Showing:

Annotations
Attributes
Diagrams
Facets
Instances
Model
Properties
Source
Used by
Element mediaDetails
Namespace urn:us:mil:ces:metadata:domex
Annotations
Media or Device Metadata: Data about the media or device source to include: connection to collection data, item identity within context of collection, hardware serial number, model number, image hash value. A physical media that may contain one or more files.
Diagram
Diagram DDMS-Includes_xsd_Attribute_Group_SecurityAttributesGroup.tmp#SecurityAttributesGroup DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_uuid DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_dataOwner DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_personName DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_phoneNumber DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_itemSerialNumber DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_collectingDeviceDistinctName DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_typeOfComponent DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_exploitationResultsClassification DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_deviceImage DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_dispositionOfOriginalSource DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_firmware DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_mediaSize DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_manufacturer DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_modelNumber DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_sourceManufacturer DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_machineSid DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_volumeId DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_processingSite DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_contactInformation DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_toolsOrProcessesUsed DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_typeOfSystemForensicallyPureImageCreated DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_softwareUsedToProcessType DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_versioningOfSoftware DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_explanationOfProcess DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_isDamaged DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_repairsPerformedBy DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_relationshipOfMultipleImagesToSingleDocument DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_numberOfFiles DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_cableReferenceMessageTrafficID DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_activity DOMEX_xsd_Element_subjectInformation.tmp#subjectInformation DOMEX_xsd_Element_file.tmp#file DOMEX_xsd_Element_mediaDetails.tmp#mediaDetails_usbDeviceReference
Properties
content complex
Used by
Element acquisition
Model
Children activity , cableReferenceMessageTrafficID , collectingDeviceDistinctName , contactInformation , dataOwner , deviceImage , dispositionOfOriginalSource , explanationOfProcess , exploitationResultsClassification , file , firmware , isDamaged , itemSerialNumber , machineSid , manufacturer , mediaSize , modelNumber , numberOfFiles , personName , phoneNumber , processingSite , relationshipOfMultipleImagesToSingleDocument , repairsPerformedBy , softwareUsedToProcessType , sourceManufacturer , subjectInformation , toolsOrProcessesUsed , typeOfComponent , typeOfSystemForensicallyPureImageCreated , usbDeviceReference , versioningOfSoftware , volumeId
Instance
<mediaDetails SchemaguideSecurityAttributesGroup="" uuid="" xmlns="urn:us:mil:ces:metadata:domex">
  <dataOwner>{1,1}</dataOwner>
  <personName>{0,1}</personName>
  <phoneNumber>{0,1}</phoneNumber>
  <itemSerialNumber>{1,1}</itemSerialNumber>
  <collectingDeviceDistinctName>{0,1}</collectingDeviceDistinctName>
  <typeOfComponent>{1,1}</typeOfComponent>
  <exploitationResultsClassification SchemaguideSecurityAttributesGroup="">{1,1}</exploitationResultsClassification>
  <deviceImage SchemaguideSecurityAttributesGroup="">{0,1}</deviceImage>
  <dispositionOfOriginalSource>{0,1}</dispositionOfOriginalSource>
  <firmware>{0,1}</firmware>
  <mediaSize>{0,1}</mediaSize>
  <manufacturer>{0,1}</manufacturer>
  <modelNumber>{0,1}</modelNumber>
  <sourceManufacturer>{0,1}</sourceManufacturer>
  <machineSid>{0,1}</machineSid>
  <volumeId>{0,1}</volumeId>
  <processingSite>{0,1}</processingSite>
  <contactInformation>{0,1}</contactInformation>
  <toolsOrProcessesUsed>{0,1}</toolsOrProcessesUsed>
  <typeOfSystemForensicallyPureImageCreated>{0,1}</typeOfSystemForensicallyPureImageCreated>
  <softwareUsedToProcessType>{0,1}</softwareUsedToProcessType>
  <versioningOfSoftware>{0,1}</versioningOfSoftware>
  <explanationOfProcess>{0,1}</explanationOfProcess>
  <isDamaged>{0,1}</isDamaged>
  <repairsPerformedBy>{0,1}</repairsPerformedBy>
  <relationshipOfMultipleImagesToSingleDocument>{0,1}</relationshipOfMultipleImagesToSingleDocument>
  <numberOfFiles type="">{0,3}</numberOfFiles>
  <cableReferenceMessageTrafficID>{0,1}</cableReferenceMessageTrafficID>
  <activity>{0,unbounded}</activity>
  <subjectInformation SchemaguideSecurityAttributesGroup="" uuid="">{0,unbounded}</subjectInformation>
  <file SchemaguideSecurityAttributesGroup="" uuid="">{0,unbounded}</file>
  <usbDeviceReference foundIn="">{0,unbounded}</usbDeviceReference>
</mediaDetails>
Attributes
QName Type Use Annotation
SchemaguideSecurityAttributesGroup xsd:NMTOKEN optional
This attribute is only a placeholder so that all the ISM attributes are not shown in the schemaGuide for every element. If you refer to the documentation of the attribute group it will say what attributes should be here.
