Sleuth Kit Java Bindings (JNI)  4.13.0
Java bindings for using The Sleuth Kit
Public Member Functions | Static Public Member Functions | Public Attributes | List of all members
org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE Enum Reference

Inherits org.sleuthkit.datamodel.SleuthkitVisitableItem.

Public Member Functions

public< T > T accept (SleuthkitItemVisitor< T > visitor)
 
Category getCategory ()
 
String getDisplayName ()
 
String getLabel ()
 
int getTypeID ()
 

Static Public Member Functions

static ARTIFACT_TYPE fromID (int id)
 
static ARTIFACT_TYPE fromLabel (String label)
 

Public Attributes

 TSK_ACCOUNT
 
 TSK_ASSOCIATED_OBJECT
 
 TSK_BACKUP_EVENT
 
 TSK_BLUETOOTH_ADAPTER
 
 TSK_BLUETOOTH_PAIRING
 
 TSK_CALENDAR_ENTRY
 
 TSK_CALLLOG
 
 TSK_CLIPBOARD_CONTENT
 
 TSK_CONTACT
 
 TSK_DATA_SOURCE_USAGE
 
 TSK_DELETED_PROG
 
 TSK_DEVICE_ATTACHED
 
 TSK_DEVICE_INFO
 
 TSK_DOWNLOAD_SOURCE
 
 TSK_EMAIL_MSG
 
 TSK_ENCRYPTION_DETECTED
 
 TSK_ENCRYPTION_SUSPECTED
 
 TSK_EXT_MISMATCH_DETECTED
 
 TSK_EXTRACTED_TEXT
 
 TSK_FACE_DETECTED
 
 TSK_GEN_INFO
 
 TSK_GPS_AREA
 
 TSK_GPS_BOOKMARK
 
 TSK_GPS_LAST_KNOWN_LOCATION
 
 TSK_GPS_ROUTE
 
 TSK_GPS_SEARCH
 
 TSK_GPS_TRACK
 
 TSK_GPS_TRACKPOINT
 
 TSK_HASHSET_HIT
 
 TSK_INSTALLED_PROG
 
 TSK_INTERESTING_ARTIFACT_HIT
 
 TSK_INTERESTING_FILE_HIT
 an interesting/notable file hit More...
 
 TSK_INTERESTING_ITEM
 
 TSK_KEYWORD_HIT
 
 TSK_MALWARE
 
 TSK_MESSAGE
 
 TSK_METADATA
 
 TSK_METADATA_EXIF
 
 TSK_OBJECT_DETECTED
 
 TSK_OS_ACCOUNT
 
 TSK_OS_INFO
 
 TSK_PREVIOUSLY_NOTABLE
 
 TSK_PREVIOUSLY_SEEN
 
 TSK_PREVIOUSLY_UNSEEN
 
 TSK_PROG_NOTIFICATIONS
 
 TSK_PROG_RUN
 
 TSK_RECENT_OBJECT
 
 TSK_REMOTE_DRIVE
 
 TSK_SCREEN_SHOTS
 
 TSK_SERVICE_ACCOUNT
 
 TSK_SIM_ATTACHED
 
 TSK_SPEED_DIAL_ENTRY
 
 TSK_TAG_ARTIFACT
 
 TSK_TAG_FILE
 
 TSK_TL_EVENT
 
 TSK_TOOL_OUTPUT
 
 TSK_USER_CONTENT_SUSPECTED
 
 TSK_USER_DEVICE_EVENT
 
 TSK_VERIFICATION_FAILED
 
 TSK_WEB_ACCOUNT_TYPE
 
 TSK_WEB_BOOKMARK
 
 TSK_WEB_CACHE
 
 TSK_WEB_CATEGORIZATION
 
 TSK_WEB_COOKIE
 
 TSK_WEB_DOWNLOAD
 
 TSK_WEB_FORM_ADDRESS
 
 TSK_WEB_FORM_AUTOFILL
 
 TSK_WEB_HISTORY
 
 TSK_WEB_SEARCH_QUERY
 
 TSK_WIFI_NETWORK
 
 TSK_WIFI_NETWORK_ADAPTER
 
 TSK_YARA_HIT
 

Detailed Description

Enum for the standard artifact types. Refer to http://sleuthkit.org/sleuthkit/docs/jni-docs/latest/artifact_catalog_page.html for details on the standard attributes for each artifact type.

Definition at line 1603 of file BlackboardArtifact.java.

