Sleuth Kit Java Bindings (JNI)
4.12.1
Java bindings for using The Sleuth Kit
|
Inherits org.sleuthkit.datamodel.blackboardutils.ArtifactHelperBase.
Public Member Functions | |
WebBrowserArtifactsHelper (SleuthkitCase caseDb, String moduleName, Content srcContent, Long ingestJobId) | |
WebBrowserArtifactsHelper (SleuthkitCase caseDb, String moduleName, Content srcContent) | |
BlackboardArtifact | addWebBookmark (String url, String title, long creationTime, String progName) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebBookmark (String url, String title, long creationTime, String progName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebCookie (String url, long creationTime, String name, String value, String programName) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebCookie (String url, long creationTime, String name, String value, String programName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebDownload (String url, long startTime, String path, String programName) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebDownload (String url, long startTime, String path, String programName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebFormAddress (String personName, String email, String phoneNumber, String mailingAddress, long creationTime, long accessTime, int count) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebFormAddress (String personName, String email, String phoneNumber, String mailingAddress, long creationTime, long accessTime, int count, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebFormAutofill (String name, String value, long creationTime, long accessTime, int count) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebFormAutofill (String name, String value, long creationTime, long accessTime, int count, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebHistory (String url, long accessTime, String referrer, String title, String programName) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebHistory (String url, long accessTime, String referrer, String title, String programName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
A class that helps modules to create web browser artifacts: bookmarks, cookies, downloads, history, and web form address and autofill data.
Definition at line 45 of file WebBrowserArtifactsHelper.java.
org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.WebBrowserArtifactsHelper | ( | SleuthkitCase | caseDb, |
String | moduleName, | ||
Content | srcContent, | ||
Long | ingestJobId | ||
) |
Constructs an instance of a class that helps modules to create web browser artifacts: bookmarks, cookies, downloads, history, and web form address and autofill data.
caseDb | The case database. |
moduleName | The name of the module creating the artifacts. |
srcContent | The source/parent content of the artifacts. |
ingestJobId | The numeric identifier of the ingest job within which the artifacts are being created, may be null. |
Definition at line 66 of file WebBrowserArtifactsHelper.java.
org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.WebBrowserArtifactsHelper | ( | SleuthkitCase | caseDb, |
String | moduleName, | ||
Content | srcContent | ||
) |
Constructs an instance of a class that helps modules to create web browser artifacts: bookmarks, cookies, downloads, history, and web form address and autofill data.
caseDb | The case database. |
moduleName | The name of the module creating the artifacts. |
srcContent | The source/parent content of the artifacts. |
Definition at line 83 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebBookmark | ( | String | url, |
String | title, | ||
long | creationTime, | ||
String | progName | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_BOOKMARK artifact.
url | Bookmark URL, required. |
title | Bookmark title, may be empty/null. |
creationTime | Date/time created, may be 0 if not available. |
progName | Application/program that created bookmark, may be empty/null. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 101 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebBookmark | ( | String | url, |
String | title, | ||
long | creationTime, | ||
String | progName, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_BOOKMARK artifact.
url | Bookmark URL, required. |
title | Bookmark title, may be empty/null. |
creationTime | Date/time created, may be 0 if not available. |
progName | Application/program that created bookmark, may be empty/null. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 121 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.Content.newDataArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_CREATED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_TITLE, and org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebCookie | ( | String | url, |
long | creationTime, | ||
String | name, | ||
String | value, | ||
String | programName | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_COOKIE artifact.
url | Url of the site that created the cookie, required. |
creationTime | Create time of cookie, may be 0 if not available. |
name | Cookie name, may be empty or null. |
value | Cookie value, may be empty or null. |
programName | Name of the application/program that created the cookie, may be empty or null. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 163 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebCookie | ( | String | url, |
long | creationTime, | ||
String | name, | ||
String | value, | ||
String | programName, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_COOKIE artifact.