uuid UuidType optional
Source
<xs:element name="mediaDetails">
  <xs:annotation>
    <xs:documentation>Media or Device Metadata: Data about the media or device source to include: connection to collection data, item identity within context of collection, hardware serial number, model number, image hash value. A physical media that may contain one or more files.</xs:documentation>
  </xs:annotation>
  <xs:complexType>
    <xs:sequence>
      <xs:element name="dataOwner" type="string100">
        <xs:annotation>
          <xs:documentation>Organization that acquires, obtains, collects and/or provides media to national repositories</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="personName" type="string300" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Person Name/Name associated with organization media owner</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="phoneNumber" type="string100" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Phone Number/Telephone number associated with organization media owner</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="itemSerialNumber" type="string100">
        <xs:annotation>
          <xs:documentation>Serial Number of media</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="collectingDeviceDistinctName" type="string100" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Name of device that collected information</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="typeOfComponent" type="string256">
        <xs:annotation>
          <xs:documentation>Derived data or original data (scan of paper versus image of hard drive)</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="exploitationResultsClassification" type="ExploitationResultsClassificationType">
        <xs:annotation>
          <xs:documentation>The cumulative classification that is evaluated and derived upon review by analysts.</xs:documentation>
        </xs:annotation>
      </xs:element>
      <!-- artf14834 - Make deviceImage optional -->
      <xs:element name="deviceImage" type="DeviceImageType" minOccurs="0">
        <xs:annotation>
          <xs:documentation>An image or copy made of a media device</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="dispositionOfOriginalSource" type="string256" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Location of the original media</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="firmware" type="FirmwareType" minOccurs="0">
        <xs:annotation>
          <xs:documentation>The firmware embedded in the media device.</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="mediaSize" type="string50" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Media size as stated on device label, etc.</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="manufacturer" type="string256" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Device manufacturer</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="modelNumber" type="string100" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Device model number</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="sourceManufacturer" type="string256" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Media manufacturer</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="machineSid" type="string100" minOccurs="0">
        <xs:annotation>
          <xs:documentation>The Machine SID is used to identify a computer on a network under Windows operating system. The machine SID is stored in the SECURITY registry hive located at SECURITY\SAM\Domains\Account, this key has two values F and V. The V value is a binary value that has the computer SID embedded within it at the end of its data (last 96 bits). The format of these IDs are as follows: SID: S-1-5-21-108503121-1563985344-725345543 S - SID Label 1 - SID Version 5 - The identifier authority value 21-3623811015-3361044348-30300820 - domain or local computer value.</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="volumeId" type="string100" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Semi-unique number associated with a device when formatted.</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="processingSite" type="string256" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Location where media was first imaged or forensically processed</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="contactInformation" type="string400" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Contact information of who processed media</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="toolsOrProcessesUsed" type="string256" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Tools/processes used in processing media</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="typeOfSystemForensicallyPureImageCreated" type="string256" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Type of System where Forensically Pure Image was Created</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="softwareUsedToProcessType" type="string256" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Software used to process forensically pure image</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="versioningOfSoftware" type="string50" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Versioning of software used to process forensically pure image</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="explanationOfProcess" type="string256" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Explanation of forensically pure image creation process</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="isDamaged" type="xs:boolean" minOccurs="0">
