Sleuth Kit Java Bindings (JNI)  4.11.1
Java bindings for using The Sleuth Kit
org.sleuthkit.datamodel.DataSource Interface Reference

Inherits org.sleuthkit.datamodel.Content.

Inherited by org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

Public Member Functions

String getAcquisitionDetails () throws TskCoreException
 
String getAcquisitionToolName () throws TskCoreException
 
String getAcquisitionToolSettings () throws TskCoreException
 
String getAcquisitionToolVersion () throws TskCoreException
 
long getContentSize (SleuthkitCase sleuthkitCase) throws TskCoreException
 
Long getDateAdded () throws TskCoreException
 
String getDeviceId ()
 
Host getHost () throws TskCoreException
 
String getTimeZone ()
 
void setAcquisitionDetails (String details) throws TskCoreException
 
void setAcquisitionToolDetails (String name, String version, String settings) throws TskCoreException
 
void setDisplayName (String newName) throws TskCoreException
 
- Public Member Functions inherited from org.sleuthkit.datamodel.Content
public< T > T accept (ContentVisitor< T > v)
 
void close ()
 
Score getAggregateScore () throws TskCoreException
 
List< AnalysisResultgetAllAnalysisResults () throws TskCoreException
 
ArrayList< BlackboardArtifactgetAllArtifacts () throws TskCoreException
 
long getAllArtifactsCount () throws TskCoreException
 
List< DataArtifactgetAllDataArtifacts () throws TskCoreException
 
List< AnalysisResultgetAnalysisResults (BlackboardArtifact.Type artifactType) throws TskCoreException
 
ArrayList< BlackboardArtifactgetArtifacts (String artifactTypeName) throws TskCoreException
 
ArrayList< BlackboardArtifactgetArtifacts (int artifactTypeID) throws TskCoreException
 
ArrayList< BlackboardArtifactgetArtifacts (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
 
long getArtifactsCount (String artifactTypeName) throws TskCoreException
 
long getArtifactsCount (int artifactTypeID) throws TskCoreException
 
long getArtifactsCount (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
 
List< ContentgetChildren () throws TskCoreException
 
int getChildrenCount () throws TskCoreException
 
List< Long > getChildrenIds () throws TskCoreException
 
Content getDataSource () throws TskCoreException
 
BlackboardArtifact getGenInfoArtifact () throws TskCoreException
 
BlackboardArtifact getGenInfoArtifact (boolean create) throws TskCoreException
 
ArrayList< BlackboardAttributegetGenInfoAttributes (BlackboardAttribute.ATTRIBUTE_TYPE attr_type) throws TskCoreException
 
Set< String > getHashSetNames () throws TskCoreException
 
long getId ()
 
String getName ()
 
Content getParent () throws TskCoreException
 
long getSize ()
 
String getUniquePath () throws TskCoreException
 
boolean hasChildren () throws TskCoreException
 
AnalysisResultAdded newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList) throws TskCoreException
 
AnalysisResultAdded newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList, long dataSourceId) throws TskCoreException
 
BlackboardArtifact newArtifact (int artifactTypeID) throws TskCoreException
 
BlackboardArtifact newArtifact (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
 
DataArtifact newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList) throws TskCoreException
 
DataArtifact newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId) throws TskCoreException
 
DataArtifact newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId, long dataSourceId) throws TskCoreException
 
int read (byte[] buf, long offset, long len) throws TskCoreException
 
- Public Member Functions inherited from org.sleuthkit.datamodel.SleuthkitVisitableItem
public< T > T accept (SleuthkitItemVisitor< T > v)
 

Detailed Description

A data source (e.g., an image, a local disk, a virtual directory of logical files, etc.).

Definition at line 25 of file DataSource.java.

Member Function Documentation

String org.sleuthkit.datamodel.DataSource.getAcquisitionDetails ( ) throws TskCoreException

Gets the acquisition details field from the case database.

Returns
The acquisition details
Exceptions
TskCoreExceptionThrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

String org.sleuthkit.datamodel.DataSource.getAcquisitionToolName ( ) throws TskCoreException

Gets the acquisition tool name field from the case database.

Returns
The acquisition tool name. May be Null if not set.
Exceptions
TskCoreExceptionThrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

String org.sleuthkit.datamodel.DataSource.getAcquisitionToolSettings ( ) throws TskCoreException

Gets the acquisition tool settings field from the case database.

Returns
The acquisition tool settings. May be Null if not set.
Exceptions
TskCoreExceptionThrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

String org.sleuthkit.datamodel.DataSource.getAcquisitionToolVersion ( ) throws TskCoreException

Gets the acquisition tool version field from the case database.

Returns
The acquisition tool version. May be Null if not set.
Exceptions
TskCoreExceptionThrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

long org.sleuthkit.datamodel.DataSource.getContentSize ( SleuthkitCase  sleuthkitCase) throws TskCoreException

Gets the size of the contents of the data source in bytes. This size can change as archive files within the data source are expanded, files are carved, etc., and is different from the size of the data source as returned by Content.getSize, which is the size of the data source as a file.

Parameters
sleuthkitCaseThe sleuthkit case instance from which to make calls to the database.
Returns
The size in bytes.
Exceptions
TskCoreExceptionThrown when there is an issue trying to retrieve data from the database.

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

Long org.sleuthkit.datamodel.DataSource.getDateAdded ( ) throws TskCoreException

Gets the added date field from the case database.

Returns
The date time when the image was added in epoch seconds.
Exceptions
TskCoreExceptionThrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

String org.sleuthkit.datamodel.DataSource.getDeviceId ( )

Gets the ASCII-printable identifier for the device associated with the data source. This identifier is intended to be unique across multiple cases (e.g., a UUID).

Returns
The device id.

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

Host org.sleuthkit.datamodel.DataSource.getHost ( ) throws TskCoreException

Gets the host for this data source.

Returns
The host
Exceptions
TskCoreException

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

String org.sleuthkit.datamodel.DataSource.getTimeZone ( )

Gets the time zone that was used to process the data source.

Returns
The time zone.

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

void org.sleuthkit.datamodel.DataSource.setAcquisitionDetails ( String  details) throws TskCoreException

Sets the acquisition details field in the case database.

Parameters
detailsThe acquisition details
Exceptions
TskCoreExceptionThrown if the data can not be written

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

void org.sleuthkit.datamodel.DataSource.setAcquisitionToolDetails ( String  name,
String  version,
String  settings 
) throws TskCoreException

Sets the acquisition tool details such as its name, version number and any settings used during the acquisition to acquire data.

Parameters
nameThe name of the acquisition tool. May be NULL.
versionThe acquisition tool version number. May be NULL.
settingsThe settings used by the acquisition tool. May be NULL.
Exceptions
TskCoreExceptionThrown if the data can not be written

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

void org.sleuthkit.datamodel.DataSource.setDisplayName ( String  newName) throws TskCoreException

Set the name for this data source.

Parameters
newNameThe new name for the data source
Exceptions
TskCoreExceptionThrown if an error occurs while updating the database

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.


The documentation for this interface was generated from the following file:

Copyright © 2011-2021 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.