Member Function Documentation

public<T> T org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.accept ( SleuthkitItemVisitor< T >  visitor)

Accepts a visitor SleuthkitItemVisitor that will perform an operation on this artifact type and return some object as the result of the operation.

Parameters
visitorThe visitor, where the type parameter of the visitor is the type of the object that will be returned as the result of the visit operation.
Returns
An object of type T.

Implements org.sleuthkit.datamodel.SleuthkitVisitableItem.

Definition at line 2143 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitItemVisitor< T >.visit().

static ARTIFACT_TYPE org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.fromID ( int  id)
static

Gets the artifact type enum value that corresponds to a given type id. This method should only be used when the id is known to be one of the built-in types - otherwise use getArtifactType() in SleuthkitCase.

Parameters
idThe type id.
Returns
the corresponding enum

Definition at line 2113 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTypesInUse(), and org.sleuthkit.datamodel.BlackboardArtifact.getShortDescription().

static ARTIFACT_TYPE org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.fromLabel ( String  label)
static

Gets the standard artifact type enum value that corresponds to a given type name (label).

Parameters
labelThe type name
Returns
The enum element.

Definition at line 2094 of file BlackboardArtifact.java.

Category org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getCategory ( )

Gets the type category for this standard artifact type.

Returns
The type category.

Definition at line 2082 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getDisplayName ( )

Gets the display name of this standard artifact type.

Returns
The display name.

Definition at line 2127 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getLabel ( )

Gets the type name (label) for this standard artifact type.

Returns
The type name.

Definition at line 2073 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

int org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getTypeID ( )

Gets the type id for this standard artifact type.

Returns
type id

Definition at line 2064 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTypesInUse(), and org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

Member Data Documentation

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ACCOUNT
Initial value:
=(39, "TSK_ACCOUNT",
bundle.getString("BlackboardArtifact.tskAccount.text"), Category.DATA_ARTIFACT)

An account.

Definition at line 1838 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.CommunicationsManager.getAccountFileInstances(), and org.sleuthkit.datamodel.Report.newDataArtifact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ASSOCIATED_OBJECT
Initial value:
=(55, "TSK_ASSOCIATED_OBJECT",
bundle.getString("BlackboardArtifact.tskAssociatedObject.text"), Category.DATA_ARTIFACT)

An associated object.

Definition at line 1926 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BACKUP_EVENT
Initial value:
=(63, "TSK_BACKUP_EVENT",
bundle.getString("BlackboardArtifact.tskBackupEvent.text"), Category.DATA_ARTIFACT)

System/Application/File backup.

Definition at line 1963 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_ADAPTER
Initial value:
=(45, "TSK_BLUETOOTH_ADAPTER",
bundle.getString("BlackboardArtifact.tskBluetoothAdapter.text"), Category.DATA_ARTIFACT)

A bluetooth adapter.

Definition at line 1868 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_PAIRING
Initial value:
=(28, "TSK_BLUETOOTH_PAIRING",
bundle.getString("BlackboardArtifact.tskBluetoothPairing.text"), Category.DATA_ARTIFACT)

A bluetooth pairing entry.

Definition at line 1777 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALENDAR_ENTRY
Initial value:
=(26, "TSK_CALENDAR_ENTRY",
bundle.getString("BlackboardArtifact.tskCalendarEntry.text"), Category.DATA_ARTIFACT)

A calendar entry from a phone, PIM, or a calendar application.

Definition at line 1767 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALLLOG
Initial value:
=(25, "TSK_CALLLOG",
bundle.getString("BlackboardArtifact.tskCalllog.text"), Category.DATA_ARTIFACT)

A phone call log extracted from a phone or softphone application. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create call log artifacts.

Definition at line 1762 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CLIPBOARD_CONTENT
Initial value:
=(54, "TSK_CLIPBOARD_CONTENT",
bundle.getString("BlackboardArtifact.tskClipboardContent.text"), Category.DATA_ARTIFACT)

Indicates clipboard content

Definition at line 1921 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CONTACT
Initial value:
=(23, "TSK_CONTACT",
bundle.getString("BlackboardArtifact.tskContact.text"), Category.DATA_ARTIFACT)

A contact extracted from a phone, or from an address book/email/messaging application. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create contact artifacts.

Definition at line 1746 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DATA_SOURCE_USAGE
Initial value:
=(48, "TSK_DATA_SOURCE_USAGE",
bundle.getString("BlackboardArtifact.tskDataSourceUsage.text"), Category.ANALYSIS_RESULT)

Categorization information for a data source.