url | Url of the site that created the cookie, required. |
creationTime | Create time of cookie, may be 0 if not available. |
name | Cookie name, may be empty or null. |
value | Cookie value, may be empty or null. |
programName | Name of the application/program that created the cookie, may be empty or null. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 189 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.Content.newDataArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL, and org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_VALUE.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebDownload | ( | String | url, |
long | startTime, | ||
String | path, | ||
String | programName | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_DOWNNLOAD artifact.
url | URL downloaded from, required. |
startTime | Date/time downloaded, 0 if not available. |
path | Path of downloaded file, required. |
programName | Program that initiated the download, may be empty or null. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 232 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebDownload | ( | String | url, |
long | startTime, | ||
String | path, | ||
String | programName, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_DOWNNLOAD artifact.
url | URL downloaded from, required. |
startTime | Date/time downloaded, 0 if not available. |
path | Path of downloaded file, required. |
programName | Program that initiated the download, may be empty or null. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 251 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.Content.newDataArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PATH, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, and org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAddress | ( | String | personName, |
String | email, | ||
String | phoneNumber, | ||
String | mailingAddress, | ||
long | creationTime, | ||
long | accessTime, | ||
int | count | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_FORM_ADDRESS artifact.
personName | Person name, required. |
Email address, may be empty or null. | |
phoneNumber | Phone number, may be empty or null. |
mailingAddress | Mailing address, may be empty or null. |
creationTime | Creation time, may be 0 if not available. |
accessTime | Last access time, may be 0 if not available. |
count | Use count, may be 0 if not available. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 294 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAddress | ( | String | personName, |
String | email, | ||
String | phoneNumber, | ||
String | mailingAddress, | ||
long | creationTime, | ||
long | accessTime, | ||
int | count, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_FORM_ADDRESS artifact.
personName | Person name, required. |
Email address, may be empty or null. | |
phoneNumber | Phone number, may be empty or null. |
mailingAddress | Mailing address, may be empty or null. |
creationTime | Creation time, may be 0 if not available. |
accessTime | Last access time, may be 0 if not available. |
count | Use count, may be 0 if not available. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 319 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.Account.Type.EMAIL, org.sleuthkit.datamodel.Content.newDataArtifact(), org.sleuthkit.datamodel.Account.Type.PHONE, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_COUNT, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_CREATED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_EMAIL, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_LOCATION, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_NAME, and org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PHONE_NUMBER.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAutofill | ( | String | name, |
String | value, | ||
long | creationTime, | ||
long | accessTime, | ||
int | count | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_FORM_AUTOFILL artifact.
name | Name of autofill field, required. |
value | Value of autofill field, required. |
creationTime | Create date/time, may be 0 if not available. |
accessTime | Last access date/time, may be 0 if not available. |
count | Count of times used, may be 0 if not available. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 381 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAutofill | ( | String | name, |
String | value, | ||
long | creationTime, | ||
long | accessTime, | ||
int | count, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_FORM_AUTOFILL artifact.
name | Name of autofill field, required. |
value | Value of autofill field, required. |
creationTime | Create date/time, may be 0 if not available. |
accessTime | Last access date/time, may be 0 if not available. |
count | Count of times used, may be 0 if not available. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 404 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.Content.newDataArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_COUNT, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_CREATED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_NAME, and org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_VALUE.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebHistory | ( | String | url, |
long | accessTime, | ||
String | referrer, | ||
String | title, | ||
String | programName | ||
) | throws TskCoreException, BlackboardException |
Adds a Web History artifact.
url | Url visited, required. |
accessTime | Last access time, may be 0 if not available. |
referrer | Referrer, may be empty or null. |
title | Website title, may be empty or null. |
programName | Application/program recording the history, may be empty or null. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 447 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebHistory | ( | String | url, |
long | accessTime, | ||
String | referrer, | ||
String | title, | ||
String | programName, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a Web History artifact.
url | Url visited, required. |
accessTime | Last access time, may be 0 if not available. |
referrer | Referrer, may be empty or null. |
title | Website title, may be empty or null. |
programName | Application/program recording the history, may be empty or null. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 469 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.Content.newDataArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_REFERRER, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_TITLE, and org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL.
Copyright © 2011-2021 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.