Sleuth Kit Java Bindings (JNI)  4.11.0
Java bindings for using The Sleuth Kit
org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE Enum Reference

Inherits org.sleuthkit.datamodel.SleuthkitVisitableItem.

Public Member Functions

public< T > T accept (SleuthkitItemVisitor< T > visitor)
 
Category getCategory ()
 
String getDisplayName ()
 
String getLabel ()
 
int getTypeID ()
 

Static Public Member Functions

static ARTIFACT_TYPE fromID (int id)
 
static ARTIFACT_TYPE fromLabel (String label)
 

Public Attributes

 TSK_ACCOUNT
 
 TSK_ASSOCIATED_OBJECT
 
 TSK_BACKUP_EVENT
 
 TSK_BLUETOOTH_ADAPTER
 
 TSK_BLUETOOTH_PAIRING
 
 TSK_CALENDAR_ENTRY
 
 TSK_CALLLOG
 
 TSK_CLIPBOARD_CONTENT
 
 TSK_CONTACT
 
 TSK_DATA_SOURCE_USAGE
 
 TSK_DELETED_PROG
 
 TSK_DEVICE_ATTACHED
 
 TSK_DEVICE_INFO
 
 TSK_DOWNLOAD_SOURCE
 
 TSK_EMAIL_MSG
 
 TSK_ENCRYPTION_DETECTED
 
 TSK_ENCRYPTION_SUSPECTED
 
 TSK_EXT_MISMATCH_DETECTED
 
 TSK_EXTRACTED_TEXT
 
 TSK_FACE_DETECTED
 
 TSK_GEN_INFO
 
 TSK_GPS_AREA
 
 TSK_GPS_BOOKMARK
 
 TSK_GPS_LAST_KNOWN_LOCATION
 
 TSK_GPS_ROUTE
 
 TSK_GPS_SEARCH
 
 TSK_GPS_TRACK
 
 TSK_GPS_TRACKPOINT
 
 TSK_HASHSET_HIT
 
 TSK_INSTALLED_PROG
 
 TSK_INTERESTING_ARTIFACT_HIT
 
 TSK_INTERESTING_FILE_HIT
 an interesting/notable file hit More...
 
 TSK_KEYWORD_HIT
 
 TSK_MESSAGE
 
 TSK_METADATA
 
 TSK_METADATA_EXIF
 
 TSK_OBJECT_DETECTED
 
 TSK_OS_ACCOUNT
 
 TSK_OS_INFO
 
 TSK_PREVIOUSLY_NOTABLE
 
 TSK_PREVIOUSLY_SEEN
 
 TSK_PREVIOUSLY_UNSEEN
 
 TSK_PROG_NOTIFICATIONS
 
 TSK_PROG_RUN
 
 TSK_RECENT_OBJECT
 
 TSK_REMOTE_DRIVE
 
 TSK_SCREEN_SHOTS
 
 TSK_SERVICE_ACCOUNT
 
 TSK_SIM_ATTACHED
 
 TSK_SPEED_DIAL_ENTRY
 
 TSK_TAG_ARTIFACT
 
 TSK_TAG_FILE
 
 TSK_TL_EVENT
 
 TSK_TOOL_OUTPUT
 
 TSK_USER_CONTENT_SUSPECTED
 
 TSK_USER_DEVICE_EVENT
 
 TSK_VERIFICATION_FAILED
 
 TSK_WEB_ACCOUNT_TYPE
 
 TSK_WEB_BOOKMARK
 
 TSK_WEB_CACHE
 
 TSK_WEB_CATEGORIZATION
 
 TSK_WEB_COOKIE
 
 TSK_WEB_DOWNLOAD
 
 TSK_WEB_FORM_ADDRESS
 
 TSK_WEB_FORM_AUTOFILL
 
 TSK_WEB_HISTORY
 
 TSK_WEB_SEARCH_QUERY
 
 TSK_WIFI_NETWORK
 
 TSK_WIFI_NETWORK_ADAPTER
 
 TSK_YARA_HIT
 

Detailed Description

Enum for the standard artifact types. Refer to http://sleuthkit.org/sleuthkit/docs/jni-docs/latest/artifact_catalog_page.html for details on the standard attributes for each artifact type.

Definition at line 1547 of file BlackboardArtifact.java.