Definition at line 1883 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DELETED_PROG
Initial value:
=(64, "TSK_DELETED_PROG",
bundle.getString("BlackboardArtifact.tskDeletedProg.text"), Category.DATA_ARTIFACT)

Programs that have been deleted.

Definition at line 1968 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_ATTACHED
Initial value:
=(11, "TSK_DEVICE_ATTACHED",
bundle.getString("BlackboardArtifact.tskDeviceAttached.text"), Category.DATA_ARTIFACT)

An attached device.

Definition at line 1669 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_INFO
Initial value:
=(43, "TSK_DEVICE_INFO",
bundle.getString("BlackboardArtifact.tskDeviceInfo.text"), Category.DATA_ARTIFACT)

Information related to a device.

Definition at line 1858 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DOWNLOAD_SOURCE
Initial value:
=(51, "TSK_DOWNLOAD_SOURCE",
bundle.getString("BlackboardArtifact.tskDownloadSource.text"), Category.DATA_ARTIFACT)

Indicates source of a file/object

Deprecated:
TSK_ASSOCIATED_OBJECT should be used instead to associate the file/object with its source artifact/object..

Definition at line 1906 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EMAIL_MSG
Initial value:
=(13, "TSK_EMAIL_MSG",
bundle.getString("BlackboardArtifact.tskEmailMsg.text"), Category.DATA_ARTIFACT)

An email message.

Definition at line 1683 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_DETECTED
Initial value:
=(33, "TSK_ENCRYPTION_DETECTED",
bundle.getString("BlackboardArtifact.tskEncryptionDetected.text"), Category.ANALYSIS_RESULT)

An encrypted file.

Definition at line 1802 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_SUSPECTED
Initial value:
=(40, "TSK_ENCRYPTION_SUSPECTED",
bundle.getString("BlackboardArtifact.tskEncryptionSuspected.text"), Category.ANALYSIS_RESULT)

An encrypted file.

Definition at line 1843 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EXT_MISMATCH_DETECTED
Initial value:
=(34, "TSK_EXT_MISMATCH_DETECTED",
bundle.getString("BlackboardArtifact.tskExtMismatchDetected.text"), Category.ANALYSIS_RESULT)

A file with an extension that does not match its MIME type.

Definition at line 1807 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EXTRACTED_TEXT
Initial value:
=(14, "TSK_EXTRACTED_TEXT",
bundle.getString("BlackboardArtifact.tskExtractedText.text"), Category.DATA_ARTIFACT)

Text extracted from the source content.

Definition at line 1688 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_FACE_DETECTED
Initial value:
=(38, "TSK_FACE_DETECTED",
bundle.getString("BlackboardArtifact.tskFaceDetected.text"), Category.ANALYSIS_RESULT)

A human face was detected in a media file.

Definition at line 1833 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GEN_INFO
Initial value:
=(1, "TSK_GEN_INFO",
bundle.getString("BlackboardArtifact.tskGenInfo.text"), Category.DATA_ARTIFACT)

A generic information artifact.

Definition at line 1608 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.AbstractContent.getArtifacts(), org.sleuthkit.datamodel.AbstractContent.getGenInfoArtifact(), and org.sleuthkit.datamodel.AbstractContent.newArtifact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_AREA
Initial value:
=(67, "TSK_GPS_AREA",
bundle.getString("BlackboardArtifact.tskGPSArea.text"), Category.DATA_ARTIFACT)

Stores the outline of an area using GPS coordinates.

Definition at line 1983 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_BOOKMARK
Initial value:
=(29, "TSK_GPS_BOOKMARK",
bundle.getString("BlackboardArtifact.tskGpsBookmark.text"), Category.DATA_ARTIFACT)

A GPS bookmark / way point that the user saved.

Definition at line 1782 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_LAST_KNOWN_LOCATION
Initial value:
=(30, "TSK_GPS_LAST_KNOWN_LOCATION",
bundle.getString("BlackboardArtifact.tskGpsLastKnownLocation.text"), Category.DATA_ARTIFACT)

A GPS last known location record.

Definition at line 1787 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_ROUTE
Initial value:
=(36, "TSK_GPS_ROUTE",
bundle.getString("BlackboardArtifact.tskGpsRoute.text"), Category.DATA_ARTIFACT)

A route based on GPS coordinates. Use org.sleuthkit.datamodel.blackboardutils.GeoArtifactsHelper.addRoute() to create route artifacts.

Definition at line 1823 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_SEARCH
Initial value:
=(31, "TSK_GPS_SEARCH",
bundle.getString("BlackboardArtifact.tskGpsSearch.text"), Category.DATA_ARTIFACT)

A GPS search record.

