digital-forensics-labs/digital-forensics-lab
1
0
Fork 0
mirror of https://github.com/frankwxu/digital-forensics-lab.git synced 2026-02-20 13:40:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

add cloud storage object

Browse Source
This commit is contained in:
Frank Xu
2021-02-15 19:21:14 -05:00
parent ec4a852881
commit 62906e2f8d
3 changed files with 64 additions and 64 deletions
Download Patch File Download Diff File Expand all files Collapse all files

84
STIX_for_digital_forensics/CFO_intro.svg
View File

@@ -23,9 +23,9 @@
.st9 {font-size:1em}
.st10 {marker-end:url(#mrkr4-61);stroke:#008cd8;stroke-linecap:round;stroke-linejoin:round;stroke-width:0.75}
.st11 {fill:#008cd8;fill-opacity:1;stroke:#008cd8;stroke-opacity:1;stroke-width:0.22935779816514}
.st12 {fill:#ffffff;stroke:none;stroke-linecap:butt;stroke-width:7.2}
.st12 {fill:#ffffff;stroke:none;stroke-linecap:butt}
.st13 {fill:#002f49;font-family:Franklin Gothic Demi;font-size:0.666664em}
.st14 {fill:#ffffff;stroke:none;stroke-linecap:butt}
.st14 {fill:#ffffff;stroke:none;stroke-linecap:butt;stroke-width:7.2}
.st15 {fill:none;fill-rule:evenodd;font-size:12px;overflow:visible;stroke-linecap:square;stroke-miterlimit:3}
]]>
</style>
@@ -369,7 +369,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-81.7906" cy="1586.24" width="49.44" height="17.6036"/>
<path d="M0 1548 L0 1586.24 L-177.75 1586.24 L-177.75 1603.77" class="st10"/>
<rect v:rectContext="textBkgnd" x="-101.505" y="1581.44" width="39.4297" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-101.505" y="1581.44" width="39.4297" height="9.59985" class="st14"/>
<text x="-101.51" y="1588.64" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>action_refs</text> </g>
<g id="shape1017-81" v:mID="1017" v:groupContext="shape" v:layerMember="0" transform="translate(457.312,-680.562)">
<title>Dynamic connector.1017</title>
@@ -377,7 +377,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1568.81" width="52.96" height="17.6036"/>
<path d="M9 1548 L9 1583.08" class="st10"/>
<rect v:rectContext="textBkgnd" x="-12.4765" y="1564.01" width="42.953" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-12.4765" y="1564.01" width="42.953" height="9.59985" class="st14"/>
<text x="-12.48" y="1571.21" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>Indicated-by</text> </g>
<g id="shape1018-88" v:mID="1018" v:groupContext="shape" v:layerMember="0" transform="translate(457.312,-618.487)">
<title>Dynamic connector.1018</title>
@@ -385,7 +385,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1571.08" width="41.81" height="17.6036"/>
<path d="M9 1548 L9 1587.62" class="st10"/>
<rect v:rectContext="textBkgnd" x="-6.89821" y="1566.28" width="31.7964" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-6.89821" y="1566.28" width="31.7964" height="9.59985" class="st14"/>
<text x="-6.9" y="1573.48" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>based-on</text> </g>
<g id="shape1019-95" v:mID="1019" v:groupContext="shape" v:layerMember="0" transform="translate(457.312,-551.871)">
<title>Dynamic connector.1019</title>
@@ -393,7 +393,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1571.08" width="49.38" height="17.6036"/>
<path d="M9 1548 L9 1587.62" class="st10"/>
<rect v:rectContext="textBkgnd" x="-10.6835" y="1566.28" width="39.367" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-10.6835" y="1566.28" width="39.367" height="9.59985" class="st14"/>
<text x="-10.68" y="1573.48" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>ob<tspan
class="st9" v:langID="2057">ject_refs</tspan></text> </g>
<g id="shape1021-103" v:mID="1021" v:groupContext="shape" v:layerMember="0" transform="translate(362.25,-957.295)">
@@ -402,7 +402,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1503.62" width="40.66" height="17.6036"/>
<path d="M9 1548 L9 1465.79" class="st10"/>
<rect v:rectContext="textBkgnd" x="-6.32417" y="1498.83" width="30.6483" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-6.32417" y="1498.83" width="30.6483" height="9.59985" class="st14"/>
<text x="-6.32" y="1506.03" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>image-of</text> </g>
