From 79a90851e400c13b1ec0157a410e1e41f1679f0f Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Thu, 29 May 2025 15:24:32 -0400 Subject: [PATCH 1/7] Bump UCO to post-1.4.0 develop state No effects were observed on Make-managed files. Signed-off-by: Alex Nelson --- dependencies/UCO | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dependencies/UCO b/dependencies/UCO index 8335d32..633074a 160000 --- a/dependencies/UCO +++ b/dependencies/UCO @@ -1 +1 @@ -Subproject commit 8335d32d600f717b7b4f43d74cf40efdf07aa340 +Subproject commit 633074aa502313e8806d9fda5f70f9a6d4fb903f From a2fac7305fbeeb83b51be7e0bb8cf5cda9dae06a Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Sat, 18 Jul 2026 21:30:36 -0400 Subject: [PATCH 2/7] Bump UCO to current state of develop No effects were observed on Make-managed files. References: * https://github.com/ucoProject/UCO/issues/666 * https://github.com/ucoProject/UCO/issues/667 * https://github.com/ucoProject/UCO/issues/669 * https://github.com/ucoProject/UCO/issues/670 Signed-off-by: Alex Nelson --- dependencies/UCO | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dependencies/UCO b/dependencies/UCO index 633074a..2df8405 160000 --- a/dependencies/UCO +++ b/dependencies/UCO @@ -1 +1 @@ -Subproject commit 633074aa502313e8806d9fda5f70f9a6d4fb903f +Subproject commit 2df84051d2e1086371b26f87e596c85a81260560 From 771f48ee2d09a1e59302e7871082a4f5d586c047 Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Wed, 22 Jul 2026 14:15:36 -0400 Subject: [PATCH 3/7] Bump UCO to current state of develop No effects were observed on Make-managed files. References: * https://github.com/ucoProject/UCO/issues/666 Signed-off-by: Alex Nelson --- dependencies/UCO | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dependencies/UCO b/dependencies/UCO index 2df8405..9001781 160000 --- a/dependencies/UCO +++ b/dependencies/UCO @@ -1 +1 @@ -Subproject commit 2df84051d2e1086371b26f87e596c85a81260560 +Subproject commit 90017815db40dbed02216d215e5d3ae2a2d53833 From a0af558333c63548792cabda576bcb466019db72 Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Fri, 24 Jul 2026 10:21:58 -0400 Subject: [PATCH 4/7] Bump UCO to 1.5.0 release state; update import IRIs A follow-on patch will regenerate Make-managed files. Signed-off-by: Alex Nelson --- dependencies/UCO | 2 +- ontology/investigation/investigation.ttl | 8 ++++---- ontology/master/case.ttl | 4 ++-- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/dependencies/UCO b/dependencies/UCO index 9001781..7ebb395 160000 --- a/dependencies/UCO +++ b/dependencies/UCO @@ -1 +1 @@ -Subproject commit 90017815db40dbed02216d215e5d3ae2a2d53833 +Subproject commit 7ebb3957e9e9a2e1bb9c66cd1ede8c912a726344 diff --git a/ontology/investigation/investigation.ttl b/ontology/investigation/investigation.ttl index a572ba4..913e512 100644 --- a/ontology/investigation/investigation.ttl +++ b/ontology/investigation/investigation.ttl @@ -1,6 +1,6 @@ # imports: https://ontology.caseontology.org/case/vocabulary/1.4.0 -# imports: https://ontology.unifiedcyberontology.org/uco/action/1.4.0 -# imports: https://ontology.unifiedcyberontology.org/uco/role/1.4.0 +# imports: https://ontology.unifiedcyberontology.org/uco/action/1.5.0 +# imports: https://ontology.unifiedcyberontology.org/uco/role/1.5.0 @prefix investigation: . @prefix owl: . @@ -20,8 +20,8 @@ owl:backwardCompatibleWith investigation:1.3.0 ; owl:imports vocabulary:1.4.0 , - uco-action:1.4.0 , - uco-role:1.4.0 + uco-action:1.5.0 , + uco-role:1.5.0 ; owl:priorVersion investigation:1.3.0 ; owl:versionIRI investigation:1.4.0 ; diff --git a/ontology/master/case.ttl b/ontology/master/case.ttl index 3fdc368..eea7dcb 100644 --- a/ontology/master/case.ttl +++ b/ontology/master/case.ttl @@ -1,6 +1,6 @@ # imports: https://ontology.caseontology.org/case/investigation/1.4.0 # imports: https://ontology.caseontology.org/case/vocabulary/1.4.0 -# imports: https://ontology.unifiedcyberontology.org/uco/uco/1.4.0 +# imports: https://ontology.unifiedcyberontology.org/uco/uco/1.5.0 @prefix dct: . @prefix owl: . @@ -20,7 +20,7 @@ owl:imports , , - + ; owl:priorVersion ; owl:versionIRI ; From cbfebf08d5c89d254725a05f77341ab587c26180 Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Fri, 24 Jul 2026 10:22:08 -0400 Subject: [PATCH 5/7] Regenerate Make-managed files Signed-off-by: Alex Nelson --- ontology/investigation/catalog-v001.xml | 16 +++++------ ontology/master/catalog-v001.xml | 36 ++++++++++++------------- 2 files changed, 26 insertions(+), 26 deletions(-) diff --git a/ontology/investigation/catalog-v001.xml b/ontology/investigation/catalog-v001.xml index c11624f..10f333d 100644 --- a/ontology/investigation/catalog-v001.xml +++ b/ontology/investigation/catalog-v001.xml @@ -2,14 +2,14 @@ - - - - - - - - + + + + + + + + diff --git a/ontology/master/catalog-v001.xml b/ontology/master/catalog-v001.xml index bc112a2..4932382 100644 --- a/ontology/master/catalog-v001.xml +++ b/ontology/master/catalog-v001.xml @@ -2,24 +2,24 @@ - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + From 84a85e25ec7f4f23bb85395184935a4d9f6f73bf Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Fri, 24 Jul 2026 10:27:06 -0400 Subject: [PATCH 6/7] Bump version A follow-on patch will regenerate Make-managed files. Signed-off-by: Alex Nelson --- ontology/investigation/investigation.ttl | 10 +++++----- ontology/master/case.ttl | 16 ++++++++-------- ontology/vocabulary/vocabulary.ttl | 6 +++--- 3 files changed, 16 insertions(+), 16 deletions(-) diff --git a/ontology/investigation/investigation.ttl b/ontology/investigation/investigation.ttl index 913e512..131dc1a 100644 --- a/ontology/investigation/investigation.ttl +++ b/ontology/investigation/investigation.ttl @@ -1,4 +1,4 @@ -# imports: https://ontology.caseontology.org/case/vocabulary/1.4.0 +# imports: https://ontology.caseontology.org/case/vocabulary/1.5.0 # imports: https://ontology.unifiedcyberontology.org/uco/action/1.5.0 # imports: https://ontology.unifiedcyberontology.org/uco/role/1.5.0 @@ -17,14 +17,14 @@ a owl:Ontology ; rdfs:label "investigation"@en ; rdfs:comment "This ontology defines key concepts, and their associated properties and relationships, for characterizing cyber-investigations in the broadest range of contexts, including security incidents, criminal investigations, civil and regulatory matters, intelligence operations, international disputes, accident inquiries, policy violations, and others." ; - owl:backwardCompatibleWith investigation:1.3.0 ; + owl:backwardCompatibleWith investigation:1.4.0 ; owl:imports - vocabulary:1.4.0 , + vocabulary:1.5.0 , uco-action:1.5.0 , uco-role:1.5.0 ; - owl:priorVersion investigation:1.3.0 ; - owl:versionIRI investigation:1.4.0 ; + owl:priorVersion investigation:1.4.0 ; + owl:versionIRI investigation:1.5.0 ; . investigation:Attorney diff --git a/ontology/master/case.ttl b/ontology/master/case.ttl index eea7dcb..e066c21 100644 --- a/ontology/master/case.ttl +++ b/ontology/master/case.ttl @@ -1,5 +1,5 @@ -# imports: https://ontology.caseontology.org/case/investigation/1.4.0 -# imports: https://ontology.caseontology.org/case/vocabulary/1.4.0 +# imports: https://ontology.caseontology.org/case/investigation/1.5.0 +# imports: https://ontology.caseontology.org/case/vocabulary/1.5.0 # imports: https://ontology.unifiedcyberontology.org/uco/uco/1.5.0 @prefix dct: . @@ -16,14 +16,14 @@ rdfs:label "case-master"@en ; rdfs:comment "The Cyber-investigation Analysis Standard Expression (CASE) ontology is a community-developed standard that defines concepts used in a broad range of cyber-investigation domains, including digital forensic science, incident response, counter-terrorism, criminal justice, forensic intelligence, and situational awareness. CASE includes all aspects of the digital forensic process, from evidence-gathering and chain of custody, to generating a final report. The goal is to increase sharing and interoperability of cyber-investigation information among organizations and between forensic analytic tools. CASE aligns with and extends the Unified Cyber Ontology (UCO). The preferred namespace abbreviation for this ontology is: case-master."@en ; dct:title "Cyber-investigation Analysis Standard Expression (CASE)"@en ; - owl:backwardCompatibleWith ; + owl:backwardCompatibleWith ; owl:imports - , - , + , + , ; - owl:priorVersion ; - owl:versionIRI ; - owl:versionInfo "1.4.0" ; + owl:priorVersion ; + owl:versionIRI ; + owl:versionInfo "1.5.0" ; . diff --git a/ontology/vocabulary/vocabulary.ttl b/ontology/vocabulary/vocabulary.ttl index 5affbb4..0089eb2 100644 --- a/ontology/vocabulary/vocabulary.ttl +++ b/ontology/vocabulary/vocabulary.ttl @@ -7,9 +7,9 @@ a owl:Ontology ; rdfs:label "vocabularies"@en ; - owl:backwardCompatibleWith vocab:1.3.0 ; - owl:priorVersion vocab:1.3.0 ; - owl:versionIRI vocab:1.4.0 ; + owl:backwardCompatibleWith vocab:1.4.0 ; + owl:priorVersion vocab:1.4.0 ; + owl:versionIRI vocab:1.5.0 ; . vocab:InvestigationFormVocab From fbc37634ed791378227c86dcd811a0cdaf9bbb3a Mon Sep 17 00:00:00 2001 From: Alex Nelson Date: Fri, 24 Jul 2026 10:34:50 -0400 Subject: [PATCH 7/7] Log changes Signed-off-by: Alex Nelson --- ChangeLog | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/ChangeLog b/ChangeLog index 053bd62..3aabd4e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,15 @@ +2026-07-23 + * (217b29b) UCO Issue 666: Fix typo; add class-vs-instance clarifying remarks + +2026-07-19 + * (876173b) UCO Issue 670: Fix typo "withing" + * (876173b) UCO Issue 669: Fix typo "Implemetation" + * (876173b) UCO Issue 667: Fix typo "MessageTread" + * (876173b) UCO Issue 666: Add `core:UcoType` and `action:Technique` + +2025-05-29 + * OCCASE-496: Release CASE 1.4.0, with release notes at https://caseontology.org/releases/1.4.0/ + 2025-03-18 * (7ecdaf4) UCO Issue 629: Revise vocabulary pattern