unifiedcyberontology.org/uco/observable/",
"uco-tool": "https://ontology.unifiedcyberontology.org/uco/tool/",
"uco-types": "https://ontology.unifiedcyberontology.org/uco/types/",
"uco-vocabulary": "https://ontology.unifiedcyberontology.org/uco/vocabulary/",
"xsd": "http://www.w3.org/2001/XMLSchema#"
},
"@graph": [
{
"@id": "kb:organization-f5a0877c-2a58-4280-8f24-c0df39e8badc",
"@type": "uco-identity:Organization",
"uco-core:name": "Canon"
},
{
"@id": "kb:camera-a59ca7f2-cf15-4800-9dd3-1a2df40c6f6e",
"@type": "uco-observable:Device",
"uco-core:hasFacet": [
{
"@id": "kb:device-facet-0779141a-5cc9-40cd-b5bd-4eff2c741ee0",
"@type": "uco-observable:DeviceFacet",
"uco-observable:deviceType": "Camera",
"uco-observable:manufacturer": {
"@id": "kb:organization-f5a0877c-2a58-4280-8f24-c0df39e8badc"
},
"uco-observable:model": "PowerShot SX540",
"uco-observable:serialNumber": "DC1234567"
}
]
},
{
"@id": "kb:relationship-03f0f4a6-661a-46f8-a602-15d9d1b67f32",
"@type": "uco-observable:ObservableRelationship",
"uco-core:source": {
"@id": "kb:digital_photograph-3a9be7ba-c2b6-4511-b9c4-fabb729bbcae"
},
"uco-core:target": {
"@id": "kb:device_partition-f1a14892-8179-48aa-a74b-e3e434a9c0c1"
},
"uco-core:isDirectional": true,
"uco-core:kindOfRelationship": "Contained_Within",
"uco-core:hasFacet": [
{
"@id": "kb:path-relation-facet-01ee833e-c420-430e-a327-61ca00d8b0f5",
"@type": "uco-observable:PathRelationFacet",
"uco-observable:path": "/sdcard/IMG_0123.jpg"
}
]
},
{
"@id": "kb:digital_photograph-3a9be7ba-c2b6-4511-b9c4-fabb729bbcae",
"@type": "uco-observable:File",
"uco-core:hasFacet": [
{
"@id": "kb:file-facet-9437313e-a4c8-4ca8-91d0-fc66fb8d7a22",
"@type": "uco-observable:FileFacet",
"uco-observable:fileSystemType": "EXT4",
"uco-observable:fileName": "IMG_0123.jpg",
"uco-observable:filePath": "/sdcard/IMG_0123.jpg",
"uco-observable:extension": "jpg",
"uco-observable:sizeInBytes": 35002
},
{
"@id": "kb:content-data-facet-79503339-556a-4e23-ae5c-c2c948bde088",
"@type": "uco-observable:ContentDataFacet",
"uco-observable:byteOrder": {
"@type": "uco-vocabulary:EndiannessTypeVocab",
"@value": "Big-endian"
},
"uco-observable:magicNumber": "/9j/ww==",
"uco-observable:mimeType": "image/jpg",
"uco-observable:sizeInBytes": 35000,
"uco-observable:dataPayload": "<base 64 encoded data of the file>",
"uco-observable:hash": [
{
"@id": "kb:hash-77fbf31d-c4f0-51bd-b04e-c50d13312fba",
"@type": "uco-types:Hash",
"uco-types:hashMethod": {
"@type": "uco-vocabulary:HashNameVocab",
"@value": "SHA256"
},
"uco-types:hashValue": {
"@type": "xsd:hexBinary",
"@value": "6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b"
}
}
]
},
{
"@id": "kb:raster-picture-facet-b48cfb7a-d031-4fbc-aab1-502f1d4da666",
"@type": "uco-observable:RasterPictureFacet",
"uco-observable:pictureType": "jpg",
"uco-observable:pictureHeight": 12345,
"uco-observable:pictureWidth": 12345,
"uco-observable:bitsPerPixel": 2
},
{
"@id": "kb:exif-facet-1300f099-895a-47e8-9f75-a834ccbf139c",
"@type": "uco-observable:EXIFFacet",
"uco-observable:exifData": {
"@id": "kb:controlled-dictionary-cb0dc97a-f2ff-4520-8038-0ca94849a3fe",
"@type": "uco-types:ControlledDictionary",
"uco-types:entry": [
{
"@id": "kb:controlled-dictionary-entry-79ad3a10-570b-4f7d-b5ca-d4f82f4c539f",
"@type": "uco-types:ControlledDictionaryEntry",
"uco-types:key": "Make",
"uco-types:value": "Canon"
},
{
"@id": "kb:controlled-dictionary-entry-7343a36d-e22c-40be-81ce-fcdf98c5f427",
"@type": "uco-types:ControlledDictionaryEntry",
"uco-types:key": "Model",
"uco-types:value": "PowerShot SX540"
},
{
"@id": "kb:controlled-dictionary-entry-b1c3ea5e-43fc-4f5f-baaf-35848a1cb242",
