Sleuth Kit Java Bindings (JNI)  4.11.0
Java bindings for using The Sleuth Kit
org.sleuthkit.datamodel.blackboardutils.ArtifactsHelper Class Reference

Inherits org.sleuthkit.datamodel.blackboardutils.ArtifactHelperBase.

Public Member Functions

 ArtifactsHelper (SleuthkitCase caseDb, String moduleName, Content srcContent)
 
BlackboardArtifact addInstalledProgram (String programName, long dateInstalled) throws TskCoreException, BlackboardException
 
BlackboardArtifact addInstalledProgram (String programName, long dateInstalled, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException
 

Detailed Description

This class helps ingest modules create miscellaneous artifacts.

Definition at line 39 of file ArtifactsHelper.java.

Constructor & Destructor Documentation

org.sleuthkit.datamodel.blackboardutils.ArtifactsHelper.ArtifactsHelper ( SleuthkitCase  caseDb,
String  moduleName,
Content  srcContent 
)

Creates an artifact helper for modules to create artifacts.

Parameters
caseDbSleuthkit case database.
moduleNameName of module using the helper.
srcContentSource content for the artifacts.

Definition at line 50 of file ArtifactsHelper.java.

Member Function Documentation

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.ArtifactsHelper.addInstalledProgram ( String  programName,
long  dateInstalled 
) throws TskCoreException, BlackboardException

Adds a TSK_INSTALLED_PROGRAM artifact.

Parameters
programNameName of program, required.
dateInstalledDate/time of install, can be 0 if not available.
Returns
Installed program artifact added.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 65 of file ArtifactsHelper.java.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.ArtifactsHelper.addInstalledProgram ( String  programName,
long  dateInstalled,
Collection< BlackboardAttribute otherAttributesList 
) throws TskCoreException, BlackboardException

Adds a TSK_INSTALLED_PROGRAM artifact.

Parameters
programNameName of program, required.
dateInstalledDate/time of install, can be 0 if not available.
otherAttributesListAdditional attributes, can be an empty list if no additional attributes.
Returns
Installed program artifact added.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 84 of file ArtifactsHelper.java.

References org.sleuthkit.datamodel.Content.newDataArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME, and org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME.


The documentation for this class was generated from the following file:

Copyright © 2011-2021 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.