Sleuth Kit Java Bindings (JNI)  4.11.0
Java bindings for using The Sleuth Kit
org.sleuthkit.datamodel.OSInfo Class Reference

Public Member Functions

 OSInfo ()
 
 OSInfo (BlackboardArtifact a_art, boolean a_isBackup, long a_fileSystemId, Content a_parent) throws TskCoreException
 
 OSInfo (BlackboardArtifact a_art, boolean a_isBackup, Content a_parent) throws TskCoreException
 
void combine (OSInfo a_osInfo)
 
List< BlackboardArtifactgetArtifacts ()
 
String getAttributeValue (ATTRIBUTE_TYPE attrType)
 
String getCompName ()
 
String getDomain ()
 
long getFileSystemId ()
 
boolean getIsBackup ()
 
String getOSName ()
 
String getProcessorArchitecture ()
 
boolean haveFileSystem ()
 
boolean matches (OSInfo a_osInfo)
 

Detailed Description

Utility class to hold information from OS Info artifacts

Definition at line 31 of file OSInfo.java.

Constructor & Destructor Documentation

org.sleuthkit.datamodel.OSInfo.OSInfo ( )

Definition at line 41 of file OSInfo.java.

org.sleuthkit.datamodel.OSInfo.OSInfo ( BlackboardArtifact  a_art,
boolean  a_isBackup,
long  a_fileSystemId,
Content  a_parent 
) throws TskCoreException

Initialize an OSInfo object

Parameters
a_art- OSInfo artifact associated with one registry hive
a_isBackup- True if the registry hive was found in a "RegBack" directory
a_fileSystemId- File system ID for FS containing the registry hive
a_parent- Parent directory containing the registry hive. Can be null
Exceptions
TskCoreException

Definition at line 64 of file OSInfo.java.

org.sleuthkit.datamodel.OSInfo.OSInfo ( BlackboardArtifact  a_art,
boolean  a_isBackup,
Content  a_parent 
) throws TskCoreException

Initialize an OSInfo object (without file system information)

Parameters
a_art- OSInfo artifact associated with one registry hive
a_isBackup- True if the registry hive was found in a "RegBack" directory
a_parent- Parent directory containing the registry hive. Can be null
Exceptions
TskCoreException

Definition at line 95 of file OSInfo.java.

Member Function Documentation

void org.sleuthkit.datamodel.OSInfo.combine ( OSInfo  a_osInfo)

Combine the attribute map for two OSInfo objects.

Parameters
a_osInfo- The OSInfo object to combine with

Definition at line 145 of file OSInfo.java.

List<BlackboardArtifact> org.sleuthkit.datamodel.OSInfo.getArtifacts ( )

Definition at line 150 of file OSInfo.java.

String org.sleuthkit.datamodel.OSInfo.getAttributeValue ( ATTRIBUTE_TYPE  attrType)
String org.sleuthkit.datamodel.OSInfo.getCompName ( )
String org.sleuthkit.datamodel.OSInfo.getDomain ( )
long org.sleuthkit.datamodel.OSInfo.getFileSystemId ( )

Definition at line 158 of file OSInfo.java.

boolean org.sleuthkit.datamodel.OSInfo.getIsBackup ( )

Definition at line 162 of file OSInfo.java.

String org.sleuthkit.datamodel.OSInfo.getOSName ( )
String org.sleuthkit.datamodel.OSInfo.getProcessorArchitecture ( )
boolean org.sleuthkit.datamodel.OSInfo.haveFileSystem ( )

Definition at line 154 of file OSInfo.java.

boolean org.sleuthkit.datamodel.OSInfo.matches ( OSInfo  a_osInfo)

Determine whether two OSInfo objects should be combined.

Parameters
a_osInfo- the OSInfo object to compare against
Returns

Definition at line 121 of file OSInfo.java.


The documentation for this class was generated from the following file:

Copyright © 2011-2021 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.