"@type": "uco-types:ControlledDictionaryEntry",
"uco-types:key": "Orientation",
"uco-types:value": "Horizontal (normal)"
},
{
"@id": "kb:controlled-dictionary-entry-37870d9b-c0df-429b-ab80-a088d961c1df",
"@type": "uco-types:ControlledDictionaryEntry",
"uco-types:key": "DateTimeDigitized",
"uco-types:value": "2010-01-15T17:59:43.25Z"
},
{
"@id": "kb:controlled-dictionary-entry-640bfc6f-4c3f-4088-a5f8-40b7f1646438",
"@type": "uco-types:ControlledDictionaryEntry",
"uco-types:key": "Latitude",
"uco-types:value": "15.8235"
},
{
"@id": "kb:controlled-dictionary-entry-85fb5748-9601-4808-a52a-758c0c16a7f7",
"@type": "uco-types:ControlledDictionaryEntry",
"uco-types:key": "LatitudeRef",
"uco-types:value": "S"
},
{
"@id": "kb:controlled-dictionary-entry-4540680f-145d-4bc2-b098-3b677180b189",
"@type": "uco-types:ControlledDictionaryEntry",
"uco-types:key": "Longitude",
"uco-types:value": "47.9941"
},
{
"@id": "kb:controlled-dictionary-entry-fb017a04-42f4-4774-a323-f39e8f25433a",
"@type": "uco-types:ControlledDictionaryEntry",
"uco-types:key": "LongitudeRef",
"uco-types:value": "W"
}
]
}
}
]
},
{
"@id": "kb:camera_action-7995f522-6388-463f-855e-e08130477744",
"@type": "uco-action:Action",
"uco-core:name": "photo_taken",
"uco-action:startTime": {
"@type": "xsd:dateTime",
"@value": "2010-01-15T17:59:43.25Z"
},
"uco-action:instrument": {
"@id": "kb:camera-a59ca7f2-cf15-4800-9dd3-1a2df40c6f6e"
},
"uco-action:result": [
{
"@id": "kb:digital_photograph-3a9be7ba-c2b6-4511-b9c4-fabb729bbcae"
}
],
"uco-action:location": {
"@id": "kb:location-a81948a1-e395-416a-9322-5742866f7020"
}
},
{
"@id": "kb:annotator_tool-ca41faa8-a59c-4321-b047-4d916f75b1e8",
"@type": "uco-tool:AnalyticTool"
},
{
"@id": "kb:examiner-88a08acc-dad2-4964-be3b-8b70e11a4f4d",
"@type": "uco-identity:Person"
},
{
"@id": "kb:forensic_lab_computer-4e95a8d3-066a-4600-8ad0-8b4d0241ce5c",
"@type": "uco-observable:Device"
},
{
"@id": "kb:location-a81948a1-e395-416a-9322-5742866f7020",
"@type": "uco-location:Location"
},
{
"@id": "kb:device_partition-f1a14892-8179-48aa-a74b-e3e434a9c0c1",
"@type": "uco-observable:DiskPartition"
},
{
"@id": "kb:forensic_lab-fae4ff1e-7d06-49da-9c89-da37ef612b25",
"@type": "uco-location:Location"
},
{
"@id": "kb:provenance-record-855f91a2-cc07-4d8e-bb93-d2b6db7672db",
"@type": "case-investigation:ProvenanceRecord",
"uco-core:object": {
"@id": "kb:annotation-b8258799-b465-4182-904b-c0aa73a35b0b"
}
},
{
"@id": "kb:annotation-b8258799-b465-4182-904b-c0aa73a35b0b",
"@type": "uco-core:Annotation",
"uco-core:description": "Photo was taken by a Canon digital camera.",
"uco-core:tag": [
"photo",
"user_added",
"extracted"
],
"uco-core:object": {
"@id": "kb:camera_action-7995f522-6388-463f-855e-e08130477744"
}
},
{
"@id": "kb:forensic_action-306e44f8-446d-4cff-a2fd-9e54affb1fa3",
"@type": "case-investigation:InvestigativeAction",
"uco-core:name": "annotated",
"uco-action:startTime": {
"@type": "xsd:dateTime",
"@value": "2010-01-15T17:59:43.25Z"
},
"uco-action:endTime": {
"@type": "xsd:dateTime",
"@value": "2010-01-15T18:59:43.25Z"
},
"uco-action:performer": {
"@id": "kb:examiner-88a08acc-dad2-4964-be3b-8b70e11a4f4d"
},
"uco-action:instrument": {
"@id": "kb:annotator_tool-ca41faa8-a59c-4321-b047-4d916f75b1e8"
},
"uco-action:result": [
{
"@id": "kb:annotation-b8258799-b465-4182-904b-c0aa73a35b0b"
},
{
"@id": "kb:provenance-record-855f91a2-cc07-4d8e-bb93-d2b6db7672db"
}
],
"uco-action:location": {
"@id": "kb:forensic_lab-fae4ff1e-7d06-49da-9c89-da37ef612b25"
},
"uco-action:environment": {
"@id": "kb:forensic_lab_computer-4e95a8d3-066a-4600-8ad0-8b4d0241ce5c"
}
}
]
}