<g id="shape1024-110" v:mID="1024" v:groupContext="shape" v:layerMember="0" transform="translate(794.25,-938.067)">
<title>Dynamic connector.1024</title>
@@ -410,7 +410,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-42.75" cy="1539" width="50.27" height="17.6036"/>
<path d="M0 1539 L-78.96 1539" class="st10"/>
<rect v:rectContext="textBkgnd" x="-62.8807" y="1534.2" width="40.2613" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-62.8807" y="1534.2" width="40.2613" height="9.59985" class="st14"/>
<text x="-62.88" y="1541.4" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>evidence-of</text> </g>
<g id="shape1025-117" v:mID="1025" v:groupContext="shape" v:layerMember="0" transform="translate(644.062,-763.33)">
<title>Dynamic connector.1025</title>
@@ -418,7 +418,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="95.0094" cy="1586.24" width="49.44" height="17.6036"/>
<path d="M0 1548 L0 1586.24 L204.19 1586.24 L204.19 1603.77" class="st10"/>
<rect v:rectContext="textBkgnd" x="75.2945" y="1581.44" width="39.4297" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="75.2945" y="1581.44" width="39.4297" height="9.59985" class="st14"/>
<text x="75.29" y="1588.64" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>action_refs</text> </g>
<g id="shape1026-124" v:mID="1026" v:groupContext="shape" v:layerMember="0" transform="translate(644.062,-1066.5)">
<title>Dynamic connector.1026</title>
@@ -427,7 +427,7 @@
<v:textRect cx="-271.701" cy="1480.5" width="40" height="17.6036"/>
<path d="M0 1548 L0 1480.5 L-269.81 1480.5 A3 3 -180 0 0 -275.81 1480.5 L-380.61 1480.5 L-380.61 1840.94 L-343.48 1840.94"
class="st10"/>
<rect v:rectContext="textBkgnd" x="-277.935" y="1475.7" width="12.4684" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-277.935" y="1475.7" width="12.4684" height="9.59985" class="st14"/>
<text x="-277.94" y="1482.9" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>has</text> </g>
<g id="shape1027-131" v:mID="1027" v:groupContext="shape" v:layerMember="0" transform="translate(635.062,-783.785)">
<title>Dynamic connector.1027</title>
@@ -488,7 +488,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1573.16" width="81.55" height="17.6036"/>
<path d="M9 1548 L9 1591.78" class="st10"/>
<rect v:rectContext="textBkgnd" x="-26.7695" y="1568.36" width="71.5388" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-26.7695" y="1568.36" width="71.5388" height="9.59985" class="st14"/>
<text x="-26.77" y="1575.56" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>parent_directory_ref</text> </g>
<g id="shape1034-170" v:mID="1034" v:groupContext="shape" v:layerMember="0" transform="translate(306,-1171.23)">
<title>Dynamic connector.1034</title>
@@ -496,7 +496,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-216" cy="2009.88" width="55.67" height="17.6036"/>
<path d="M0 1548 L-216 1548 L-216 2376.7 L88.52 2376.7" class="st10"/>
<rect v:rectContext="textBkgnd" x="-238.832" y="2005.08" width="45.6638" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-238.832" y="2005.08" width="45.6638" height="9.59985" class="st14"/>
<text x="-238.83" y="2012.28" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>c<tspan
class="st9" v:langID="2057">ontains</tspan><tspan class="st9" v:langID="2057">-</tspan><tspan class="st9"
v:langID="2057">refs</tspan></text> </g>
@@ -520,7 +520,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1525.35" width="54.11" height="17.6036"/>
<path d="M9 1548 L9 1509.23" class="st10"/>
<rect v:rectContext="textBkgnd" x="-13.0506" y="1520.55" width="44.101" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-13.0506" y="1520.55" width="44.101" height="9.59985" class="st14"/>
<text x="-13.05" y="1527.75" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>attributed-to</text> </g>
<g id="shape1038-193" v:mID="1038" v:groupContext="shape" v:layerMember="0" transform="translate(480.375,-880.33)">
<title>Dynamic connector.1038</title>
@@ -528,7 +528,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-19.5088" cy="1631.04" width="44.07" height="17.6036"/>
<path d="M0 1548 L-13.5 1548 L-13.5 1631.04 L-108.56 1631.04 L-108.56 1638" class="st10"/>