Member Function Documentation

public<T> T org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.accept ( SleuthkitItemVisitor< T >  visitor)

Accepts a visitor SleuthkitItemVisitor that will perform an operation on this artifact type and return some object as the result of the operation.

Parameters
visitorThe visitor, where the type parameter of the visitor is the type of the object that will be returned as the result of the visit operation.
Returns
An object of type T.

Implements org.sleuthkit.datamodel.SleuthkitVisitableItem.

Definition at line 2062 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitItemVisitor< T >.visit().

static ARTIFACT_TYPE org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.fromID ( int  id)
static

Gets the artifact type enum value that corresponds to a given type id. This method should only be used when the id is known to be one of the built-in types - otherwise use getArtifactType() in SleuthkitCase.

Parameters
idThe type id.
Returns
the corresponding enum

Definition at line 2032 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTypesInUse(), and org.sleuthkit.datamodel.BlackboardArtifact.getShortDescription().

static ARTIFACT_TYPE org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.fromLabel ( String  label)
static

Gets the standard artifact type enum value that corresponds to a given type name (label).

Parameters
labelThe type name
Returns
The enum element.

Definition at line 2013 of file BlackboardArtifact.java.

Category org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getCategory ( )

Gets the type category for this standard artifact type.

Returns
The type category.

Definition at line 2001 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getDisplayName ( )

Gets the display name of this standard artifact type.

Returns
The display name.

Definition at line 2046 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getLabel ( )

Gets the type name (label) for this standard artifact type.

Returns
The type name.

Definition at line 1992 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

int org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getTypeID ( )

Gets the type id for this standard artifact type.

Returns
type id

Definition at line 1983 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTypesInUse(), and org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

Member Data Documentation

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ACCOUNT
Initial value:
=(39, "TSK_ACCOUNT",
bundle.getString("BlackboardArtifact.tskAccount.text"), Category.DATA_ARTIFACT)

An account.

Definition at line 1776 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.CommunicationsManager.getAccountFileInstances().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ASSOCIATED_OBJECT
Initial value:
=(55, "TSK_ASSOCIATED_OBJECT",
bundle.getString("BlackboardArtifact.tskAssociatedObject.text"), Category.DATA_ARTIFACT)

An associated object.

Definition at line 1864 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BACKUP_EVENT
Initial value:
=(63, "TSK_BACKUP_EVENT",
bundle.getString("BlackboardArtifact.tskBackupEvent.text"), Category.DATA_ARTIFACT)

System/Application/File backup.

Definition at line 1901 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_ADAPTER
Initial value:
=(45, "TSK_BLUETOOTH_ADAPTER",
bundle.getString("BlackboardArtifact.tskBluetoothAdapter.text"), Category.DATA_ARTIFACT)

A bluetooth adapter.

Definition at line 1806 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_PAIRING
Initial value:
=(28, "TSK_BLUETOOTH_PAIRING",
bundle.getString("BlackboardArtifact.tskBluetoothPairing.text"), Category.DATA_ARTIFACT)

A bluetooth pairing entry.

Definition at line 1718 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALENDAR_ENTRY
Initial value:
=(26, "TSK_CALENDAR_ENTRY",
bundle.getString("BlackboardArtifact.tskCalendarEntry.text"), Category.DATA_ARTIFACT)

A calendar entry from a phone, PIM, or a calendar application.

Definition at line 1708 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALLLOG
Initial value:
=(25, "TSK_CALLLOG",
bundle.getString("BlackboardArtifact.tskCalllog.text"), Category.DATA_ARTIFACT)

A phone call log extracted from a phone or softphone application. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create call log artifacts.

Definition at line 1703 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CLIPBOARD_CONTENT
Initial value:
=(54, "TSK_CLIPBOARD_CONTENT",
bundle.getString("BlackboardArtifact.tskClipboardContent.text"), Category.DATA_ARTIFACT)

Indicates clipboard content

Definition at line 1859 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CONTACT
Initial value:
=(23, "TSK_CONTACT",
bundle.getString("BlackboardArtifact.tskContact.text"), Category.DATA_ARTIFACT)

A contact extracted from a phone, or from an address book/email/messaging application. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create contact artifacts.

Definition at line 1687 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DATA_SOURCE_USAGE
Initial value:
=(48, "TSK_DATA_SOURCE_USAGE",
bundle.getString("BlackboardArtifact.tskDataSourceUsage.text"), Category.ANALYSIS_RESULT)

Categorization information for a data source.

