{
  "code": null,
  "collection": "lexicon",
  "href": "https://banes-lab.com/ontology/lexicon#lexicon-forensics",
  "id": "forensics",
  "kind": "capability",
  "layer": {
    "href": "https://banes-lab.com/ontology/schema#layer-observability",
    "json": "https://banes-lab.com/json/records/layer/observability",
    "label": "Observability",
    "markdown": "https://banes-lab.com/records/layer/observability.md",
    "ref": "layer:observability"
  },
  "name": "Forensics",
  "ref": "lexicon:forensics",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-observability-auditability-traceability",
          "json": "https://banes-lab.com/json/records/lexicon-category/observability-auditability-traceability",
          "label": "Observability / Auditability / Traceability",
          "markdown": "https://banes-lab.com/records/lexicon-category/observability-auditability-traceability.md",
          "ref": "lexicon-category:observability-auditability-traceability"
        }
      ],
      "relation": "category"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-audit-logging",
          "json": "https://banes-lab.com/json/records/architecture/audit-logging",
          "label": "Audit Logging",
          "markdown": "https://banes-lab.com/records/architecture/audit-logging.md",
          "ref": "architecture:audit-logging"
        }
      ],
      "relation": "enabled-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-observability-auditability-traceability",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-observability-auditability-traceability",
          "label": "Observability / Auditability / Traceability",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-observability-auditability-traceability.md",
          "ref": "chapter:/ontology#architecture-category-observability-auditability-traceability"
        }
      ],
      "relation": "linked-from"
    }
  ],
  "summary": "The ability to reconstruct after the fact what happened from an immutable audit record.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology/lexicon#lexicon-privacy",
      "json": "https://banes-lab.com/json/records/lexicon/privacy",
      "label": "Privacy",
      "markdown": "https://banes-lab.com/records/lexicon/privacy.md",
      "ref": "lexicon:privacy"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology/lexicon#lexicon-actor",
      "json": "https://banes-lab.com/json/records/lexicon/actor",
      "label": "Actor",
      "markdown": "https://banes-lab.com/records/lexicon/actor.md",
      "ref": "lexicon:actor"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/lexicon",
    "label": "Lexicon terms",
    "markdown": "https://banes-lab.com/api/records/lexicon.md",
    "ref": "api:records/lexicon"
  },
  "aliases": []
}