<rect v:rectContext="textBkgnd" x="-36.5418" y="1626.25" width="34.0659" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-36.5418" y="1626.25" width="34.0659" height="9.59985" class="st14"/>
<text x="-36.54" y="1633.45" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>related-to</text> </g>
<g id="shape1039-200" v:mID="1039" v:groupContext="shape" transform="translate(794.25,-763.33)">
<title>Rectangle.1039</title>
@@ -595,7 +595,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1571.08" width="41.81" height="17.6036"/>
<path d="M9 1548 L9 1587.62" class="st10"/>
<rect v:rectContext="textBkgnd" x="-6.89821" y="1566.28" width="31.7964" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-6.89821" y="1566.28" width="31.7964" height="9.59985" class="st14"/>
<text x="-6.9" y="1573.48" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>based-on</text> </g>
<g id="shape1046-237" v:mID="1046" v:groupContext="shape" v:layerMember="0" transform="translate(839.812,-551.871)">
<title>Dynamic connector.1046</title>
@@ -603,7 +603,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1571.08" width="49.38" height="17.6036"/>
<path d="M9 1548 L9 1587.62" class="st10"/>
<rect v:rectContext="textBkgnd" x="-10.6835" y="1566.28" width="39.367" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-10.6835" y="1566.28" width="39.367" height="9.59985" class="st14"/>
<text x="-10.68" y="1573.48" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>ob<tspan
class="st9" v:langID="2057">ject_refs</tspan></text> </g>
<g id="shape1047-245" v:mID="1047" v:groupContext="shape" transform="translate(783.562,-332.296)">
@@ -623,7 +623,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1614.25" width="47.17" height="17.6036"/>
<path d="M9 1548 L9 1673.96" class="st10"/>
<rect v:rectContext="textBkgnd" x="-9.57997" y="1609.45" width="37.1599" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-9.57997" y="1609.45" width="37.1599" height="9.59985" class="st14"/>
<text x="-9.58" y="1616.65" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>source_ref</text> </g>
<g id="shape1049-256" v:mID="1049" v:groupContext="shape" transform="translate(782.437,-261.523)">
<title>Sheet.1049</title>
@@ -638,7 +638,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1573.16" width="81.55" height="17.6036"/>
<path d="M9 1548 L9 1591.78" class="st10"/>
<rect v:rectContext="textBkgnd" x="-26.7695" y="1568.36" width="71.5388" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-26.7695" y="1568.36" width="71.5388" height="9.59985" class="st14"/>
<text x="-26.77" y="1575.56" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>parent_directory_ref</text> </g>
<g id="shape1051-266" v:mID="1051" v:groupContext="shape" v:layerMember="0" transform="translate(839.531,-680.562)">
<title>Dynamic connector.1051</title>
@@ -646,7 +646,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9.28125" cy="1568.53" width="52.77" height="17.6036"/>
<path d="M8.72 1548 L8.72 1561.5 L9.28 1561.5 L9.28 1583.08" class="st10"/>
<rect v:rectContext="textBkgnd" x="-12.0976" y="1563.73" width="42.7577" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-12.0976" y="1563.73" width="42.7577" height="9.59985" class="st14"/>
<text x="-12.1" y="1570.93" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>indicated-by</text> </g>
<g id="shape1052-273" v:mID="1052" v:groupContext="shape" transform="translate(595.687,-618.487)">
<title>Rectangle.1052</title>
@@ -692,7 +692,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1571.08" width="49.38" height="17.6036"/>
<path d="M9 1548 L9 1587.62" class="st10"/>
<rect v:rectContext="textBkgnd" x="-10.6835" y="1566.28" width="39.367" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-10.6835" y="1566.28" width="39.367" height="9.59985" class="st14"/>
<text x="-10.68" y="1573.48" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>ob<tspan
class="st9" v:langID="2057">ject_refs</tspan></text> </g>
<g id="shape1057-297" v:mID="1057" v:groupContext="shape" transform="translate(595.687,-332.296)">
@@ -712,7 +712,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1614.25" width="47.17" height="17.6036"/>