        <xs:annotation>
          <xs:documentation>A binary flag indicating that a device is damaged</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="repairsPerformedBy" type="string256" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Person Description of repairs performed on damaged device</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="relationshipOfMultipleImagesToSingleDocument" type="string4000" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Relationship of multiple images to single document</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="numberOfFiles" type="NumberOfFilesType" minOccurs="0" maxOccurs="3">
        <xs:annotation>
          <xs:documentation>Number of videos/audio files/pictures on the device.</xs:documentation>
        </xs:annotation>
      </xs:element>
      <xs:element name="cableReferenceMessageTrafficID" type="string100" minOccurs="0">
        <xs:annotation>
          <xs:documentation>Cable/Reference/Message Traffic ID</xs:documentation>
        </xs:annotation>
      </xs:element>
      <!-- Change Request #889 - Add Activity / sub activity elements -->
      <xs:element name="activity" type="ActivityType" minOccurs="0" maxOccurs="unbounded">
        <xs:annotation>
          <xs:documentation>Supports the ability to perform collection, media, and document similarity classification.</xs:documentation>
        </xs:annotation>
      </xs:element>
      <!-- End of Change Request #889 -->
      <xs:element ref="subjectInformation" minOccurs="0" maxOccurs="unbounded"/>
      <xs:element ref="file" minOccurs="0" maxOccurs="unbounded"/>
      <!-- Change Request #529 - Add USB device info -->
      <xs:element name="usbDeviceReference" type="UsbDeviceReferenceType" minOccurs="0" maxOccurs="unbounded"/>
    </xs:sequence>
    <xs:attributeGroup ref="ddms:SecurityAttributesGroup"/>
    <xs:attribute name="uuid" type="UuidType" use="optional"/>
  </xs:complexType>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / dataOwner
Namespace urn:us:mil:ces:metadata:domex
Annotations
Organization that acquires, obtains, collects and/or provides media to national repositories
Diagram
Diagram DOMEX_xsd_Simple_Type_string100.tmp#string100
Type string100
Properties
content simple
Facets
maxLength 100
Source
<xs:element name="dataOwner" type="string100">
  <xs:annotation>
    <xs:documentation>Organization that acquires, obtains, collects and/or provides media to national repositories</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / personName
Namespace urn:us:mil:ces:metadata:domex
Annotations
Person Name/Name associated with organization media owner
Diagram
Diagram DOMEX_xsd_Simple_Type_string300.tmp#string300
Type string300
Properties
content simple
minOccurs 0
Facets
maxLength 300
Source
<xs:element name="personName" type="string300" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Person Name/Name associated with organization media owner</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / phoneNumber
Namespace urn:us:mil:ces:metadata:domex
Annotations
Phone Number/Telephone number associated with organization media owner
Diagram
Diagram DOMEX_xsd_Simple_Type_string100.tmp#string100
Type string100
Properties
content simple
minOccurs 0
Facets
maxLength 100
Source
<xs:element name="phoneNumber" type="string100" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Phone Number/Telephone number associated with organization media owner</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / itemSerialNumber
Namespace urn:us:mil:ces:metadata:domex
Annotations
Serial Number of media
Diagram
Diagram DOMEX_xsd_Simple_Type_string100.tmp#string100
Type string100
Properties
content simple
Facets
maxLength 100
Source
<xs:element name="itemSerialNumber" type="string100">
  <xs:annotation>
    <xs:documentation>Serial Number of media</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / collectingDeviceDistinctName
Namespace urn:us:mil:ces:metadata:domex
Annotations
Name of device that collected information
Diagram
Diagram DOMEX_xsd_Simple_Type_string100.tmp#string100
Type string100
Properties
content simple
minOccurs 0
Facets
maxLength 100
Source
<xs:element name="collectingDeviceDistinctName" type="string100" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Name of device that collected information</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / typeOfComponent
Namespace urn:us:mil:ces:metadata:domex
Annotations
Derived data or original data (scan of paper versus image of hard drive)
Diagram
Diagram DOMEX_xsd_Simple_Type_string256.tmp#urn_us_mil_ces_metadata_domex_string256
Type string256
Properties
content simple
Facets
maxLength 256
Source
<xs:element name="typeOfComponent" type="string256">
  <xs:annotation>
    <xs:documentation>Derived data or original data (scan of paper versus image of hard drive)</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / exploitationResultsClassification
Namespace urn:us:mil:ces:metadata:domex
Annotations
The cumulative classification that is evaluated and derived upon review by analysts.
