Inherits org.sleuthkit.datamodel.SleuthkitVisitableItem.

Public Member Functions
public< T > T	accept (SleuthkitItemVisitor< T > visitor)

Category	getCategory ()

String	getDisplayName ()

String	getLabel ()

int	getTypeID ()

Static Public Member Functions
static ARTIFACT_TYPE	fromID (int id)

static ARTIFACT_TYPE	fromLabel (String label)

Public Attributes
	TSK_ACCOUNT

	TSK_ASSOCIATED_OBJECT

	TSK_BACKUP_EVENT

	TSK_BLUETOOTH_ADAPTER

	TSK_BLUETOOTH_PAIRING

	TSK_CALENDAR_ENTRY

	TSK_CALLLOG

	TSK_CLIPBOARD_CONTENT

	TSK_CONTACT

	TSK_DATA_SOURCE_USAGE

	TSK_DELETED_PROG

	TSK_DEVICE_ATTACHED

	TSK_DEVICE_INFO

	TSK_DOWNLOAD_SOURCE

	TSK_EMAIL_MSG

	TSK_ENCRYPTION_DETECTED

	TSK_ENCRYPTION_SUSPECTED

	TSK_EXT_MISMATCH_DETECTED

	TSK_EXTRACTED_TEXT

	TSK_FACE_DETECTED

	TSK_GEN_INFO

	TSK_GPS_AREA

	TSK_GPS_BOOKMARK

	TSK_GPS_LAST_KNOWN_LOCATION

	TSK_GPS_ROUTE

	TSK_GPS_SEARCH

	TSK_GPS_TRACK

	TSK_GPS_TRACKPOINT

	TSK_HASHSET_HIT

	TSK_INSTALLED_PROG

	TSK_INTERESTING_ARTIFACT_HIT

	TSK_INTERESTING_FILE_HIT
	an interesting/notable file hit More...

	TSK_INTERESTING_ITEM

	TSK_KEYWORD_HIT

	TSK_MESSAGE

	TSK_METADATA

	TSK_METADATA_EXIF

	TSK_OBJECT_DETECTED

	TSK_OS_ACCOUNT

	TSK_OS_INFO

	TSK_PREVIOUSLY_NOTABLE

	TSK_PREVIOUSLY_SEEN

	TSK_PREVIOUSLY_UNSEEN

	TSK_PROG_NOTIFICATIONS

	TSK_PROG_RUN

	TSK_RECENT_OBJECT

	TSK_REMOTE_DRIVE

	TSK_SCREEN_SHOTS

	TSK_SERVICE_ACCOUNT

	TSK_SIM_ATTACHED

	TSK_SPEED_DIAL_ENTRY

	TSK_TAG_ARTIFACT

	TSK_TAG_FILE

	TSK_TL_EVENT

	TSK_TOOL_OUTPUT

	TSK_USER_CONTENT_SUSPECTED

	TSK_USER_DEVICE_EVENT

	TSK_VERIFICATION_FAILED

	TSK_WEB_ACCOUNT_TYPE

	TSK_WEB_BOOKMARK

	TSK_WEB_CACHE

	TSK_WEB_CATEGORIZATION

	TSK_WEB_COOKIE

	TSK_WEB_DOWNLOAD

	TSK_WEB_FORM_ADDRESS

	TSK_WEB_FORM_AUTOFILL

	TSK_WEB_HISTORY

	TSK_WEB_SEARCH_QUERY

	TSK_WIFI_NETWORK

	TSK_WIFI_NETWORK_ADAPTER

	TSK_YARA_HIT

Detailed Description

Enum for the standard artifact types. Refer to http://sleuthkit.org/sleuthkit/docs/jni-docs/latest/artifact_catalog_page.html for details on the standard attributes for each artifact type.

Definition at line 1597 of file BlackboardArtifact.java.

Member Function Documentation

public<T> T org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.accept ( SleuthkitItemVisitor< T > visitor )

Accepts a visitor SleuthkitItemVisitor that will perform an operation on this artifact type and return some object as the result of the operation.

Parameters

visitor The visitor, where the type parameter of the visitor is the type of the object that will be returned as the result of the visit operation.

Returns: An object of type T.

Implements org.sleuthkit.datamodel.SleuthkitVisitableItem.