Definition at line 1821 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DELETED_PROG
Initial value:
=(64, "TSK_DELETED_PROG",
bundle.getString("BlackboardArtifact.tskDeletedProg.text"), Category.DATA_ARTIFACT)

Programs that have been deleted.

Definition at line 1906 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_ATTACHED
Initial value:
=(11, "TSK_DEVICE_ATTACHED",
bundle.getString("BlackboardArtifact.tskDeviceAttached.text"), Category.DATA_ARTIFACT)

An attached device.

Definition at line 1613 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_INFO
Initial value:
=(43, "TSK_DEVICE_INFO",
bundle.getString("BlackboardArtifact.tskDeviceInfo.text"), Category.DATA_ARTIFACT)

Information related to a device.

Definition at line 1796 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DOWNLOAD_SOURCE
Initial value:
=(51, "TSK_DOWNLOAD_SOURCE",
bundle.getString("BlackboardArtifact.tskDownloadSource.text"), Category.DATA_ARTIFACT)

Indicates source of a file/object

Deprecated:
TSK_ASSOCIATED_OBJECT should be used instead to associate the file/object with its source artifact/object..

Definition at line 1844 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EMAIL_MSG
Initial value:
=(13, "TSK_EMAIL_MSG",
bundle.getString("BlackboardArtifact.tskEmailMsg.text"), Category.DATA_ARTIFACT)

An email message.

Definition at line 1624 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_DETECTED
Initial value:
=(33, "TSK_ENCRYPTION_DETECTED",
bundle.getString("BlackboardArtifact.tskEncryptionDetected.text"), Category.ANALYSIS_RESULT)

An encrypted file.

Definition at line 1743 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_SUSPECTED
Initial value:
=(40, "TSK_ENCRYPTION_SUSPECTED",
bundle.getString("BlackboardArtifact.tskEncryptionSuspected.text"), Category.ANALYSIS_RESULT)

An encrypted file.

Definition at line 1781 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EXT_MISMATCH_DETECTED
Initial value:
=(34, "TSK_EXT_MISMATCH_DETECTED",
bundle.getString("BlackboardArtifact.tskExtMismatchDetected.text"), Category.ANALYSIS_RESULT)

A file with an extension that does not match its MIME type.

Definition at line 1748 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EXTRACTED_TEXT
Initial value:
=(14, "TSK_EXTRACTED_TEXT",
bundle.getString("BlackboardArtifact.tskExtractedText.text"), Category.DATA_ARTIFACT)

Text extracted from the source content.

Definition at line 1629 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_FACE_DETECTED
Initial value:
=(38, "TSK_FACE_DETECTED",
bundle.getString("BlackboardArtifact.tskFaceDetected.text"), Category.ANALYSIS_RESULT)

A human face was detected in a media file.

Definition at line 1771 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GEN_INFO
Initial value:
=(1, "TSK_GEN_INFO",
bundle.getString("BlackboardArtifact.tskGenInfo.text"), Category.DATA_ARTIFACT)

A generic information artifact.

Definition at line 1552 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.AbstractContent.getArtifacts(), org.sleuthkit.datamodel.AbstractContent.getGenInfoArtifact(), and org.sleuthkit.datamodel.AbstractContent.newArtifact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_AREA
Initial value:
=(67, "TSK_GPS_AREA",
bundle.getString("BlackboardArtifact.tskGPSArea.text"), Category.DATA_ARTIFACT)

Stores the outline of an area using GPS coordinates.

Definition at line 1921 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_BOOKMARK
Initial value:
=(29, "TSK_GPS_BOOKMARK",
bundle.getString("BlackboardArtifact.tskGpsBookmark.text"), Category.DATA_ARTIFACT)

A GPS bookmark / way point that the user saved.

Definition at line 1723 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_LAST_KNOWN_LOCATION
Initial value:
=(30, "TSK_GPS_LAST_KNOWN_LOCATION",
bundle.getString("BlackboardArtifact.tskGpsLastKnownLocation.text"), Category.DATA_ARTIFACT)

A GPS last known location record.

Definition at line 1728 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_ROUTE
Initial value:
=(36, "TSK_GPS_ROUTE",
bundle.getString("BlackboardArtifact.tskGpsRoute.text"), Category.DATA_ARTIFACT)

A route based on GPS coordinates. Use org.sleuthkit.datamodel.blackboardutils.GeoArtifactsHelper.addRoute() to create route artifacts.