Diagram
Diagram DDMS-Includes_xsd_Attribute_Group_SecurityAttributesGroup.tmp#SecurityAttributesGroup DOMEX_xsd_Complex_Type_ExploitationResultsClassificationType.tmp#ExploitationResultsClassificationType
Type ExploitationResultsClassificationType
Properties
content complex
Attributes
QName Type Use Annotation
SchemaguideSecurityAttributesGroup xsd:NMTOKEN optional
This attribute is only a placeholder so that all the ISM attributes are not shown in the schemaGuide for every element. If you refer to the documentation of the attribute group it will say what attributes should be here.
Source
<xs:element name="exploitationResultsClassification" type="ExploitationResultsClassificationType">
  <xs:annotation>
    <xs:documentation>The cumulative classification that is evaluated and derived upon review by analysts.</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / deviceImage
Namespace urn:us:mil:ces:metadata:domex
Annotations
An image or copy made of a media device
Diagram
Diagram DDMS-Includes_xsd_Attribute_Group_SecurityAttributesGroup.tmp#SecurityAttributesGroup DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_nameOfDeviceImageFile DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_mediaType DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_collectionIDNumber DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_dateImaged DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_typeOfComponent DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_deviceImageResultsClassification DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_priorityOfComponent DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_imageHashDigest DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_sourceHashDigest DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_imageSize DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_imageType DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType_isImageLocked DOMEX_xsd_Complex_Type_DeviceImageType.tmp#DeviceImageType
Type DeviceImageType
Properties
content complex
minOccurs 0
Model
Children collectionIDNumber , dateImaged , deviceImageResultsClassification , imageHashDigest , imageSize , imageType , isImageLocked , mediaType , nameOfDeviceImageFile , priorityOfComponent , sourceHashDigest , typeOfComponent
Instance
<deviceImage SchemaguideSecurityAttributesGroup="" xmlns="urn:us:mil:ces:metadata:domex">
  <nameOfDeviceImageFile>{1,1}</nameOfDeviceImageFile>
  <mediaType>{1,1}</mediaType>
  <collectionIDNumber>{1,1}</collectionIDNumber>
  <dateImaged>{1,1}</dateImaged>
  <typeOfComponent>{1,1}</typeOfComponent>
  <deviceImageResultsClassification SchemaguideSecurityAttributesGroup="">{1,1}</deviceImageResultsClassification>
  <priorityOfComponent>{1,1}</priorityOfComponent>
  <imageHashDigest type="">{1,unbounded}</imageHashDigest>
  <sourceHashDigest type="">{1,unbounded}</sourceHashDigest>
  <imageSize type="">{1,1}</imageSize>
  <imageType>{1,1}</imageType>
  <isImageLocked>{1,1}</isImageLocked>
</deviceImage>
Attributes
QName Type Use Annotation
SchemaguideSecurityAttributesGroup xsd:NMTOKEN optional
This attribute is only a placeholder so that all the ISM attributes are not shown in the schemaGuide for every element. If you refer to the documentation of the attribute group it will say what attributes should be here.
Source
<xs:element name="deviceImage" type="DeviceImageType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>An image or copy made of a media device</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / dispositionOfOriginalSource
Namespace urn:us:mil:ces:metadata:domex
Annotations
Location of the original media
Diagram
Diagram DOMEX_xsd_Simple_Type_string256.tmp#urn_us_mil_ces_metadata_domex_string256
Type string256
Properties
content simple
minOccurs 0
Facets
maxLength 256
Source
<xs:element name="dispositionOfOriginalSource" type="string256" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Location of the original media</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / firmware
Namespace urn:us:mil:ces:metadata:domex
Annotations
The firmware embedded in the media device.
Diagram
Diagram DOMEX_xsd_Complex_Type_FirmwareType.tmp#FirmwareType_manufacturer DOMEX_xsd_Complex_Type_FirmwareType.tmp#FirmwareType_partNumber DOMEX_xsd_Complex_Type_FirmwareType.tmp#FirmwareType_versionOrRelease DOMEX_xsd_Complex_Type_FirmwareType.tmp#FirmwareType_biosDateAndTime DOMEX_xsd_Complex_Type_FirmwareType.tmp#FirmwareType_actualDateAndTime DOMEX_xsd_Complex_Type_FirmwareType.tmp#FirmwareType
Type FirmwareType
Properties
content complex
minOccurs 0
Model
Children actualDateAndTime , biosDateAndTime , manufacturer , partNumber , versionOrRelease
Instance
<firmware xmlns="urn:us:mil:ces:metadata:domex">
  <manufacturer>{0,1}</manufacturer>
  <partNumber>{0,1}</partNumber>
  <versionOrRelease>{0,1}</versionOrRelease>
  <biosDateAndTime>{0,1}</biosDateAndTime>
  <actualDateAndTime>{0,1}</actualDateAndTime>
</firmware>
Source
<xs:element name="firmware" type="FirmwareType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The firmware embedded in the media device.</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / mediaSize
Namespace urn:us:mil:ces:metadata:domex
Annotations
Media size as stated on device label, etc.
