Sleuth Kit Java Bindings (JNI)
4.11.0
Java bindings for using The Sleuth Kit
|
Public Member Functions | |
synchronized long | commit () throws TskCoreException |
synchronized String | currentDirectory () |
synchronized void | revert () throws TskCoreException |
void | run (String deviceId, String[] imageFilePaths, int sectorSize) throws TskCoreException, TskDataException |
void | run (String deviceId, Image image, int sectorSize, AddDataSourceCallbacks addDataSourceCallbacks) throws TskCoreException, TskDataException |
void | run (String[] imageFilePaths) throws TskCoreException, TskDataException |
void | run (String deviceId, String[] imageFilePaths) throws TskCoreException, TskDataException |
synchronized void | stop () throws TskCoreException |
Encapsulates a multi-step process to add an image to the case database.
Definition at line 490 of file SleuthkitJNI.java.
synchronized long org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.commit | ( | ) | throws TskCoreException |
This no longer needs to be called. Will simply return the object ID of the new image.
TskCoreException | if a critical error occurs within the SleuthKit. |
Definition at line 666 of file SleuthkitJNI.java.
synchronized String org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.currentDirectory | ( | ) |
Gets the file system directory currently being processed by the SleuthKit.
Definition at line 676 of file SleuthkitJNI.java.
synchronized void org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.revert | ( | ) | throws TskCoreException |
This no longer needs to be called.
TskCoreException | if a critical error occurs within the SleuthKit. |
Definition at line 650 of file SleuthkitJNI.java.
void org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.run | ( | String | deviceId, |
String[] | imageFilePaths, | ||
int | sectorSize | ||
) | throws TskCoreException, TskDataException |
Starts the process of adding an image to the case database.
deviceId | An ASCII-printable identifier for the device associated with the image that should be unique across multiple cases (e.g., a UUID). |
imageFilePaths | Full path(s) to the image file(s). |
sectorSize | The sector size (use '0' for autodetect). |
TskCoreException | if a critical error occurs within the SleuthKit. |
TskDataException | if a non-critical error occurs within the SleuthKit (should be OK to continue the process) |
Definition at line 542 of file SleuthkitJNI.java.
References org.sleuthkit.datamodel.SleuthkitJNI.addImageToDatabase().
Referenced by org.sleuthkit.datamodel.Examples.Sample.run(), and org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.run().
void org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.run | ( | String | deviceId, |
Image | image, | ||
int | sectorSize, | ||
AddDataSourceCallbacks | addDataSourceCallbacks | ||
) | throws TskCoreException, TskDataException |
Starts the process of adding an image to the case database.
deviceId | An ASCII-printable identifier for the device associated with the image that should be unique across multiple cases (e.g., a UUID). |
image | The image object (has already been added to the database) |
sectorSize | The sector size (no longer used). |
addDataSourceCallbacks | The callbacks to use to send data to ingest (may do nothing). |
TskCoreException | if a critical error occurs within the SleuthKit. |
TskDataException | if a non-critical error occurs within the SleuthKit (should be OK to continue the process) |
Definition at line 564 of file SleuthkitJNI.java.
void org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.run | ( | String[] | imageFilePaths | ) | throws TskCoreException, TskDataException |
Starts the process of adding an image to the case database. Either commit() or revert() MUST be called after calling run().
imageFilePaths | Full path(s) to the image file(s). |
TskCoreException | if a critical error occurs within the SleuthKit. |
TskDataException | if a non-critical error occurs within the SleuthKit (should be OK to continue the process) |
Definition at line 696 of file SleuthkitJNI.java.
References org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.run().
void org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.run | ( | String | deviceId, |
String[] | imageFilePaths | ||
) | throws TskCoreException, TskDataException |
Starts the process of adding an image to the case database.
deviceId | An ASCII-printable identifier for the device associated with the image that should be unique across multiple cases (e.g., a UUID). |
imageFilePaths | Full path(s) to the image file(s). |
TskCoreException | if a critical error occurs within the SleuthKit. |
TskDataException | if a non-critical error occurs within the SleuthKit (should be OK to continue the process) |
Definition at line 715 of file SleuthkitJNI.java.
References org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.run().
synchronized void org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess.stop | ( | ) | throws TskCoreException |
Stops the process of adding the image to the case database that was started by calling AddImageProcess.run. AddImageProcess.revert should be called after calling AddImageProcess.stop.
TskCoreException | if a critical error occurs within the SleuthKit. |
Definition at line 601 of file SleuthkitJNI.java.
Copyright © 2011-2021 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.