Inherits org.sleuthkit.datamodel.Content.

Inherited by org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

Public Member Functions
String	getAcquisitionDetails () throws TskCoreException

String	getAcquisitionToolName () throws TskCoreException

String	getAcquisitionToolSettings () throws TskCoreException

String	getAcquisitionToolVersion () throws TskCoreException

long	getContentSize (SleuthkitCase sleuthkitCase) throws TskCoreException

Long	getDateAdded () throws TskCoreException

String	getDeviceId ()

Host	getHost () throws TskCoreException

String	getTimeZone ()

void	setAcquisitionDetails (String details) throws TskCoreException

void	setAcquisitionToolDetails (String name, String version, String settings) throws TskCoreException

void	setDisplayName (String newName) throws TskCoreException

Public Member Functions inherited from org.sleuthkit.datamodel.Content
public< T > T	accept (ContentVisitor< T > v)

void	close ()

Score	getAggregateScore () throws TskCoreException

List< AnalysisResult >	getAllAnalysisResults () throws TskCoreException

ArrayList< BlackboardArtifact >	getAllArtifacts () throws TskCoreException

long	getAllArtifactsCount () throws TskCoreException

List< DataArtifact >	getAllDataArtifacts () throws TskCoreException

List< AnalysisResult >	getAnalysisResults (BlackboardArtifact.Type artifactType) throws TskCoreException

ArrayList< BlackboardArtifact >	getArtifacts (String artifactTypeName) throws TskCoreException

ArrayList< BlackboardArtifact >	getArtifacts (int artifactTypeID) throws TskCoreException

ArrayList< BlackboardArtifact >	getArtifacts (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException

long	getArtifactsCount (String artifactTypeName) throws TskCoreException

long	getArtifactsCount (int artifactTypeID) throws TskCoreException

long	getArtifactsCount (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException

List< Content >	getChildren () throws TskCoreException

int	getChildrenCount () throws TskCoreException

List< Long >	getChildrenIds () throws TskCoreException

Content	getDataSource () throws TskCoreException

BlackboardArtifact	getGenInfoArtifact () throws TskCoreException

BlackboardArtifact	getGenInfoArtifact (boolean create) throws TskCoreException

ArrayList< BlackboardAttribute >	getGenInfoAttributes (BlackboardAttribute.ATTRIBUTE_TYPE attr_type) throws TskCoreException

Set< String >	getHashSetNames () throws TskCoreException

long	getId ()

String	getName ()

Content	getParent () throws TskCoreException

long	getSize ()

String	getUniquePath () throws TskCoreException

boolean	hasChildren () throws TskCoreException

AnalysisResultAdded	newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList) throws TskCoreException

AnalysisResultAdded	newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList, long dataSourceId) throws TskCoreException

BlackboardArtifact	newArtifact (int artifactTypeID) throws TskCoreException

BlackboardArtifact	newArtifact (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException

DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList) throws TskCoreException

DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId) throws TskCoreException

DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId, long dataSourceId) throws TskCoreException

int	read (byte[] buf, long offset, long len) throws TskCoreException

Public Member Functions inherited from org.sleuthkit.datamodel.SleuthkitVisitableItem
public< T > T	accept (SleuthkitItemVisitor< T > v)

Detailed Description

A data source (e.g., an image, a local disk, a virtual directory of logical files, etc.).

Definition at line 25 of file DataSource.java.

Member Function Documentation

String org.sleuthkit.datamodel.DataSource.getAcquisitionDetails ( ) throws TskCoreException

Gets the acquisition details field from the case database.

Returns: The acquisition details

Exceptions

TskCoreException Thrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

String org.sleuthkit.datamodel.DataSource.getAcquisitionToolName ( ) throws TskCoreException

Gets the acquisition tool name field from the case database.

Returns: The acquisition tool name. May be Null if not set.

Exceptions

TskCoreException Thrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

String org.sleuthkit.datamodel.DataSource.getAcquisitionToolSettings ( ) throws TskCoreException

Gets the acquisition tool settings field from the case database.

Returns: The acquisition tool settings. May be Null if not set.

Exceptions

TskCoreException Thrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

String org.sleuthkit.datamodel.DataSource.getAcquisitionToolVersion ( ) throws TskCoreException

Gets the acquisition tool version field from the case database.

Returns: The acquisition tool version. May be Null if not set.

Exceptions

TskCoreException Thrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

long org.sleuthkit.datamodel.DataSource.getContentSize ( SleuthkitCase sleuthkitCase ) throws TskCoreException

Gets the size of the contents of the data source in bytes. This size can change as archive files within the data source are expanded, files are carved, etc., and is different from the size of the data source as returned by Content.getSize, which is the size of the data source as a file.

Parameters

sleuthkitCase The sleuthkit case instance from which to make calls to the database.

Returns: The size in bytes.

Exceptions

TskCoreException Thrown when there is an issue trying to retrieve data from the database.

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

Long org.sleuthkit.datamodel.DataSource.getDateAdded ( ) throws TskCoreException

Gets the added date field from the case database.

Returns: The date time when the image was added in epoch seconds.

Exceptions

TskCoreException Thrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

String org.sleuthkit.datamodel.DataSource.getDeviceId ( )

Gets the ASCII-printable identifier for the device associated with the data source. This identifier is intended to be unique across multiple cases (e.g., a UUID).

Returns: The device id.

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

Host org.sleuthkit.datamodel.DataSource.getHost ( ) throws TskCoreException

Gets the host for this data source.

Returns: The host

Exceptions

TskCoreException

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

String org.sleuthkit.datamodel.DataSource.getTimeZone ( )

Gets the time zone that was used to process the data source.

Returns: The time zone.

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

void org.sleuthkit.datamodel.DataSource.setAcquisitionDetails ( String details ) throws TskCoreException

Sets the acquisition details field in the case database.

Parameters

details The acquisition details

Exceptions

TskCoreException Thrown if the data can not be written

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

void org.sleuthkit.datamodel.DataSource.setAcquisitionToolDetails	(	String	name,
		String	version,
		String	settings
	)		throws TskCoreException

Sets the acquisition tool details such as its name, version number and any settings used during the acquisition to acquire data.

Parameters

name	The name of the acquisition tool. May be NULL.
version	The acquisition tool version number. May be NULL.
settings	The settings used by the acquisition tool. May be NULL.

Exceptions

TskCoreException Thrown if the data can not be written

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

void org.sleuthkit.datamodel.DataSource.setDisplayName ( String newName ) throws TskCoreException

Set the name for this data source.

Parameters

newName The new name for the data source

Exceptions

TskCoreException Thrown if an error occurs while updating the database

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

The documentation for this interface was generated from the following file:

/home/carriersleuth/repos/sleuthkit/bindings/java/src/org/sleuthkit/datamodel/DataSource.java

Public Member Functions

Detailed Description

Member Function Documentation