Diagram
Diagram DOMEX_xsd_Simple_Type_string50.tmp#urn_us_mil_ces_metadata_domex_string50
Type string50
Properties
content simple
minOccurs 0
Facets
maxLength 50
Source
<xs:element name="mediaSize" type="string50" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Media size as stated on device label, etc.</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / manufacturer
Namespace urn:us:mil:ces:metadata:domex
Annotations
Device manufacturer
Diagram
Diagram DOMEX_xsd_Simple_Type_string256.tmp#urn_us_mil_ces_metadata_domex_string256
Type string256
Properties
content simple
minOccurs 0
Facets
maxLength 256
Source
<xs:element name="manufacturer" type="string256" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Device manufacturer</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / modelNumber
Namespace urn:us:mil:ces:metadata:domex
Annotations
Device model number
Diagram
Diagram DOMEX_xsd_Simple_Type_string100.tmp#string100
Type string100
Properties
content simple
minOccurs 0
Facets
maxLength 100
Source
<xs:element name="modelNumber" type="string100" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Device model number</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / sourceManufacturer
Namespace urn:us:mil:ces:metadata:domex
Annotations
Media manufacturer
Diagram
Diagram DOMEX_xsd_Simple_Type_string256.tmp#urn_us_mil_ces_metadata_domex_string256
Type string256
Properties
content simple
minOccurs 0
Facets
maxLength 256
Source
<xs:element name="sourceManufacturer" type="string256" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Media manufacturer</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / machineSid
Namespace urn:us:mil:ces:metadata:domex
Annotations
The Machine SID is used to identify a computer on a network under Windows operating system. The machine SID is stored in the SECURITY registry hive located at SECURITY\SAM\Domains\Account, this key has two values F and V. The V value is a binary value that has the computer SID embedded within it at the end of its data (last 96 bits). The format of these IDs are as follows: SID: S-1-5-21-108503121-1563985344-725345543 S - SID Label 1 - SID Version 5 - The identifier authority value 21-3623811015-3361044348-30300820 - domain or local computer value.
Diagram
Diagram DOMEX_xsd_Simple_Type_string100.tmp#string100
Type string100
Properties
content simple
minOccurs 0
Facets
maxLength 100
Source
<xs:element name="machineSid" type="string100" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Machine SID is used to identify a computer on a network under Windows operating system. The machine SID is stored in the SECURITY registry hive located at SECURITY\SAM\Domains\Account, this key has two values F and V. The V value is a binary value that has the computer SID embedded within it at the end of its data (last 96 bits). The format of these IDs are as follows: SID: S-1-5-21-108503121-1563985344-725345543 S - SID Label 1 - SID Version 5 - The identifier authority value 21-3623811015-3361044348-30300820 - domain or local computer value.</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / volumeId
Namespace urn:us:mil:ces:metadata:domex
Annotations
Semi-unique number associated with a device when formatted.