Definition at line 1792 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_TRACK
Initial value:
=(58, "TSK_GPS_TRACK",
bundle.getString("BlackboardArtifact.tskTrack.text"), Category.DATA_ARTIFACT)

Stores a GPS track log. Use org.sleuthkit.datamodel.blackboardutils.GeoArtifactsHelper.addTrack() to create track artifacts.

Definition at line 1943 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_TRACKPOINT
Initial value:
=(7, "TSK_GPS_TRACKPOINT",
bundle.getString("BlackboardArtifact.tskGpsTrackpoint.text"), Category.DATA_ARTIFACT)

A GPS track point (geolocation data).

Deprecated:
Use TSK_GPS_TRACK instead

Definition at line 1649 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_HASHSET_HIT
Initial value:
=(10, "TSK_HASHSET_HIT",
bundle.getString("BlackboardArtifact.tskHashsetHit.text"), Category.ANALYSIS_RESULT)

A hit for a hash set (hash database).

Definition at line 1664 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.AbstractContent.getHashSetNames().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INSTALLED_PROG
Initial value:
=(8, "TSK_INSTALLED_PROG",
bundle.getString("BlackboardArtifact.tskInstalledProg.text"), Category.DATA_ARTIFACT)

An installed program.

Definition at line 1654 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_ARTIFACT_HIT
Initial value:
=(35, "TSK_INTERESTING_ARTIFACT_HIT",
bundle.getString("BlackboardArtifact.tskInterestingArtifactHit.text"), Category.ANALYSIS_RESULT)

An meta-artifact to call attention to an artifact deemed to be interesting.

Deprecated:
Use TSK_INTERESTING_ITEM instead.

Definition at line 1816 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT
Initial value:
=(12, "TSK_INTERESTING_FILE_HIT",
bundle.getString("BlackboardArtifact.tskInterestingFileHit.text"), Category.ANALYSIS_RESULT)

an interesting/notable file hit

An meta-artifact to call attention to a file deemed to be interesting.

Deprecated:
Use TSK_INTERESTING_ITEM instead.

Definition at line 1678 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_ITEM
Initial value:
=(72, "TSK_INTERESTING_ITEM",
bundle.getString("BlackboardArtifact.tskInterestingItem.text"), Category.ANALYSIS_RESULT)

An meta-artifact to call attention to an item deemed to be interesting.

Definition at line 2009 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT
Initial value:
=(9, "TSK_KEYWORD_HIT",
bundle.getString("BlackboardArtifact.tskKeywordHits.text"), Category.ANALYSIS_RESULT)

A search hit for a keyword.

Definition at line 1659 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.Report.getArtifacts(), org.sleuthkit.datamodel.Report.getArtifactsCount(), org.sleuthkit.datamodel.Report.newArtifact(), and org.sleuthkit.datamodel.Report.newDataArtifact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_MALWARE
Initial value:
=(73, "TSK_MALWARE",
bundle.getString("BlackboardArtifact.tskMalware.text"), Category.ANALYSIS_RESULT)

Malware artifact.

Definition at line 2014 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_MESSAGE
Initial value:
=(24, "TSK_MESSAGE",
bundle.getString("BlackboardArtifact.tskMessage.text"), Category.DATA_ARTIFACT)

An SMS/MMS message extracted from phone, or from another messaging application, like IM. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create message artifacts.

Definition at line 1754 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA
Initial value:
=(57, "TSK_METADATA",
bundle.getString("BlackboardArtifact.tskMetadata.text"), Category.DATA_ARTIFACT)

Stores metadata about an object.

Definition at line 1936 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA_EXIF
Initial value:
=(16, "TSK_METADATA_EXIF",
bundle.getString("BlackboardArtifact.tskMetadataExif.text"), Category.ANALYSIS_RESULT)

EXIF metadata.

Definition at line 1698 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OBJECT_DETECTED
Initial value:
=(41, "TSK_OBJECT_DETECTED",
bundle.getString("BlackboardArtifact.tskObjectDetected.text"), Category.ANALYSIS_RESULT)

Definition at line 1848 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_ACCOUNT
Initial value:
=(20, "TSK_OS_ACCOUNT",
bundle.getString("BlackboardArtifact.tskOsAccount.text"), Category.DATA_ARTIFACT)

An operating system user account.