Definition at line 1761 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_SEARCH
Initial value:
=(31, "TSK_GPS_SEARCH",
bundle.getString("BlackboardArtifact.tskGpsSearch.text"), Category.DATA_ARTIFACT)

A GPS search record.

Definition at line 1733 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_TRACK
Initial value:
=(58, "TSK_GPS_TRACK",
bundle.getString("BlackboardArtifact.tskTrack.text"), Category.DATA_ARTIFACT)

Stores a GPS track log. Use org.sleuthkit.datamodel.blackboardutils.GeoArtifactsHelper.addTrack() to create track artifacts.

Definition at line 1881 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_TRACKPOINT
Initial value:
=(7, "TSK_GPS_TRACKPOINT",
bundle.getString("BlackboardArtifact.tskGpsTrackpoint.text"), Category.DATA_ARTIFACT)

A GPS track point (geolocation data).

Deprecated:
Use TSK_GPS_TRACK instead

Definition at line 1593 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_HASHSET_HIT
Initial value:
=(10, "TSK_HASHSET_HIT",
bundle.getString("BlackboardArtifact.tskHashsetHit.text"), Category.ANALYSIS_RESULT)

A hit for a hash set (hash database).

Definition at line 1608 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.AbstractContent.getHashSetNames().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INSTALLED_PROG
Initial value:
=(8, "TSK_INSTALLED_PROG",
bundle.getString("BlackboardArtifact.tskInstalledProg.text"), Category.DATA_ARTIFACT)

An installed program.

Definition at line 1598 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_ARTIFACT_HIT
Initial value:
=(35, "TSK_INTERESTING_ARTIFACT_HIT",
bundle.getString("BlackboardArtifact.tskInterestingArtifactHit.text"), Category.ANALYSIS_RESULT)

An meta-artifact to call attention to an artifact deemed to be interesting.

Definition at line 1754 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT
Initial value:
=(12, "TSK_INTERESTING_FILE_HIT",
bundle.getString("BlackboardArtifact.tskInterestingFileHit.text"), Category.ANALYSIS_RESULT)

an interesting/notable file hit

An meta-artifact to call attention to a file deemed to be interesting.

Definition at line 1619 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT
Initial value:
=(9, "TSK_KEYWORD_HIT",
bundle.getString("BlackboardArtifact.tskKeywordHits.text"), Category.ANALYSIS_RESULT)

A search hit for a keyword.

Definition at line 1603 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.Report.getArtifacts(), org.sleuthkit.datamodel.Report.getArtifactsCount(), org.sleuthkit.datamodel.Report.newArtifact(), and org.sleuthkit.datamodel.Report.newDataArtifact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_MESSAGE
Initial value:
=(24, "TSK_MESSAGE",
bundle.getString("BlackboardArtifact.tskMessage.text"), Category.DATA_ARTIFACT)

An SMS/MMS message extracted from phone, or from another messaging application, like IM. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create message artifacts.

Definition at line 1695 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA
Initial value:
=(57, "TSK_METADATA",
bundle.getString("BlackboardArtifact.tskMetadata.text"), Category.DATA_ARTIFACT)

Stores metadata about an object.

Definition at line 1874 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA_EXIF
Initial value:
=(16, "TSK_METADATA_EXIF",
bundle.getString("BlackboardArtifact.tskMetadataExif.text"), Category.ANALYSIS_RESULT)

EXIF metadata.

Definition at line 1639 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OBJECT_DETECTED
Initial value:
=(41, "TSK_OBJECT_DETECTED",
bundle.getString("BlackboardArtifact.tskObjectDetected.text"), Category.ANALYSIS_RESULT)

Definition at line 1786 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_ACCOUNT
Initial value:
=(20, "TSK_OS_ACCOUNT",
bundle.getString("BlackboardArtifact.tskOsAccount.text"), Category.DATA_ARTIFACT)

An operating system user account.

Definition at line 1666 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_INFO
Initial value:
=(19, "TSK_OS_INFO",
bundle.getString("BlackboardArtifact.tskOsInfo.text"), Category.DATA_ARTIFACT)

Information pertaining to an operating system.

