19package org.sleuthkit.datamodel;
21import java.io.Serializable;
22import java.util.Arrays;
23import java.util.Collections;
25import java.util.Objects;
26import java.util.ResourceBundle;
27import java.util.TimeZone;
28import java.util.logging.Level;
29import java.util.logging.Logger;
49 private static final ResourceBundle bundle = ResourceBundle.getBundle(
"org.sleuthkit.datamodel.Bundle");
51 private String context;
52 private String sources;
54 private long artifactID;
62 private Long parentDataSourceID;
78 this.sources = replaceNulls(source);
95 super(attributeType, valueInt);
96 this.sources = replaceNulls(source);
117 this.sources = replaceNulls(source);
136 super(attributeType, valueLong);
137 this.sources = replaceNulls(source);
155 this.sources = replaceNulls(source);
172 super(attributeType, valueDouble);
173 this.sources = replaceNulls(source);
193 this.sources = replaceNulls(source);
210 super(attributeType, valueString);
211 this.sources = replaceNulls(source);
229 this.sources = replaceNulls(source);
246 super(attributeType, valueBytes);
247 this.sources = replaceNulls(source);
267 void setArtifactId(
long artifactID) {
268 this.artifactID = artifactID;
277 if (
null != sources && !this.sources.isEmpty()) {
278 List<String> modules = Arrays.asList(sources.split(
","));
281 return Collections.emptyList();
293 this.sources = getCaseDatabase().addSourceToArtifactAttribute(
this, source);
308 if (parentArtifact ==
null) {
309 parentArtifact = getCaseDatabase().getBlackboardArtifact(
getArtifactID());
311 return parentArtifact;
329 return areValuesEqual(that) && Objects.deepEquals(thisObject, otherObject);
350 if (parentDataSourceID ==
null) {
354 final Content dataSource = parentDataSourceID !=
null ? getCaseDatabase().getContentById(parentDataSourceID) :
null;
355 if ((dataSource !=
null) && (dataSource instanceof
Image)) {
358 TimeZone tzone = TimeZone.getTimeZone(image.
getTimeZone());
362 LOGGER.log(Level.WARNING,
"Could not get timezone for image", ex);
368 return super.getDisplayString();
392 int valueInt,
long valueLong,
double valueDouble, String valueString,
byte[] valueBytes,
395 super(attributeType, valueInt, valueLong, valueDouble, valueString, valueBytes, sleuthkitCase);
396 this.artifactID = artifactID;
397 this.sources = replaceNulls(source);
398 this.context = replaceNulls(context);
407 void setParentDataSourceID(Long parentDataSourceID) {
408 this.parentDataSourceID = parentDataSourceID;
419 String getSourcesCSV() {
426 public static final class Type implements Serializable {
620 static final List<Type> STANDARD_TYPES = Collections.unmodifiableList(Arrays.asList(
773 private static final long serialVersionUID = 1L;
774 private final String typeName;
775 private final int typeID;
776 private final String displayName;
788 this.typeID = typeID;
789 this.typeName = typeName;
790 this.displayName = displayName;
791 this.valueType = valueType;
801 this.typeID = type.getTypeID();
802 this.typeName = type.getLabel();
803 this.displayName = type.getDisplayName();
804 this.valueType = type.getValueType();
813 return this.valueType;
822 return this.typeName;
840 return this.displayName;
863 return this.typeName.equals(that.getTypeName())
864 && this.displayName.equals(that.getDisplayName())
865 && this.typeID == that.getTypeID()
866 && this.valueType == that.getValueType();
872 hash = 63 * hash + Objects.hashCode(this.typeID);
873 hash = 63 * hash + Objects.hashCode(this.displayName);
874 hash = 63 * hash + Objects.hashCode(this.typeName);
875 hash = 63 * hash + Objects.hashCode(this.valueType);
881 return "(typeID= " + this.typeID
882 +
", displayName=" + this.displayName
883 +
", typeName=" + this.typeName
884 +
", valueType=" + this.valueType +
")";
892 public enum TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE {
924 private final long typeId;
925 private final String typeName;
937 private TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE(
long type, String typeName) {
939 this.typeName = typeName;
963 return this.typeName;
980 static public TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE
fromType(
long typeId) {
981 for (TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE valueType : TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.values()) {
982 if (valueType.
getType() == typeId) {
986 throw new IllegalArgumentException(
"No TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE matching type: " + typeId);
1003 static public TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE
fromLabel(String typeName) {
1004 for (TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE valueType : TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.values()) {
1005 if (valueType.