Definition at line 1725 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_INFO
Initial value:
=(19, "TSK_OS_INFO",
bundle.getString("BlackboardArtifact.tskOsInfo.text"), Category.DATA_ARTIFACT)

Information pertaining to an operating system.

Definition at line 1719 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PREVIOUSLY_NOTABLE
Initial value:
=(71, "TSK_PREVIOUSLY_NOTABLE",
bundle.getString("BlackboardArtifact.tskPreviouslyNotable.text"), Category.ANALYSIS_RESULT)

Indicates that the file or artifact was previously tagged as "Notable" in another Autopsy case.

Definition at line 2003 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PREVIOUSLY_SEEN
Initial value:
=(69, "TSK_PREVIOUSLY_SEEN",
bundle.getString("BlackboardArtifact.tskPreviouslySeen.text"), Category.ANALYSIS_RESULT)

Indicates that the file or artifact was previously seen in another Autopsy case.

Definition at line 1991 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PREVIOUSLY_UNSEEN
Initial value:
=(70, "TSK_PREVIOUSLY_UNSEEN",
bundle.getString("BlackboardArtifact.tskPreviouslyUnseen.text"), Category.ANALYSIS_RESULT)

Indicates that the file or artifact was previously unseen in another Autopsy case.

Definition at line 1997 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PROG_NOTIFICATIONS
Initial value:
=(62, "TSK_PROG_NOTIFICATIONS",
bundle.getString("BlackboardArtifact.tskProgNotifications.text"), Category.DATA_ARTIFACT)

Notifications Sent to User.

Definition at line 1958 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PROG_RUN
Initial value:
=(32, "TSK_PROG_RUN",
bundle.getString("BlackboardArtifact.tskProgRun.text"), Category.DATA_ARTIFACT)

Application run information.

Definition at line 1797 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_RECENT_OBJECT
Initial value:
=(6, "TSK_RECENT_OBJ",
bundle.getString("BlackboardArtifact.tsk.recentObject.text"), Category.DATA_ARTIFACT)

A recent object.

Definition at line 1641 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_REMOTE_DRIVE
Initial value:
=(37, "TSK_REMOTE_DRIVE",
bundle.getString("BlackboardArtifact.tskRemoteDrive.text"), Category.DATA_ARTIFACT)

A remote drive.

Definition at line 1828 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SCREEN_SHOTS
Initial value:
=(60, "TSK_SCREEN_SHOTS",
bundle.getString("BlackboardArtifact.tskScreenShots.text"), Category.DATA_ARTIFACT)

Screen shots from device or Application.

Definition at line 1953 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SERVICE_ACCOUNT
Initial value:
=(21, "TSK_SERVICE_ACCOUNT",
bundle.getString("BlackboardArtifact.tskServiceAccount.text"), Category.DATA_ARTIFACT)

An application or Web service account.

Definition at line 1730 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SIM_ATTACHED
Initial value:
=(44, "TSK_SIM_ATTACHED",
bundle.getString("BlackboardArtifact.tskSimAttached.text"), Category.DATA_ARTIFACT)

A SIM card.

Definition at line 1863 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SPEED_DIAL_ENTRY
Initial value:
=(27, "TSK_SPEED_DIAL_ENTRY",
bundle.getString("BlackboardArtifact.tskSpeedDialEntry.text"), Category.DATA_ARTIFACT)

A speed dial entry from a phone.

Definition at line 1772 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TAG_ARTIFACT
Initial value:
=(18, "TSK_TAG_ARTIFACT",
bundle.getString("BlackboardArtifact.tskTagArtifact.text"), Category.ANALYSIS_RESULT)

A tag applied to an artifact.

Deprecated:
Tags are no longer treated as artifacts.

Definition at line 1714 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TAG_FILE
Initial value:
=(17, "TSK_TAG_FILE",
bundle.getString("BlackboardArtifact.tagFile.text"), Category.ANALYSIS_RESULT)

A tag applied to a file.

Deprecated:
Tags are no longer treated as artifacts.

Definition at line 1706 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TL_EVENT
Initial value:
=(53, "TSK_TL_EVENT",
bundle.getString("BlackboardArtifact.tskTLEvent.text"), Category.DATA_ARTIFACT)

A generic (timeline) event.

Definition at line 1916 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TOOL_OUTPUT
Initial value:
=(22, "TSK_TOOL_OUTPUT",
bundle.getString("BlackboardArtifact.tskToolOutput.text"), Category.DATA_ARTIFACT)

Output from an external tool or module (raw text).

Deprecated:
Tool output should be saved as a report.