Definition at line 2132 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitItemVisitor< T >.visit().

static ARTIFACT_TYPE org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.fromID ( int id )

static

Gets the artifact type enum value that corresponds to a given type id. This method should only be used when the id is known to be one of the built-in types - otherwise use getArtifactType() in SleuthkitCase.

Parameters

id	The type id.

Returns: the corresponding enum

Definition at line 2102 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTypesInUse(), and org.sleuthkit.datamodel.BlackboardArtifact.getShortDescription().

static ARTIFACT_TYPE org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.fromLabel ( String label )

static

Gets the standard artifact type enum value that corresponds to a given type name (label).

Parameters

label The type name

Returns: The enum element.

Definition at line 2083 of file BlackboardArtifact.java.

Category org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getCategory ( )

Gets the type category for this standard artifact type.

Returns: The type category.

Definition at line 2071 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getDisplayName ( )

Gets the display name of this standard artifact type.

Returns: The display name.

Definition at line 2116 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getLabel ( )

Gets the type name (label) for this standard artifact type.

Returns: The type name.

Definition at line 2062 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

int org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getTypeID ( )

Gets the type id for this standard artifact type.

Returns: type id

Definition at line 2053 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTypesInUse(), and org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

Member Data Documentation

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ACCOUNT

Initial value:

=(39, "TSK_ACCOUNT",

bundle.getString("BlackboardArtifact.tskAccount.text"), Category.DATA_ARTIFACT)

An account.

Definition at line 1832 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.CommunicationsManager.getAccountFileInstances(), and org.sleuthkit.datamodel.Report.newDataArtifact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ASSOCIATED_OBJECT

Initial value:

=(55, "TSK_ASSOCIATED_OBJECT",

bundle.getString("BlackboardArtifact.tskAssociatedObject.text"), Category.DATA_ARTIFACT)

An associated object.

Definition at line 1920 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BACKUP_EVENT

Initial value:

=(63, "TSK_BACKUP_EVENT",

bundle.getString("BlackboardArtifact.tskBackupEvent.text"), Category.DATA_ARTIFACT)

System/Application/File backup.

Definition at line 1957 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_ADAPTER

Initial value:

=(45, "TSK_BLUETOOTH_ADAPTER",

bundle.getString("BlackboardArtifact.tskBluetoothAdapter.text"), Category.DATA_ARTIFACT)

A bluetooth adapter.

Definition at line 1862 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_PAIRING

Initial value:

=(28, "TSK_BLUETOOTH_PAIRING",

bundle.getString("BlackboardArtifact.tskBluetoothPairing.text"), Category.DATA_ARTIFACT)

A bluetooth pairing entry.

Definition at line 1771 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALENDAR_ENTRY

Initial value:

=(26, "TSK_CALENDAR_ENTRY",

bundle.getString("BlackboardArtifact.tskCalendarEntry.text"), Category.DATA_ARTIFACT)

A calendar entry from a phone, PIM, or a calendar application.

Definition at line 1761 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALLLOG

Initial value:

=(25, "TSK_CALLLOG",

bundle.getString("BlackboardArtifact.tskCalllog.text"), Category.DATA_ARTIFACT)

A phone call log extracted from a phone or softphone application. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create call log artifacts.

Definition at line 1756 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CLIPBOARD_CONTENT

Initial value:

=(54, "TSK_CLIPBOARD_CONTENT",

bundle.getString("BlackboardArtifact.tskClipboardContent.text"), Category.DATA_ARTIFACT)

Indicates clipboard content

Definition at line 1915 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CONTACT

Initial value:

=(23, "TSK_CONTACT",

bundle.getString("BlackboardArtifact.tskContact.text"), Category.DATA_ARTIFACT)

A contact extracted from a phone, or from an address book/email/messaging application. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create contact artifacts.

Definition at line 1740 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DATA_SOURCE_USAGE

Initial value:

=(48, "TSK_DATA_SOURCE_USAGE",

bundle.getString("BlackboardArtifact.tskDataSourceUsage.text"), Category.ANALYSIS_RESULT)

Categorization information for a data source.

Definition at line 1877 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DELETED_PROG

Initial value:

=(64, "TSK_DELETED_PROG",

bundle.getString("BlackboardArtifact.tskDeletedProg.text"), Category.DATA_ARTIFACT)

Programs that have been deleted.

Definition at line 1962 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_ATTACHED

Initial value:

=(11, "TSK_DEVICE_ATTACHED",

bundle.getString("BlackboardArtifact.tskDeviceAttached.text"), Category.DATA_ARTIFACT)

An attached device.

