Meetings

General Community, Governance, Ontology, and Adoption Meetings

Adoption
Adoption Committee Virtual Meeting
22 Apr 2020

  • Purpose and hierarchy of the Adoption Committee
  • Around the room introductions
  • Meeting frequency determination (bi-weekly initially)
  • Eoghan discusses crossover case challenge

Governance
Governance Committee Virtual Meeting
26 Mar 2020

  • Updates to CASE website added by MITRE team (past meeting minutes and workshop presentations)
  • Slack community created to provide syncronous or asyncronous communications
  • Techno Myrtle Beach conference is still on schedule, however the schedule has not been released
  • OC is in the process of generating the 17 CASE MVP use cases. 11/17 use cases are in draft form

Ontology
Ontology Committee Virtual Meeting
19 Mar 2020

  • Provided updates on upcoming CASE presentations due to the Covid-19 pandemic
  • Voted two Change Proposals into Solutions Development: “The CASE ontology README needs to link to its style guidance” and “The CASE examples need to live in a repository that tracks the ontology”
  • Demoed the new “Examples Gallery” on the CASEOntology.org website
  • Introduced two Topic Narratives for Committee Review: “Narrative-MultipleBrowsers” and “Narrative-Phishing”

Governance
Governance Committee Virtual Meeting
25 Feb 2020

  • CASE talk for Myrtle Beach Techno Security was accepted
  • DC3 and UNH working together to build machanism to exchange digital forensic artifacts
  • UCO Community will be working through backlog of Github issues
  • UCO Community will be working through existing change proposals

Ontology
Ontology Committee Virtual Meeting
11 Feb 2020

  • Proposed shifting CASE’s scope to focus on the provenance of digital evidence in an investigative standard (device or data source acts as source of digital evidence)
  • Illustrated JSON-LD’s use of “Binding Rules” to map content of an ontology model to the LD context
  • Reviewed requirements for Change Proposal-7, “The CASE examples need to live in a repository that tracks the ontology”
  • Held Solutions Review for Change Proposal-8, “Rename ‘propertyBundle’ label to ‘hasPropertyBundle’ to adhere to best practices in the Style Guidance”

Governance
Governance Committee Virtual Meeting
31 Jan 2020

  • New members added to the community
  • Adoption Committee Charter requires additional updates before voting
  • Poll created for CASE memebers attending AAFS

Ontology
Ontology Committee Virtual Meeting
14 Jan 2020

  • Governance held nomination process for Class Representation: one change – Dr. Christopher Hargreaves took over Academia Chair in place of Dr. Sangjin Lee
  • Alex Nelson discussed portions of his research that bolster the storage forensic concepts in CASE
  • UCO developed a change control process similar to CASE’s and transitioned CP-5 to UCO
  • Three narratives, “UrgentEvidence,” “IR,” and “RejectedEvidence,” were voted into MVP
  • Held Requirements Review for two Change Proposals: “The CASE Ontology README needs to link to its style guidance” and “The CASE examples need to live in a repository that tracks the ontology”

Governance
Governance Committee Virtual Meeting
18 Dec 2019

  • CASE OC Chair defining CASE MVP concepts
  • Ten new members added to the community
  • UCO Community ratified SOP
  • GC to vote on adoption of OC charter annual update

Ontology
Ontology Committee Virtual Meeting
12 Dec 2019

  • Adoption Committee Charter has been put forward for a vote
  • Change Proposals and Concept Development Requests were moved over to Confluence
  • CASE and UCO Shared Development Practices were posted to the CASEOntology.org website
  • Discussed Change Proposal 5, “Qualitative Confidence”
  • Discussed the possibility of validating instance data using a shape language
  • Demonstrated the CASE MVP Workflow for MVP development

Governance
Governance Committee Virtual Meeting
20 Nov 2019

  • Status 2020 Governance Nominations
  • UCO Community completed UCO SOP
  • GC Director Updates
  • OC - biggest action is to produce CASE welcome package
  • CASE Website updates

Ontology
Ontology Committee Virtual Meeting
14 Nov 2019

  • Governance Committee wants to start sending a “Welcome Package” to new CASE members to provide materials/information
  • Shared development procedures between CASE and UCO were implemented to standardize workflow mechanics between the two ontologies
  • Introduced the “MVP Coverage” workflow to track MVP progress
  • Voted on and passed the “Annual CASE Ontology Committee Charter Review” and “Adding ‘present’ to the voting quorum definition in the by-laws”
  • Voted three Change Proposals into Solutions Development. Those CPs included\: “CASE’s ontology files need to be separated by namespace,” “Ontology normalization procedure,” and “Different types of file system objects”