Definition at line 1738 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_USER_CONTENT_SUSPECTED
Initial value:
=(56, "TSK_USER_CONTENT_SUSPECTED",
bundle.getString("BlackboardArtifact.tskUserContentSuspected.text"), Category.ANALYSIS_RESULT)

Indicates file may have been created by the user.

Definition at line 1931 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_USER_DEVICE_EVENT
Initial value:
=(65, "TSK_USER_DEVICE_EVENT",
bundle.getString("BlackboardArtifact.tskUserDeviceEvent.text"), Category.DATA_ARTIFACT)

Activity on the System/Application.

Definition at line 1973 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_VERIFICATION_FAILED
Initial value:
=(47, "TSK_VERIFICATION_FAILED",
bundle.getString("BlackboardArtifact.tskVerificationFailed.text"), Category.ANALYSIS_RESULT)

Indicates a verification failure

Definition at line 1878 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_ACCOUNT_TYPE
Initial value:
=(59, "TSK_WEB_ACCOUNT_TYPE",
bundle.getString("BlackboardArtifact.tskWebAccountType.text"), Category.ANALYSIS_RESULT)

Stores a role on a given domain.

Definition at line 1948 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK
Initial value:
=(2, "TSK_WEB_BOOKMARK",
bundle.getString("BlackboardArtifact.tskWebBookmark.text"), Category.DATA_ARTIFACT)

A Web bookmark. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create bookmark artifacts.

Definition at line 1615 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_CACHE
Initial value:
=(52, "TSK_WEB_CACHE",
bundle.getString("BlackboardArtifact.tskWebCache.text"), Category.DATA_ARTIFACT)

Indicates web cache data

Definition at line 1911 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_CATEGORIZATION
Initial value:
=(68, "TSK_WEB_CATEGORIZATION",
bundle.getString("BlackboardArtifact.tskWebCategorization.text"), Category.ANALYSIS_RESULT)

Definition at line 1985 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE
Initial value:
=(3, "TSK_WEB_COOKIE",
bundle.getString("BlackboardArtifact.tskWebCookie.text"), Category.DATA_ARTIFACT)

A Web cookie. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create cookie artifacts.

Definition at line 1622 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD
Initial value:
=(5, "TSK_WEB_DOWNLOAD",
bundle.getString("BlackboardArtifact.tskWebDownload.text"), Category.DATA_ARTIFACT)

A Web download. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create download artifacts.

Definition at line 1636 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_ADDRESS
Initial value:
=(50, "TSK_WEB_FORM_ADDRESSES ",
bundle.getString("BlackboardArtifact.tskWebFormAddresses.text"), Category.DATA_ARTIFACT)

Indicates an person's address filled in a web form. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create web form address artifacts.

Definition at line 1897 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_AUTOFILL
Initial value:
=(49, "TSK_WEB_FORM_AUTOFILL",
bundle.getString("BlackboardArtifact.tskWebFormAutofill.text"), Category.DATA_ARTIFACT)

Indicates auto fill data from a Web form. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create web form autofill artifacts.

Definition at line 1890 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY
Initial value:
=(4, "TSK_WEB_HISTORY",
bundle.getString("BlackboardArtifact.tskWebHistory.text"), Category.DATA_ARTIFACT)

A Web history. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create history artifacts.

Definition at line 1629 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_SEARCH_QUERY
Initial value:
=(15, "TSK_WEB_SEARCH_QUERY",
bundle.getString("BlackboardArtifact.tskWebSearchQuery.text"), Category.DATA_ARTIFACT)

A Web search engine query extracted from Web history.

Definition at line 1693 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WIFI_NETWORK
Initial value:
=(42, "TSK_WIFI_NETWORK",
bundle.getString("BlackboardArtifact.tskWIFINetwork.text"), Category.DATA_ARTIFACT)

A wireless network.

Definition at line 1853 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WIFI_NETWORK_ADAPTER
Initial value:
=(46, "TSK_WIFI_NETWORK_ADAPTER",
bundle.getString("BlackboardArtifact.tskWIFINetworkAdapter.text"), Category.DATA_ARTIFACT)

A wireless network adapter.

Definition at line 1873 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_YARA_HIT
Initial value:
=(66, "TSK_YARA_HIT",
bundle.getString("BlackboardArtifact.tskYaraHit.text"), Category.ANALYSIS_RESULT)

Indicates that the file had a yara pattern match hit.

Definition at line 1978 of file BlackboardArtifact.java.

The documentation for this enum was generated from the following file:

Copyright © 2011-2024 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.