Definition at line 1663 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_INFO

Initial value:

=(43, "TSK_DEVICE_INFO",

bundle.getString("BlackboardArtifact.tskDeviceInfo.text"), Category.DATA_ARTIFACT)

Information related to a device.

Definition at line 1852 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DOWNLOAD_SOURCE

Initial value:

=(51, "TSK_DOWNLOAD_SOURCE",

bundle.getString("BlackboardArtifact.tskDownloadSource.text"), Category.DATA_ARTIFACT)

Indicates source of a file/object

Deprecated:: TSK_ASSOCIATED_OBJECT should be used instead to associate the file/object with its source artifact/object..

Definition at line 1900 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EMAIL_MSG

Initial value:

=(13, "TSK_EMAIL_MSG",

bundle.getString("BlackboardArtifact.tskEmailMsg.text"), Category.DATA_ARTIFACT)

An email message.

Definition at line 1677 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_DETECTED

Initial value:

=(33, "TSK_ENCRYPTION_DETECTED",

bundle.getString("BlackboardArtifact.tskEncryptionDetected.text"), Category.ANALYSIS_RESULT)

An encrypted file.

Definition at line 1796 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_SUSPECTED

Initial value:

=(40, "TSK_ENCRYPTION_SUSPECTED",

bundle.getString("BlackboardArtifact.tskEncryptionSuspected.text"), Category.ANALYSIS_RESULT)

An encrypted file.

Definition at line 1837 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EXT_MISMATCH_DETECTED

Initial value:

=(34, "TSK_EXT_MISMATCH_DETECTED",

bundle.getString("BlackboardArtifact.tskExtMismatchDetected.text"), Category.ANALYSIS_RESULT)

A file with an extension that does not match its MIME type.

Definition at line 1801 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EXTRACTED_TEXT

Initial value:

=(14, "TSK_EXTRACTED_TEXT",

bundle.getString("BlackboardArtifact.tskExtractedText.text"), Category.DATA_ARTIFACT)

Text extracted from the source content.

Definition at line 1682 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_FACE_DETECTED

Initial value:

=(38, "TSK_FACE_DETECTED",

bundle.getString("BlackboardArtifact.tskFaceDetected.text"), Category.ANALYSIS_RESULT)

A human face was detected in a media file.

Definition at line 1827 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GEN_INFO

Initial value:

=(1, "TSK_GEN_INFO",

bundle.getString("BlackboardArtifact.tskGenInfo.text"), Category.DATA_ARTIFACT)

A generic information artifact.

Definition at line 1602 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.AbstractContent.getArtifacts(), org.sleuthkit.datamodel.AbstractContent.getGenInfoArtifact(), and org.sleuthkit.datamodel.AbstractContent.newArtifact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_AREA

Initial value:

=(67, "TSK_GPS_AREA",

bundle.getString("BlackboardArtifact.tskGPSArea.text"), Category.DATA_ARTIFACT)

Stores the outline of an area using GPS coordinates.

Definition at line 1977 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_BOOKMARK

Initial value:

=(29, "TSK_GPS_BOOKMARK",

bundle.getString("BlackboardArtifact.tskGpsBookmark.text"), Category.DATA_ARTIFACT)

A GPS bookmark / way point that the user saved.

Definition at line 1776 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_LAST_KNOWN_LOCATION

Initial value:

=(30, "TSK_GPS_LAST_KNOWN_LOCATION",

bundle.getString("BlackboardArtifact.tskGpsLastKnownLocation.text"), Category.DATA_ARTIFACT)

A GPS last known location record.

Definition at line 1781 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_ROUTE

Initial value:

=(36, "TSK_GPS_ROUTE",

bundle.getString("BlackboardArtifact.tskGpsRoute.text"), Category.DATA_ARTIFACT)

A route based on GPS coordinates. Use org.sleuthkit.datamodel.blackboardutils.GeoArtifactsHelper.addRoute() to create route artifacts.

Definition at line 1817 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_SEARCH

Initial value:

=(31, "TSK_GPS_SEARCH",

bundle.getString("BlackboardArtifact.tskGpsSearch.text"), Category.DATA_ARTIFACT)

A GPS search record.