<path d="M9 1548 L9 1673.96" class="st10"/>
<rect v:rectContext="textBkgnd" x="-9.57997" y="1609.45" width="37.1599" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-9.57997" y="1609.45" width="37.1599" height="9.59985" class="st14"/>
<text x="-9.58" y="1616.65" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>source_ref</text> </g>
<g id="shape1059-308" v:mID="1059" v:groupContext="shape" transform="translate(594.562,-261.523)">
<title>Sheet.1059</title>
@@ -727,7 +727,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1573.16" width="81.55" height="17.6036"/>
<path d="M9 1548 L9 1591.78" class="st10"/>
<rect v:rectContext="textBkgnd" x="-26.7695" y="1568.36" width="71.5388" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-26.7695" y="1568.36" width="71.5388" height="9.59985" class="st14"/>
<text x="-26.77" y="1575.56" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>parent_directory_ref</text> </g>
<g id="shape1061-318" v:mID="1061" v:groupContext="shape" v:layerMember="0" transform="translate(783.562,-690.79)">
<title>Dynamic connector.1061</title>
@@ -735,7 +735,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-87.2363" cy="1548" width="52.77" height="17.6036"/>
<path d="M0 1548 L-122.63 1548 L-122.63 1593.31" class="st10"/>
<rect v:rectContext="textBkgnd" x="-108.615" y="1543.2" width="42.7577" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-108.615" y="1543.2" width="42.7577" height="9.59985" class="st14"/>
<text x="-108.62" y="1550.4" class="st13" v:langID="2057"><v:paragraph v:horizAlign="1"/><v:tabList/>indicated-by</text> </g>
<g id="shape1062-325" v:mID="1062" v:groupContext="shape" v:layerMember="0" transform="translate(306,-1171.23)">
<title>Dynamic connector.1062</title>
@@ -744,7 +744,7 @@
<v:textRect cx="-252" cy="2107.2" width="55.67" height="17.6036"/>
<path d="M0 1548 L-252 1548 L-252 2305.23 L-219 2305.23 A3 3 0 0 1 -213 2305.23 L157.31 2305.23 A3 3 0 0 1 163.31 2305.23
L257.62 2305.23 L257.62 2376.7 L283.15 2376.7" class="st10"/>
<rect v:rectContext="textBkgnd" x="-274.832" y="2102.4" width="45.6638" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-274.832" y="2102.4" width="45.6638" height="9.59985" class="st14"/>
<text x="-274.83" y="2109.6" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>c<tspan
class="st9" v:langID="2057">ontains</tspan><tspan class="st9" v:langID="2057">-</tspan><tspan class="st9"
v:langID="2057">refs</tspan></text> </g>
@@ -754,7 +754,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="526.5" cy="1925" width="55.67" height="17.6036"/>
<path d="M0 1548 L526.5 1548 L526.5 2376.7 L484.1 2376.7" class="st10"/>
<rect v:rectContext="textBkgnd" x="503.668" y="1920.2" width="45.6638" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="503.668" y="1920.2" width="45.6638" height="9.59985" class="st14"/>
<text x="503.67" y="1927.4" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>c<tspan class="st9"
v:langID="2057">ontains</tspan><tspan class="st9" v:langID="2057">-</tspan><tspan class="st9"
v:langID="2057">refs</tspan></text> </g>
@@ -764,7 +764,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-88.65" cy="1622.34" width="40" height="17.6036"/>
<path d="M0 1548 L0 1603.75 L-88.65 1603.75 L-88.65 1761.93 L-71.79 1761.93" class="st10"/>
<rect v:rectContext="textBkgnd" x="-100.218" y="1617.54" width="23.1364" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-100.218" y="1617.54" width="23.1364" height="9.59985" class="st14"/>
<text x="-100.22" y="1624.74" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>part-of</text> </g>
<g id="shape1066-352" v:mID="1066" v:groupContext="shape" v:layerMember="0" transform="translate(653.062,-1046.04)">
<title>Dynamic connector.1066</title>
@@ -797,12 +797,12 @@
<text x="8.36" y="1541.37" class="st4" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>x-investigation-tool--1</text> </g>
<g id="shape1070-366" v:mID="1070" v:groupContext="shape" v:layerMember="0" transform="translate(362.25,-936.84)">
<title>Dynamic connector.1070</title>
<desc>acquired_using_tool_ref</desc>
<desc>acquired_using_ref</desc>