Definition at line 1660 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PREVIOUSLY_NOTABLE
Initial value:
=(71, "TSK_PREVIOUSLY_NOTABLE",
bundle.getString("BlackboardArtifact.tskPreviouslyNotable.text"), Category.ANALYSIS_RESULT)

Indicates that the file or artifact was previously tagged as "Notable" in another Autopsy case.

Definition at line 1938 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PREVIOUSLY_SEEN
Initial value:
=(69, "TSK_PREVIOUSLY_SEEN",
bundle.getString("BlackboardArtifact.tskPreviouslySeen.text"), Category.ANALYSIS_RESULT)

Indicates that the file or artifact was previously seen in another Autopsy case.

Definition at line 1928 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PREVIOUSLY_UNSEEN
Initial value:
=(70, "TSK_PREVIOUSLY_UNSEEN",
bundle.getString("BlackboardArtifact.tskPreviouslyUnseen.text"), Category.ANALYSIS_RESULT)

Indicates that the file or artifact was previously unseen in another Autopsy case.

Definition at line 1933 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PROG_NOTIFICATIONS
Initial value:
=(62, "TSK_PROG_NOTIFICATIONS",
bundle.getString("BlackboardArtifact.tskProgNotifications.text"), Category.DATA_ARTIFACT)

Notifications Sent to User.

Definition at line 1896 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PROG_RUN
Initial value:
=(32, "TSK_PROG_RUN",
bundle.getString("BlackboardArtifact.tskProgRun.text"), Category.DATA_ARTIFACT)

Application run information.

Definition at line 1738 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_RECENT_OBJECT
Initial value:
=(6, "TSK_RECENT_OBJ",
bundle.getString("BlackboardArtifact.tsk.recentObject.text"), Category.DATA_ARTIFACT)

A recent object.

Definition at line 1585 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_REMOTE_DRIVE
Initial value:
=(37, "TSK_REMOTE_DRIVE",
bundle.getString("BlackboardArtifact.tskRemoteDrive.text"), Category.DATA_ARTIFACT)

A remote drive.

Definition at line 1766 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SCREEN_SHOTS
Initial value:
=(60, "TSK_SCREEN_SHOTS",
bundle.getString("BlackboardArtifact.tskScreenShots.text"), Category.DATA_ARTIFACT)

Screen shots from device or Application.

Definition at line 1891 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SERVICE_ACCOUNT
Initial value:
=(21, "TSK_SERVICE_ACCOUNT",
bundle.getString("BlackboardArtifact.tskServiceAccount.text"), Category.DATA_ARTIFACT)

An application or Web service account.

Definition at line 1671 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SIM_ATTACHED
Initial value:
=(44, "TSK_SIM_ATTACHED",
bundle.getString("BlackboardArtifact.tskSimAttached.text"), Category.DATA_ARTIFACT)

A SIM card.

Definition at line 1801 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SPEED_DIAL_ENTRY
Initial value:
=(27, "TSK_SPEED_DIAL_ENTRY",
bundle.getString("BlackboardArtifact.tskSpeedDialEntry.text"), Category.DATA_ARTIFACT)

A speed dial entry from a phone.

Definition at line 1713 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TAG_ARTIFACT
Initial value:
=(18, "TSK_TAG_ARTIFACT",
bundle.getString("BlackboardArtifact.tskTagArtifact.text"), Category.ANALYSIS_RESULT)

A tag applied to an artifact.

Deprecated:
Tags are no longer treated as artifacts.

Definition at line 1655 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TAG_FILE
Initial value:
=(17, "TSK_TAG_FILE",
bundle.getString("BlackboardArtifact.tagFile.text"), Category.ANALYSIS_RESULT)

A tag applied to a file.

Deprecated:
Tags are no longer treated as artifacts.

Definition at line 1647 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TL_EVENT
Initial value:
=(53, "TSK_TL_EVENT",
bundle.getString("BlackboardArtifact.tskTLEvent.text"), Category.DATA_ARTIFACT)

A generic (timeline) event.

Definition at line 1854 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TOOL_OUTPUT
Initial value:
=(22, "TSK_TOOL_OUTPUT",
bundle.getString("BlackboardArtifact.tskToolOutput.text"), Category.DATA_ARTIFACT)

Output from an external tool or module (raw text).

Deprecated:
Tool output should be saved as a report.

Definition at line 1679 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_USER_CONTENT_SUSPECTED
Initial value:
=(56, "TSK_USER_CONTENT_SUSPECTED",
bundle.getString("BlackboardArtifact.tskUserContentSuspected.text"), Category.ANALYSIS_RESULT)

Indicates file may have been created by the user.

