|
The Sleuth Kit Framework
4.1
|
Class that represents a blackboard artifact object. More...
#include <TskBlackboardArtifact.h>
Public Member Functions | |
| void | addAttribute (TskBlackboardAttribute &attr) |
| Add an attribute to this artifact. More... | |
| uint64_t | getArtifactID () const |
| Get the artifact id for this artifact. More... | |
| int | getArtifactTypeID () const |
| Get the artifact type id for this artifact. More... | |
| string | getArtifactTypeName () const |
| Get the artifact type name for this artifact. More... | |
| vector< TskBlackboardAttribute > | getAttributes () const |
| Get all attributes associated with this artifact. More... | |
| string | getDisplayName () const |
| Get the display name for this artifact. More... | |
| uint64_t | getObjectID () const |
| Get the object id for this artifact. More... | |
| ~TskBlackboardArtifact () | |
| Default destructor. | |
Protected Member Functions | |
| TskBlackboardArtifact (const uint64_t artifactID, const uint64_t objID, const int artifactTypeID) | |
| Constructor. More... | |
Friends | |
| class | TskBlackboard |
| class | TskFile |
| class | TskImgDB |
Class that represents a blackboard artifact object.
|
protected |
Constructor.
| artifactID | artifact id |
| objID | object id |
| artifactTypeID | arifact type id |
| void TskBlackboardArtifact::addAttribute | ( | TskBlackboardAttribute & | attr) |
Add an attribute to this artifact.
| attr | attribute to be added |
| attr | attribute to be added |
| error | if the given attribute has a bad type |
References TskBlackboardAttribute::setArtifactID(), and TskBlackboardAttribute::setObjectID().
Referenced by TskFile::addGenInfoAttribute().
| uint64_t TskBlackboardArtifact::getArtifactID | ( | ) | const |
Get the artifact id for this artifact.
Get the artifact id.
| int TskBlackboardArtifact::getArtifactTypeID | ( | ) | const |
Get the artifact type id for this artifact.
Get the artifact type id.
| string TskBlackboardArtifact::getArtifactTypeName | ( | ) | const |
Get the artifact type name for this artifact.
Get the artifact type name.
| vector< TskBlackboardAttribute > TskBlackboardArtifact::getAttributes | ( | ) | const |
Get all attributes associated with this artifact.
| string TskBlackboardArtifact::getDisplayName | ( | ) | const |
Get the display name for this artifact.
Get the display name.
| uint64_t TskBlackboardArtifact::getObjectID | ( | ) | const |
Get the object id for this artifact.
Get the object id.
Copyright © 2011-2013 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.