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1564.63" width="94.77" height="17.6036"/>
<v:textRect cx="9" cy="1564.63" width="77.28" height="17.6036"/>
<path d="M9 1548 L9 1574.72" class="st10"/>
<rect v:rectContext="textBkgnd" x="-33.3827" y="1559.83" width="84.7653" height="9.59985" class="st12"/>
<text x="-33.38" y="1567.03" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>acquired_using_tool_ref</text> </g>
<rect v:rectContext="textBkgnd" x="-24.6347" y="1559.83" width="67.2693" height="9.59985" class="st14"/>
<text x="-24.63" y="1567.03" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>acquired_using_ref</text> </g>
<g id="shape1071-373" v:mID="1071" v:groupContext="shape" transform="translate(306,-820.123)">
<title>Rectangle.1071</title>
<desc>software--1</desc>
@@ -819,7 +819,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1569.27" width="54.22" height="17.6036"/>
<path d="M9 1548 L9 1584" class="st10"/>
<rect v:rectContext="textBkgnd" x="-13.1034" y="1564.47" width="44.2068" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-13.1034" y="1564.47" width="44.2068" height="9.59985" class="st14"/>
<text x="-13.1" y="1571.67" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>software_ref</text> </g>
<g id="shape1073-383" v:mID="1073" v:groupContext="shape" transform="translate(162,-608.828)">
<title>Rectangle.1073</title>
@@ -864,7 +864,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-78.75" cy="1747.07" width="55.67" height="17.6036"/>
<path d="M0 1548 L-78.75 1548 L-78.75 2018.36" class="st10"/>
<rect v:rectContext="textBkgnd" x="-101.582" y="1742.27" width="45.6638" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-101.582" y="1742.27" width="45.6638" height="9.59985" class="st14"/>
<text x="-101.58" y="1749.47" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>c<tspan
class="st9" v:langID="2057">ontains</tspan><tspan class="st9" v:langID="2057">-</tspan><tspan class="st9"
v:langID="2057">refs</tspan></text> </g>
@@ -922,7 +922,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-48.2567" cy="1570.65" width="40" height="17.6036"/>
<path d="M0 1548 L-90.59 1590.53" class="st10"/>
<rect v:rectContext="textBkgnd" x="-62.3543" y="1565.85" width="28.195" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-62.3543" y="1565.85" width="28.195" height="9.59985" class="st14"/>
<text x="-62.35" y="1573.05" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>invovles</text> </g>
<g id="shape1084-447" v:mID="1084" v:groupContext="shape" v:layerMember="0" transform="translate(371.25,-957.295)">
<title>Dynamic connector.1084</title>
@@ -938,7 +938,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="79.3125" cy="1515.52" width="40" height="17.6036"/>
<path d="M0 1548 L79.31 1548 L79.31 1410.27" class="st10"/>
<rect v:rectContext="textBkgnd" x="65.4805" y="1510.72" width="27.6638" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="65.4805" y="1510.72" width="27.6638" height="9.59985" class="st14"/>
<text x="65.48" y="1517.92" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>exploits</text> </g>
<g id="shape1086-461" v:mID="1086" v:groupContext="shape" v:layerMember="0" transform="translate(401.062,-690.79)">
<title>Dynamic connector.1086</title>
@@ -964,7 +964,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-13.9205" cy="1526.9" width="40" height="17.6036"/>
<path d="M0 1548 L-13.5 1548 L-13.5 1526.9 L-42.4 1526.9" class="st10"/>
<rect v:rectContext="textBkgnd" x="-25.3423" y="1522.1" width="22.8439" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-25.3423" y="1522.1" width="22.8439" height="9.59985" class="st14"/>
<text x="-25.34" y="1529.3" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>url_ref</text> </g>
<g id="shape1089-478" v:mID="1089" v:groupContext="shape" v:layerMember="0" transform="translate(466.312,-551.871)">
<title>Dynamic connector.1089</title>
@@ -999,7 +999,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-9.28125" cy="1503.91" width="40.66" height="17.6036"/>
<path d="M-8.72 1548 L-8.72 1534.5 L-9.28 1534.5 L-9.28 1465.79" class="st10"/>