Ontology
Ontology Committee Virtual Meeting
10 Oct 2019

  • UCO is working to create a new CASE turtle file
  • Established voting procedure for OC voting matters (need at least 3 classes to vote the affirmative)
  • Opened the Operations Guide for comment collection
  • Held Requirements Review for CDR-1, “CASE representation of Confidence”
  • Confluence page was created to track all the needed concepts

Governance
Governance Committee Virtual Meeting
26 Sep 2019

  • CASE Treasurer Updates
  • Around the Table - CASE Directors
  • Membership requests
  • CASE Adoption Committee Charter by MITRE
  • Ontology Committee & UCO Updates
  • Annual Election Prep

Ontology
Ontology Committee Virtual Meeting
19 Sep 2019

  • Committee feedback approved the move from Trello to JIRA
  • Change Proposal for CASE namespace was voted to proceed to development
  • Reviewed requirements for three additional Change Proposals: 'Ontology normalization procedure,' 'CASE’s ontology files need to be separated by namespace,' and 'Different types of file system objects'
  • Discussed concept coverage (MVP) reporting and concept item: Chain of Custody

Ontology
Ontology Committee Virtual Meeting
01 Aug 2019

  • UCO released v0.3.0 in July
  • Discussed JIRA for Sprint management
  • CASE Adoption Committee Charter sent for review by Governance Committee
  • Aim to have a Change Proposal on basing the CASE RDF namespace on caseontology.org in voting state by October meeting
  • Established a working document to address CASE's concept coverage (MVP)
  • Began work on confirming concept coverage for some MVP concepts

Ontology
Ontology Committee Virtual Meeting
18 Jun 2019

  • Covered logistics and agenda for The June Workshop

Governance
Governance Committee Virtual Meeting
06 Jun 2019

  • Membership Requests and Appointments
  • CASE Workshop Agenda
  • UCO Community SOP Status

Ontology
Ontology Committee Virtual Meeting
21 May 2019

  • Discussed the desired outcome of The June Workshop: define a level of formality to achieve CASE and interoperability within other communities (i.e. STIX, ATT&CK, CVE, etc.)
  • Discussed 'Store CASE in RDF/XML' Change Proposal. Developer decided to leave CASE in TTL and would convert to RDF/XML as needed
  • Update RDF/XML Change Proposal to reflect normalization of the Turtle content
  • Still working/discussing CASE Namespace and CASE Resource Overview topics

Ontology
Ontology Committee Virtual Meeting
30 Apr 2019

  • FRWS-EU Workshop was a success, questions were written up and submitted to the Ontology Committee Chair
  • Discussed the 'Status of Work Items' spreadsheet
  • Discussed Trello card archiving and other possibilities
  • Discussed the steps required to formally accept the Ontology Committee Operations Guide
  • Change Proposal: 'Store CASE in RDF/XML' was introduced

Ontology
Ontology Committee Virtual Meeting
28 Mar 2019

  • Discussed 'Demarcating line' between UCO and CASE. UCO is general domain and CASE is specific to investigative vocabulary
  • Discussed agenda for DFRWS-EU Workshop and The June Workshop
  • Decided that CASE needs to establish basic illustrative, demonstrative, and normative implementation examples for new community members
  • New representation of a few concepts: mobile orientation (SIM card), chat messages, custom objects/attributes, cloud-based traces, etc.
  • Discussed current hindrances for updating the case.ttl

Governance
Governance Committee Virtual Meeting
28 Mar 2019

  • Establishment of Community as Non-Profit Discussion
  • Membership Request Presentation and Approval
  • Website Establishment and Github Migration Update
  • UCO Community SOP
  • Advisory Board Discussion

Ontology
Ontology Committee Virtual Meeting
28 Feb 2019

  • Governance Committee still making final adjustments to the Ontology Committee Charter
  • UCO is working to update its syntax but will not restructure UCO's ontology
  • UCO and CASE communities working on defining a statement that reflects CASE's formal inheritance of UCO
  • Operations Guide still going through the review process
  • 'CASE standard' is the case.ttl file and mappings/adoption/implementation will need to publish a reference to the .ttl version used

Governance
Governance Committee Virtual Meeting
28 Feb 2019

  • Ontology Committee Charter Vote Update
  • Membership Application Update
  • Membership Requests
  • Privacy Policy Update
  • Changes to Bylaws