Definition at line 1786 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_TRACK

Initial value:

=(58, "TSK_GPS_TRACK",

bundle.getString("BlackboardArtifact.tskTrack.text"), Category.DATA_ARTIFACT)

Stores a GPS track log. Use org.sleuthkit.datamodel.blackboardutils.GeoArtifactsHelper.addTrack() to create track artifacts.

Definition at line 1937 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_TRACKPOINT

Initial value:

=(7, "TSK_GPS_TRACKPOINT",

bundle.getString("BlackboardArtifact.tskGpsTrackpoint.text"), Category.DATA_ARTIFACT)

A GPS track point (geolocation data).

Deprecated:: Use TSK_GPS_TRACK instead

Definition at line 1643 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_HASHSET_HIT

Initial value:

=(10, "TSK_HASHSET_HIT",

bundle.getString("BlackboardArtifact.tskHashsetHit.text"), Category.ANALYSIS_RESULT)

A hit for a hash set (hash database).

Definition at line 1658 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.AbstractContent.getHashSetNames().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INSTALLED_PROG

Initial value:

=(8, "TSK_INSTALLED_PROG",

bundle.getString("BlackboardArtifact.tskInstalledProg.text"), Category.DATA_ARTIFACT)

An installed program.

Definition at line 1648 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_ARTIFACT_HIT

Initial value:

=(35, "TSK_INTERESTING_ARTIFACT_HIT",

bundle.getString("BlackboardArtifact.tskInterestingArtifactHit.text"), Category.ANALYSIS_RESULT)

An meta-artifact to call attention to an artifact deemed to be interesting.

Deprecated:: Use TSK_INTERESTING_ITEM instead.

Definition at line 1810 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT

Initial value:

=(12, "TSK_INTERESTING_FILE_HIT",

bundle.getString("BlackboardArtifact.tskInterestingFileHit.text"), Category.ANALYSIS_RESULT)

an interesting/notable file hit

An meta-artifact to call attention to a file deemed to be interesting.

Deprecated:: Use TSK_INTERESTING_ITEM instead.

Definition at line 1672 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_ITEM

Initial value:

=(72, "TSK_INTERESTING_ITEM",

bundle.getString("BlackboardArtifact.tskInterestingItem.text"), Category.ANALYSIS_RESULT)

An meta-artifact to call attention to an item deemed to be interesting.

Definition at line 2003 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT

Initial value:

=(9, "TSK_KEYWORD_HIT",

bundle.getString("BlackboardArtifact.tskKeywordHits.text"), Category.ANALYSIS_RESULT)

A search hit for a keyword.

Definition at line 1653 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.Report.getArtifacts(), org.sleuthkit.datamodel.Report.getArtifactsCount(), org.sleuthkit.datamodel.Report.newArtifact(), and org.sleuthkit.datamodel.Report.newDataArtifact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_MESSAGE

Initial value:

=(24, "TSK_MESSAGE",

bundle.getString("BlackboardArtifact.tskMessage.text"), Category.DATA_ARTIFACT)

An SMS/MMS message extracted from phone, or from another messaging application, like IM. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create message artifacts.

Definition at line 1748 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA

Initial value:

=(57, "TSK_METADATA",

bundle.getString("BlackboardArtifact.tskMetadata.text"), Category.DATA_ARTIFACT)

Stores metadata about an object.

Definition at line 1930 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA_EXIF

Initial value:

=(16, "TSK_METADATA_EXIF",

bundle.getString("BlackboardArtifact.tskMetadataExif.text"), Category.ANALYSIS_RESULT)

EXIF metadata.

Definition at line 1692 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OBJECT_DETECTED

Initial value:

=(41, "TSK_OBJECT_DETECTED",

bundle.getString("BlackboardArtifact.tskObjectDetected.text"), Category.ANALYSIS_RESULT)

Definition at line 1842 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_ACCOUNT

Initial value:

=(20, "TSK_OS_ACCOUNT",

bundle.getString("BlackboardArtifact.tskOsAccount.text"), Category.DATA_ARTIFACT)

An operating system user account.

Definition at line 1719 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_INFO

Initial value:

=(19, "TSK_OS_INFO",

bundle.getString("BlackboardArtifact.tskOsInfo.text"), Category.DATA_ARTIFACT)

Information pertaining to an operating system.

Definition at line 1713 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PREVIOUSLY_NOTABLE

Initial value:

=(71, "TSK_PREVIOUSLY_NOTABLE",

bundle.getString("BlackboardArtifact.tskPreviouslyNotable.text"), Category.ANALYSIS_RESULT)

Indicates that the file or artifact was previously tagged as "Notable" in another Autopsy case.