<rect v:rectContext="textBkgnd" x="-24.6054" y="1499.11" width="30.6483" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-24.6054" y="1499.11" width="30.6483" height="9.59985" class="st14"/>
<text x="-24.61" y="1506.31" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>image-of</text> </g>
<g id="shape1093-503" v:mID="1093" v:groupContext="shape" transform="translate(684,-1140.8)">
<title>Sheet.1093</title>
@@ -1022,7 +1022,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="88.7737" cy="1520.95" width="78.17" height="17.6036"/>
<path d="M0 1548 L171.29 1495.81" class="st10"/>
<rect v:rectContext="textBkgnd" x="55.6939" y="1516.15" width="66.1594" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="55.6939" y="1516.15" width="66.1594" height="9.59985" class="st14"/>
<text x="55.69" y="1523.35" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>communicates-use </text> </g>
<g id="shape1098-518" v:mID="1098" v:groupContext="shape" transform="translate(276.75,-426.349)">
<title>Rectangle.1098</title>
@@ -1068,7 +1068,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-40.6547" cy="1567.22" width="57.89" height="17.6036"/>
<path d="M0 1548 L-75.4 1583.65" class="st10"/>
<rect v:rectContext="textBkgnd" x="-63.5978" y="1562.43" width="45.886" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-63.5978" y="1562.43" width="45.886" height="9.59985" class="st14"/>
<text x="-63.6" y="1569.63" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>processed-by </text> </g>
<g id="shape1103-541" v:mID="1103" v:groupContext="shape" v:layerMember="0" transform="translate(848.812,-485.254)">
<title>Dynamic connector.1103</title>
@@ -1076,7 +1076,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-46.4062" cy="1567.22" width="57.89" height="17.6036"/>
<path d="M0 1548 L-86.77 1583.95" class="st10"/>
<rect v:rectContext="textBkgnd" x="-69.3493" y="1562.43" width="45.886" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-69.3493" y="1562.43" width="45.886" height="9.59985" class="st14"/>
<text x="-69.35" y="1569.63" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>processed-by </text> </g>
<g id="shape1104-548" v:mID="1104" v:groupContext="shape" v:layerMember="0" transform="translate(644.062,-1066.5)">
<title>Dynamic connector.1104</title>
@@ -1119,7 +1119,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="9" cy="1526.73" width="55.67" height="17.6036"/>
<path d="M9 1548 L9 1512" class="st10"/>
<rect v:rectContext="textBkgnd" x="-13.832" y="1521.93" width="45.6638" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-13.832" y="1521.93" width="45.6638" height="9.59985" class="st14"/>
<text x="-13.83" y="1529.13" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>c<tspan
class="st9" v:langID="2057">ontains</tspan><tspan class="st9" v:langID="2057">-</tspan><tspan class="st9"
v:langID="2057">refs</tspan></text> </g>
@@ -1140,7 +1140,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="-9.28125" cy="1523.74" width="40" height="17.6036"/>
<path d="M-8.72 1548 L-8.72 1534.5 L-9.28 1534.5 L-9.28 1505.45" class="st10"/>
<rect v:rectContext="textBkgnd" x="-23.6307" y="1518.94" width="28.6988" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="-23.6307" y="1518.94" width="28.6988" height="9.59985" class="st14"/>
<text x="-23.63" y="1526.14" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>requires</text> </g>
<g id="shape1132-591" v:mID="1132" v:groupContext="shape" v:layerMember="0" transform="translate(561.375,-1012.83)">
<title>Dynamic connector</title>
@@ -1148,7 +1148,7 @@
<v:textBlock v:margins="rect(4,4,4,4)"/>
<v:textRect cx="34.9139" cy="1575.77" width="52.76" height="17.6036"/>
<path d="M0 1548 L64.71 1599.46" class="st10"/>
<rect v:rectContext="textBkgnd" x="13.539" y="1570.97" width="42.7497" height="9.59985" class="st12"/>
<rect v:rectContext="textBkgnd" x="13.539" y="1570.97" width="42.7497" height="9.59985" class="st14"/>
<text x="13.54" y="1578.17" class="st13" v:langID="1033"><v:paragraph v:horizAlign="1"/><v:tabList/>investigates</text> </g>
</g>
</svg>
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 74 KiB

After

Width:  |  Height:  |  Size: 74 KiB

BIN
STIX_for_digital_forensics/CFO_intro.vsdx
View File

Binary file not shown.

