An international standard for sharing cyber-investigation traces

Getting Started

New to CASE or ontologies? Start here.

Jump Right In

Get into the 1s and 0s right now.


We are always looking for more contributors and adopters.

Express & Exchange

Cyber-investigation Analysis Standard Expression (CASE) is a community-developed evolving standard, which is intended to serve the needs of the broadest possible range of cyber-investigation domains, including digital forensic science, incident response, counter-terrorism, criminal justice, forensic intelligence and situational awareness.

The primary motivation for CASE is interoperability - to advance the exchange of cyber-investigation information between tools and organizations. CASE aligns with and extends the Unified Cyber Ontology (UCO).

The purpose of these online resources is to provide a foundation for broader community involvement in defining what to represent and how.

Subscribe to Community Emails