Definition at line 1869 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_USER_DEVICE_EVENT
Initial value:
=(65, "TSK_USER_DEVICE_EVENT",
bundle.getString("BlackboardArtifact.tskUserDeviceEvent.text"), Category.DATA_ARTIFACT)

Activity on the System/Application.

Definition at line 1911 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_VERIFICATION_FAILED
Initial value:
=(47, "TSK_VERIFICATION_FAILED",
bundle.getString("BlackboardArtifact.tskVerificationFailed.text"), Category.ANALYSIS_RESULT)

Indicates a verification failure

Definition at line 1816 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_ACCOUNT_TYPE
Initial value:
=(59, "TSK_WEB_ACCOUNT_TYPE",
bundle.getString("BlackboardArtifact.tskWebAccountType.text"), Category.ANALYSIS_RESULT)

Stores a role on a given domain.

Definition at line 1886 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK
Initial value:
=(2, "TSK_WEB_BOOKMARK",
bundle.getString("BlackboardArtifact.tskWebBookmark.text"), Category.DATA_ARTIFACT)

A Web bookmark. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create bookmark artifacts.

Definition at line 1559 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_CACHE
Initial value:
=(52, "TSK_WEB_CACHE",
bundle.getString("BlackboardArtifact.tskWebCache.text"), Category.DATA_ARTIFACT)

Indicates web cache data

Definition at line 1849 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_CATEGORIZATION
Initial value:
=(68, "TSK_WEB_CATEGORIZATION",
bundle.getString("BlackboardArtifact.tskWebCategorization.text"), Category.ANALYSIS_RESULT)

Definition at line 1923 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE
Initial value:
=(3, "TSK_WEB_COOKIE",
bundle.getString("BlackboardArtifact.tskWebCookie.text"), Category.DATA_ARTIFACT)

A Web cookie. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create cookie artifacts.

Definition at line 1566 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD
Initial value:
=(5, "TSK_WEB_DOWNLOAD",
bundle.getString("BlackboardArtifact.tskWebDownload.text"), Category.DATA_ARTIFACT)

A Web download. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create download artifacts.

Definition at line 1580 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_ADDRESS
Initial value:
=(50, "TSK_WEB_FORM_ADDRESSES ",
bundle.getString("BlackboardArtifact.tskWebFormAddresses.text"), Category.DATA_ARTIFACT)

Indicates an person's address filled in a web form. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create web form address artifacts.

Definition at line 1835 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_AUTOFILL
Initial value:
=(49, "TSK_WEB_FORM_AUTOFILL",
bundle.getString("BlackboardArtifact.tskWebFormAutofill.text"), Category.DATA_ARTIFACT)

Indicates auto fill data from a Web form. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create web form autofill artifacts.

Definition at line 1828 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY
Initial value:
=(4, "TSK_WEB_HISTORY",
bundle.getString("BlackboardArtifact.tskWebHistory.text"), Category.DATA_ARTIFACT)

A Web history. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create history artifacts.

Definition at line 1573 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_SEARCH_QUERY
Initial value:
=(15, "TSK_WEB_SEARCH_QUERY",
bundle.getString("BlackboardArtifact.tskWebSearchQuery.text"), Category.DATA_ARTIFACT)

A Web search engine query extracted from Web history.

Definition at line 1634 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WIFI_NETWORK
Initial value:
=(42, "TSK_WIFI_NETWORK",
bundle.getString("BlackboardArtifact.tskWIFINetwork.text"), Category.DATA_ARTIFACT)

A wireless network.

Definition at line 1791 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WIFI_NETWORK_ADAPTER
Initial value:
=(46, "TSK_WIFI_NETWORK_ADAPTER",
bundle.getString("BlackboardArtifact.tskWIFINetworkAdapter.text"), Category.DATA_ARTIFACT)

A wireless network adapter.

Definition at line 1811 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_YARA_HIT
Initial value:
=(66, "TSK_YARA_HIT",
bundle.getString("BlackboardArtifact.tskYaraHit.text"), Category.ANALYSIS_RESULT)

Indicates that the file had a yara pattern match hit.

Definition at line 1916 of file BlackboardArtifact.java.


The documentation for this enum was generated from the following file:

Copyright © 2011-2021 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.