44
STIX_for_digital_forensics/readme.md
View File

@@ -90,17 +90,17 @@ An image Object represent a computer file containing the contents and structure
### Image Specific Properties
| Property Name | Type | Description |
| ----------------------- | ----------------------------- | --------------------------------------------------------------------- |
| type (required) | string | The value of this property MUST be x-image. |
| image_id | string | Specifies an id of an image. |
| description | string | Specifies the description of an image. |
| partitions | list of type x-disk-partition | Specifies a list of partitions that an image contains. |
| acquired_on | timestamp | Specifies the time the image was acquired. |
| format | open-vocab | Specifies the image format. It MUST come from x-disk-image-format-ov. |
| acquired_using_tool_ref | identifier | Specifies the Investigation Tool that creates the image. |
| acquired_by_ref | identifier | Specifies the Investigator that create a disk image. |
| image_file_ref | identifier | Specifies a image file. |
| Property Name | Type | Description |
| ------------------ | ----------------------------- | --------------------------------------------------------------------- |
| type (required) | string | The value of this property MUST be x-image. |
| image_id | string | Specifies an id of an image. |
| description | string | Specifies the description of an image. |
| partitions | list of type x-disk-partition | Specifies a list of partitions that an image contains. |
| acquired_on | timestamp | Specifies the time the image was acquired. |
| format | open-vocab | Specifies the image format. It MUST come from x-disk-image-format-ov. |
| acquired_using_ref | identifier | Specifies the Investigation Tool that creates the image. |
| acquired_by_ref | identifier | Specifies the Investigator that create a disk image. |
| image_file_ref | identifier | Specifies a image file. |
### Relationships
@@ -134,7 +134,7 @@ An image Object represent a computer file containing the contents and structure
"format": "dd",
"image_file_ref": "file--6e735550-51e8-483a-b0d6-29d6ff5cfbf3",
"acquired_by_ref": "x-investigator--b9babea0-63eb-4981-8e6d-f6603cf7e46a",
"acquired_using_tool_ref": "x-investigation-tool--0a5b5f22-ba62-42f1-9d74-a94e87f4b45c",
"acquired_using_ref": "x-investigation-tool--0a5b5f22-ba62-42f1-9d74-a94e87f4b45c",
"created_by_ref": "identity--f431f809-377b-45e0-aa1c-6a4751cae5ff",
"created": "2021-04-06T20:03:00.000Z",
"modified": "2021-04-06T20:03:00.000Z"
@@ -512,16 +512,16 @@ An investigator is a digital forensic analyst to collect, store, and analyze dig
### Investigator Specific Properties
| Property Name | Type | Description |
| --------------------- | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- |
| type (required) | string | The value of this property MUST be x-investigator. |
| name (required) | string | A name used to identify this Investigator. |
| description | string | A description that provides more details and context about the Investigator, potentially including its purpose and its key characteristics. |
| degree | string | Specifies the highest academic degree of the investigator, e.g, AA, BS, MS, Ph.D. |
| major | string | Specifies the major of the highest academic degree of the investigator. |
| school | string | Specifies the school the investigator graduated from. |
| certificates | list of type string | Specifies a list of certificates the investigator has. |
| has_investigated_refs | list of type identifier | Specifier a list of x-crime-case. |
| Property Name | Type | Description |
| -------------------------- | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- |
| type (required) | string | The value of this property MUST be x-investigator. |
| name (required) | string | A name used to identify this Investigator. |
| description | string | A description that provides more details and context about the Investigator, potentially including its purpose and its key characteristics. |
| degree | string | Specifies the highest academic degree of the investigator, e.g, AA, BS, MS, Ph.D. |
| major | string | Specifies the major of the highest academic degree of the investigator. |
| school | string | Specifies the school the investigator graduated from. |
| certificates | list of type string | Specifies a list of certificates the investigator has. |
| has_investigated_case_refs | list of type identifier | Specifier a list of x-crime-case. |
### Relationships