Definition at line 1997 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PREVIOUSLY_SEEN

Initial value:

=(69, "TSK_PREVIOUSLY_SEEN",

bundle.getString("BlackboardArtifact.tskPreviouslySeen.text"), Category.ANALYSIS_RESULT)

Indicates that the file or artifact was previously seen in another Autopsy case.

Definition at line 1985 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PREVIOUSLY_UNSEEN

Initial value:

=(70, "TSK_PREVIOUSLY_UNSEEN",

bundle.getString("BlackboardArtifact.tskPreviouslyUnseen.text"), Category.ANALYSIS_RESULT)

Indicates that the file or artifact was previously unseen in another Autopsy case.

Definition at line 1991 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PROG_NOTIFICATIONS

Initial value:

=(62, "TSK_PROG_NOTIFICATIONS",

bundle.getString("BlackboardArtifact.tskProgNotifications.text"), Category.DATA_ARTIFACT)

Notifications Sent to User.

Definition at line 1952 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PROG_RUN

Initial value:

=(32, "TSK_PROG_RUN",

bundle.getString("BlackboardArtifact.tskProgRun.text"), Category.DATA_ARTIFACT)

Application run information.

Definition at line 1791 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_RECENT_OBJECT

Initial value:

=(6, "TSK_RECENT_OBJ",

bundle.getString("BlackboardArtifact.tsk.recentObject.text"), Category.DATA_ARTIFACT)

A recent object.

Definition at line 1635 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_REMOTE_DRIVE

Initial value:

=(37, "TSK_REMOTE_DRIVE",

bundle.getString("BlackboardArtifact.tskRemoteDrive.text"), Category.DATA_ARTIFACT)

A remote drive.

Definition at line 1822 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SCREEN_SHOTS

Initial value:

=(60, "TSK_SCREEN_SHOTS",

bundle.getString("BlackboardArtifact.tskScreenShots.text"), Category.DATA_ARTIFACT)

Screen shots from device or Application.

Definition at line 1947 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SERVICE_ACCOUNT

Initial value:

=(21, "TSK_SERVICE_ACCOUNT",

bundle.getString("BlackboardArtifact.tskServiceAccount.text"), Category.DATA_ARTIFACT)

An application or Web service account.

Definition at line 1724 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SIM_ATTACHED

Initial value:

=(44, "TSK_SIM_ATTACHED",

bundle.getString("BlackboardArtifact.tskSimAttached.text"), Category.DATA_ARTIFACT)

A SIM card.

Definition at line 1857 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SPEED_DIAL_ENTRY

Initial value:

=(27, "TSK_SPEED_DIAL_ENTRY",

bundle.getString("BlackboardArtifact.tskSpeedDialEntry.text"), Category.DATA_ARTIFACT)

A speed dial entry from a phone.

Definition at line 1766 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TAG_ARTIFACT

Initial value:

=(18, "TSK_TAG_ARTIFACT",

bundle.getString("BlackboardArtifact.tskTagArtifact.text"), Category.ANALYSIS_RESULT)

A tag applied to an artifact.

Deprecated:: Tags are no longer treated as artifacts.

Definition at line 1708 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TAG_FILE

Initial value:

=(17, "TSK_TAG_FILE",

bundle.getString("BlackboardArtifact.tagFile.text"), Category.ANALYSIS_RESULT)

A tag applied to a file.

Deprecated:: Tags are no longer treated as artifacts.

Definition at line 1700 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TL_EVENT

Initial value:

=(53, "TSK_TL_EVENT",

bundle.getString("BlackboardArtifact.tskTLEvent.text"), Category.DATA_ARTIFACT)

A generic (timeline) event.

Definition at line 1910 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TOOL_OUTPUT

Initial value:

=(22, "TSK_TOOL_OUTPUT",

bundle.getString("BlackboardArtifact.tskToolOutput.text"), Category.DATA_ARTIFACT)

Output from an external tool or module (raw text).

Deprecated:: Tool output should be saved as a report.

Definition at line 1732 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_USER_CONTENT_SUSPECTED

Initial value:

=(56, "TSK_USER_CONTENT_SUSPECTED",

bundle.getString("BlackboardArtifact.tskUserContentSuspected.text"), Category.ANALYSIS_RESULT)

Indicates file may have been created by the user.