Diagram
Diagram DOMEX_xsd_Simple_Type_string100.tmp#string100
Type string100
Properties
content simple
minOccurs 0
Facets
maxLength 100
Source
<xs:element name="volumeId" type="string100" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Semi-unique number associated with a device when formatted.</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / processingSite
Namespace urn:us:mil:ces:metadata:domex
Annotations
Location where media was first imaged or forensically processed
Diagram
Diagram DOMEX_xsd_Simple_Type_string256.tmp#urn_us_mil_ces_metadata_domex_string256
Type string256
Properties
content simple
minOccurs 0
Facets
maxLength 256
Source
<xs:element name="processingSite" type="string256" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Location where media was first imaged or forensically processed</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / contactInformation
Namespace urn:us:mil:ces:metadata:domex
Annotations
Contact information of who processed media
Diagram
Diagram DOMEX_xsd_Simple_Type_string400.tmp#string400
Type string400
Properties
content simple
minOccurs 0
Facets
maxLength 400
Source
<xs:element name="contactInformation" type="string400" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Contact information of who processed media</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / toolsOrProcessesUsed
Namespace urn:us:mil:ces:metadata:domex
Annotations
Tools/processes used in processing media
Diagram
Diagram DOMEX_xsd_Simple_Type_string256.tmp#urn_us_mil_ces_metadata_domex_string256
Type string256
Properties
content simple
minOccurs 0
Facets
maxLength 256
Source
<xs:element name="toolsOrProcessesUsed" type="string256" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Tools/processes used in processing media</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / typeOfSystemForensicallyPureImageCreated
Namespace urn:us:mil:ces:metadata:domex
Annotations
Type of System where Forensically Pure Image was Created
Diagram
Diagram DOMEX_xsd_Simple_Type_string256.tmp#urn_us_mil_ces_metadata_domex_string256
Type string256
Properties
content simple
minOccurs 0
Facets
maxLength 256
Source
<xs:element name="typeOfSystemForensicallyPureImageCreated" type="string256" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Type of System where Forensically Pure Image was Created</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / softwareUsedToProcessType
Namespace urn:us:mil:ces:metadata:domex
Annotations
Software used to process forensically pure image
Diagram
Diagram DOMEX_xsd_Simple_Type_string256.tmp#urn_us_mil_ces_metadata_domex_string256
Type string256
Properties
content simple
minOccurs 0
Facets
maxLength 256
Source
<xs:element name="softwareUsedToProcessType" type="string256" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Software used to process forensically pure image</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / versioningOfSoftware
Namespace urn:us:mil:ces:metadata:domex
Annotations
Versioning of software used to process forensically pure image
Diagram
Diagram DOMEX_xsd_Simple_Type_string50.tmp#urn_us_mil_ces_metadata_domex_string50
Type string50
Properties
content simple
minOccurs 0
Facets
maxLength 50
Source
<xs:element name="versioningOfSoftware" type="string50" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Versioning of software used to process forensically pure image</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / explanationOfProcess
Namespace urn:us:mil:ces:metadata:domex
Annotations
Explanation of forensically pure image creation process
Diagram
Diagram DOMEX_xsd_Simple_Type_string256.tmp#urn_us_mil_ces_metadata_domex_string256
Type string256
Properties
content simple
minOccurs 0
Facets
maxLength 256
Source
<xs:element name="explanationOfProcess" type="string256" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Explanation of forensically pure image creation process</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / isDamaged
Namespace urn:us:mil:ces:metadata:domex
Annotations
A binary flag indicating that a device is damaged
Diagram
Diagram
Type xs:boolean
Properties
content simple
minOccurs 0
Source
<xs:element name="isDamaged" type="xs:boolean" minOccurs="0">
  <xs:annotation>
    <xs:documentation>A binary flag indicating that a device is damaged</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / repairsPerformedBy
Namespace urn:us:mil:ces:metadata:domex
Annotations
Person Description of repairs performed on damaged device
Diagram
Diagram DOMEX_xsd_Simple_Type_string256.tmp#urn_us_mil_ces_metadata_domex_string256
Type string256
Properties
content simple
minOccurs 0
Facets
maxLength 256
Source
<xs:element name="repairsPerformedBy" type="string256" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Person Description of repairs performed on damaged device</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / relationshipOfMultipleImagesToSingleDocument
Namespace urn:us:mil:ces:metadata:domex
Annotations
Relationship of multiple images to single document
Diagram
Diagram DOMEX_xsd_Simple_Type_string4000.tmp#string4000
Type string4000
Properties
content simple
minOccurs 0
Facets
maxLength 4000
Source
<xs:element name="relationshipOfMultipleImagesToSingleDocument" type="string4000" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Relationship of multiple images to single document</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / numberOfFiles
Namespace urn:us:mil:ces:metadata:domex
Annotations
Number of videos/audio files/pictures on the device.