Ontology
Ontology Committee Virtual Meeting
14 Feb 2019

  • Alex Nelson appointed as Chair of the Ontology Committee
  • Ontology Committee Charter is awaiting Governance Committee's final approval
  • CASE and UCO working to outline the alignment of both ontology efforts
  • Reviewed the Ontology Committee Operations Guide for suggestions/input

Governance
Governance Committee Virtual Meeting
12 Feb 2019

  • CASE Treasurer Announcement
  • Review Ontology Committee Charter Updates
  • CASE Community Membership Application Review
  • Domain name identified - caseontology.org selected by vote

Governance
Governance Committee Virtual Meeting
30 Jan 2019

  • Review CASE Community Code of Conduct
  • Review Community Membership Forms
  • Review Ontology Committee Charter
  • Review proposed community budget for 2019
  • Discuss establishment of membership dues structure
  • DFRWS EU CASE Workshop Planning

Community
CASE Adoption Workshop for Mobile Forensic Tool Developers
06 Dec 2018

  • Mobile forensic tool developers discuss common needs and issues with adopting CASE
  • Presentations from Martin Westman (MSAB) and Nicholaos Matskanis (CETIC)
  • Discussion to build translator tools for popular tools

Community
CASE Community Virtual Meeting
28 Nov 2018

  • Bylaws Acceptance Update
  • Community Director Nominations Update
  • Community Roadmap
  • Getting ready for CASE Ontology Committee
  • EVIDENCE2-eCODEX Meeting Outbrief

Community
CASE Community Virtual Meeting
31 Oct 2018

  • CASE community interactions
  • Final review of bylaws
  • Voting on governance structure

Community
CASE Community Virtual Meeting
26 Sep 2018

  • Community roadmap updates
  • Draft bylaws and adoption schedule
  • Usage examples of CASE/UCO

Community
CASE Community Virtual Meeting
29 Aug 2018

  • JSON examples and documentation
  • API auto-generation scripts proof-of-concept
  • Proposed governance model
  • dc3dd proof-of-concept

Community
CASE Community Virtual Meeting
25 Jul 2018

  • Usage convention for InvestigativeAction
  • Refinement to Mobile Accounts
  • Tool mapping updates
  • GitHub updates and community requests

Community
CASE Community Virtual Meeting
30 May 2018

  • Proposal reminders
  • CASE licensing
  • Request for community members to run RDFDiff
  • Adoption of CASE Python API into other languages

Community
CASE Community Virtual Meeting
25 Apr 2018

  • Voting on proposed updates to CASE/UCO
  • Representing Contacts using CASE/UCO
  • CASE workshop recap
  • CASE roadmap

Community
CASE Community Virtual Meeting
04 Apr 2018

  • New proposed updates to CASE/UCO
  • MITRE RDF verifier code release
  • Volatility PoC code release
  • License discussion (Apache 2)

Community
CASE Community Virtual Meeting
28 Feb 2018

  • Voting on proposed updates to CASE/UCO
  • Looking at the turtle (ttl) - RDF/OWL
  • GitHub harmonization
  • Plaso module mapping updates

Community
CASE Community Virtual Meeting
31 Jan 2018

  • Voting on proposed updates to CASE
  • CASE API - case.py & NLG.py
  • CASE Glossary verifier - verify.py
  • Volatility implementation of CASE
  • CASE implementation workshop details

Community
CASE Community Virtual Meeting
29 Nov 2017

  • MITRE developers discussed validator roadmap, and enhancements to Plaso CASE API
  • Alex Nelson presented initial translation library between DFXML and CASE
  • Final proposal for representing deleted files
  • Reorganization of ucoProject and CASE GitHub

Community
CASE Community Virtual Meeting
25 Oct 2017

  • Representing network connections in PCAP file
  • Mapping to known files/media databases
  • Need for relativeFilePath property
  • Referencing large files (e.g., forensic images)
  • Proposal to representing deleted files

Community
CASE Community Virtual Meeting
27 Sep 2017

  • Eoghan Casey provided a status update on CASE/UCO, and proposed a vote on the name change of ‘ForensicAction’ to ‘InvestigativeAction’
  • Cory Hall explained that MITRE is adding two software engineers to integrate CASE/UCO into U.S. Government tools, provide community reference implementations and documentation, and act as technical POC for community developers
  • Erik Hjelmvik discussed his experience implementing CASE/UCO within Network Miner Pro
  • Sean Barnum provided an overview of FireEye’s Information Integration Strategy and adoption plan for CASE/UCO