Definition at line 1925 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_USER_DEVICE_EVENT

Initial value:

=(65, "TSK_USER_DEVICE_EVENT",

bundle.getString("BlackboardArtifact.tskUserDeviceEvent.text"), Category.DATA_ARTIFACT)

Activity on the System/Application.

Definition at line 1967 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_VERIFICATION_FAILED

Initial value:

=(47, "TSK_VERIFICATION_FAILED",

bundle.getString("BlackboardArtifact.tskVerificationFailed.text"), Category.ANALYSIS_RESULT)

Indicates a verification failure

Definition at line 1872 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_ACCOUNT_TYPE

Initial value:

=(59, "TSK_WEB_ACCOUNT_TYPE",

bundle.getString("BlackboardArtifact.tskWebAccountType.text"), Category.ANALYSIS_RESULT)

Stores a role on a given domain.

Definition at line 1942 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK

Initial value:

=(2, "TSK_WEB_BOOKMARK",

bundle.getString("BlackboardArtifact.tskWebBookmark.text"), Category.DATA_ARTIFACT)

A Web bookmark. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create bookmark artifacts.

Definition at line 1609 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_CACHE

Initial value:

=(52, "TSK_WEB_CACHE",

bundle.getString("BlackboardArtifact.tskWebCache.text"), Category.DATA_ARTIFACT)

Indicates web cache data

Definition at line 1905 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_CATEGORIZATION

Initial value:

=(68, "TSK_WEB_CATEGORIZATION",

bundle.getString("BlackboardArtifact.tskWebCategorization.text"), Category.ANALYSIS_RESULT)

Definition at line 1979 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE

Initial value:

=(3, "TSK_WEB_COOKIE",

bundle.getString("BlackboardArtifact.tskWebCookie.text"), Category.DATA_ARTIFACT)

A Web cookie. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create cookie artifacts.

Definition at line 1616 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD

Initial value:

=(5, "TSK_WEB_DOWNLOAD",

bundle.getString("BlackboardArtifact.tskWebDownload.text"), Category.DATA_ARTIFACT)

A Web download. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create download artifacts.

Definition at line 1630 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_ADDRESS

Initial value:

=(50, "TSK_WEB_FORM_ADDRESSES ",

bundle.getString("BlackboardArtifact.tskWebFormAddresses.text"), Category.DATA_ARTIFACT)

Indicates an person's address filled in a web form. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create web form address artifacts.

Definition at line 1891 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_AUTOFILL

Initial value:

=(49, "TSK_WEB_FORM_AUTOFILL",

bundle.getString("BlackboardArtifact.tskWebFormAutofill.text"), Category.DATA_ARTIFACT)

Indicates auto fill data from a Web form. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create web form autofill artifacts.

Definition at line 1884 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY

Initial value:

=(4, "TSK_WEB_HISTORY",

bundle.getString("BlackboardArtifact.tskWebHistory.text"), Category.DATA_ARTIFACT)

A Web history. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create history artifacts.

Definition at line 1623 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_SEARCH_QUERY

Initial value:

=(15, "TSK_WEB_SEARCH_QUERY",

bundle.getString("BlackboardArtifact.tskWebSearchQuery.text"), Category.DATA_ARTIFACT)

A Web search engine query extracted from Web history.

Definition at line 1687 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WIFI_NETWORK

Initial value:

=(42, "TSK_WIFI_NETWORK",

bundle.getString("BlackboardArtifact.tskWIFINetwork.text"), Category.DATA_ARTIFACT)

A wireless network.

Definition at line 1847 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WIFI_NETWORK_ADAPTER

Initial value:

=(46, "TSK_WIFI_NETWORK_ADAPTER",

bundle.getString("BlackboardArtifact.tskWIFINetworkAdapter.text"), Category.DATA_ARTIFACT)

A wireless network adapter.

Definition at line 1867 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_YARA_HIT

Initial value:

=(66, "TSK_YARA_HIT",

bundle.getString("BlackboardArtifact.tskYaraHit.text"), Category.ANALYSIS_RESULT)

Indicates that the file had a yara pattern match hit.

Definition at line 1972 of file BlackboardArtifact.java.

The documentation for this enum was generated from the following file:

/home/carriersleuth/repos/sleuthkit/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java

Public Member Functions

Static Public Member Functions

Public Attributes

Detailed Description

Member Function Documentation

Member Data Documentation