Diagram
Diagram DOMEX_xsd_Complex_Type_NumberOfFilesType.tmp#NumberOfFilesType_type DOMEX_xsd_Complex_Type_NumberOfFilesType.tmp#NumberOfFilesType
Type NumberOfFilesType
Properties
content complex
minOccurs 0
maxOccurs 3
Attributes
QName Type Use
type CVEnumDOMEXNumberOfFilesTypeType required
Source
<xs:element name="numberOfFiles" type="NumberOfFilesType" minOccurs="0" maxOccurs="3">
  <xs:annotation>
    <xs:documentation>Number of videos/audio files/pictures on the device.</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / cableReferenceMessageTrafficID
Namespace urn:us:mil:ces:metadata:domex
Annotations
Cable/Reference/Message Traffic ID
Diagram
Diagram DOMEX_xsd_Simple_Type_string100.tmp#string100
Type string100
Properties
content simple
minOccurs 0
Facets
maxLength 100
Source
<xs:element name="cableReferenceMessageTrafficID" type="string100" minOccurs="0">
  <xs:annotation>
    <xs:documentation>Cable/Reference/Message Traffic ID</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / activity
Namespace urn:us:mil:ces:metadata:domex
Annotations
Supports the ability to perform collection, media, and document similarity classification.
Diagram
Diagram DOMEX_xsd_Complex_Type_ActivityType.tmp#ActivityType_primaryActivity DOMEX_xsd_Complex_Type_ActivityType.tmp#ActivityType_subActivity DOMEX_xsd_Complex_Type_ActivityType.tmp#ActivityType
Type ActivityType
Properties
content complex
minOccurs 0
maxOccurs unbounded
Model
Children primaryActivity , subActivity
Instance
<activity xmlns="urn:us:mil:ces:metadata:domex">
  <primaryActivity>{1,1}</primaryActivity>
  <subActivity>{0,unbounded}</subActivity>
</activity>
Source
<xs:element name="activity" type="ActivityType" minOccurs="0" maxOccurs="unbounded">
  <xs:annotation>
    <xs:documentation>Supports the ability to perform collection, media, and document similarity classification.</xs:documentation>
  </xs:annotation>
</xs:element>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Element mediaDetails / usbDeviceReference
Namespace urn:us:mil:ces:metadata:domex
Diagram
Diagram DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_foundIn DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_serialNumber DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_vendorId DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_vendorName DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_productId DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_productName DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_interfaceId DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_interfaceName DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_version DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_firstConnectTime DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_rebootConnectTime DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_lastConnectTime DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_volumeGuid DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_softwareVersion DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType_driveLetter DOMEX_xsd_Complex_Type_UsbDeviceReferenceType.tmp#UsbDeviceReferenceType
Type UsbDeviceReferenceType
Properties
content complex
minOccurs 0
maxOccurs unbounded
Model
Children driveLetter , firstConnectTime , interfaceId , interfaceName , lastConnectTime , productId , productName , rebootConnectTime , serialNumber , softwareVersion , vendorId , vendorName , version , volumeGuid
Instance
<usbDeviceReference foundIn="" xmlns="urn:us:mil:ces:metadata:domex">
  <serialNumber>{1,1}</serialNumber>
  <vendorId>{1,1}</vendorId>
  <vendorName>{1,1}</vendorName>
  <productId>{1,1}</productId>
  <productName>{1,1}</productName>
  <interfaceId>{0,1}</interfaceId>
  <interfaceName>{0,1}</interfaceName>
  <version>{1,1}</version>
  <firstConnectTime>{1,1}</firstConnectTime>
  <rebootConnectTime>{1,1}</rebootConnectTime>
  <lastConnectTime>{1,1}</lastConnectTime>
  <volumeGuid>{1,1}</volumeGuid>
  <softwareVersion>{1,1}</softwareVersion>
  <driveLetter>{1,1}</driveLetter>
</usbDeviceReference>
Attributes
QName Type Use
foundIn xs:string optional
Source
<xs:element name="usbDeviceReference" type="UsbDeviceReferenceType" minOccurs="0" maxOccurs="unbounded"/>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Attribute mediaDetails / @uuid
Namespace urn:us:mil:ces:metadata:domex
Type UuidType
Properties
use optional
Facets
pattern [0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{16}
Used by
Element mediaDetails
Source
<xs:attribute name="uuid" type="UuidType" use="optional"/>
Schema location DOMEX.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.

This document has been approved for Public Release by the Office of the Director of National Intelligence. See Distribution Notice for details. Click Here