getLabel().equals(typeName)) {
1009 throw new IllegalArgumentException(
"No TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE matching type: " + typeName);
1020 public enum ATTRIBUTE_TYPE {
1023 bundle.getString(
"BlackboardAttribute.tskUrl.text"),
1026 bundle.getString(
"BlackboardAttribute.tskDatetime.text"),
1029 bundle.getString(
"BlackboardAttribute.tskName.text"),
1032 bundle.getString(
"BlackboardAttribute.tskProgName.text"),
1035 bundle.getString(
"BlackboardAttribute.tskValue.text"),
1038 bundle.getString(
"BlackboardAttribute.tskFlag.text"),
1041 bundle.getString(
"BlackboardAttribute.tskPath.text"),
1044 bundle.getString(
"BlackboardAttribute.tskKeyword.text"),
1047 bundle.getString(
"BlackboardAttribute.tskKeywordRegexp.text"),
1050 bundle.getString(
"BlackboardAttribute.tskKeywordPreview.text"),
1057 bundle.getString(
"BlackboardAttribute.tskKeywordSet.text"),
1060 bundle.getString(
"BlackboardAttribute.tskUserName.text"),
1063 bundle.getString(
"BlackboardAttribute.tskDomain.text"),
1066 bundle.getString(
"BlackboardAttribute.tskPassword.text"),
1069 bundle.getString(
"BlackboardAttribute.tskNamePerson.text"),
1072 bundle.getString(
"BlackboardAttribute.tskDeviceModel.text"),
1075 bundle.getString(
"BlackboardAttribute.tskDeviceMake.text"),
1078 bundle.getString(
"BlackboardAttribute.tskDeviceId.text"),
1081 bundle.getString(
"BlackboardAttribute.tskEmail.text"),
1084 bundle.getString(
"BlackboardAttribute.tskHashMd5.text"),
1087 bundle.getString(
"BlackboardAttribute.tskHashSha1.text"),
1090 bundle.getString(
"BlackboardAttribute.tskHashSha225.text"),
1093 bundle.getString(
"BlackboardAttribute.tskHashSha2512.text"),
1096 bundle.getString(
"BlackboardAttribute.tskText.text"),
1099 bundle.getString(
"BlackboardAttribute.tskTextFile.text"),
1102 bundle.getString(
"BlackboardAttribute.tskTextLanguage.text"),
1105 bundle.getString(
"BlackboardAttribute.tskEntropy.text"),
1112 bundle.getString(
"BlackboardAttribute.tskHashsetName.text"),
1119 bundle.getString(
"BlackboardAttribute.tskInterestingFile.text"),
1122 bundle.getString(
"BlackboardAttribute.tskReferrer.text"),
1125 bundle.getString(
"BlackboardAttribute.tskDateTimeAccessed.text"),
1128 bundle.getString(
"BlackboardAttribute.tskIpAddress.text"),
1131 bundle.getString(
"BlackboardAttribute.tskPhoneNumber.text"),
1134 bundle.getString(
"BlackboardAttribute.tskPathId.text"),
1137 bundle.getString(
"BlackboardAttribute.tskSetName.text"),
1144 bundle.getString(
"BlackboardAttribute.tskEncryptionDetected.text"),
1147 bundle.getString(
"BlackboardAttribute.tskMalwareDetected.text"),
1150 bundle.getString(
"BlackboardAttribute.tskStegDetected.text"),
1153 bundle.getString(
"BlackboardAttribute.tskEmailTo.text"),
1156 bundle.getString(
"BlackboardAttribute.tskEmailCc.text"),
1159 bundle.getString(
"BlackboardAttribute.tskEmailBcc.text"),
1162 bundle.getString(
"BlackboardAttribute.tskEmailFrom.text"),
1165 bundle.getString(
"BlackboardAttribute.tskEmailContentPlain.text"),
1168 bundle.getString(
"BlackboardAttribute.tskEmailContentHtml.text"),
1171 bundle.getString(
"BlackboardAttribute.tskEmailContentRtf.text"),
1174 bundle.getString(
"BlackboardAttribute.tskMsgId.text"),
1177 bundle.getString(
"BlackboardAttribute.tskMsgReplyId.text"),
1180 bundle.getString(
"BlackboardAttribute.tskDateTimeRcvd.text"),
1183 bundle.getString(
"BlackboardAttribute.tskDateTimeSent.text"),
1186 bundle.getString(
"BlackboardAttribute.tskSubject.text"),
1189 bundle.getString(
"BlackboardAttribute.tskTitle.text"),
1192 bundle.getString(
"BlackboardAttribute.tskGeoLatitude.text"),
1195 bundle.getString(
"BlackboardAttribute.tskGeoLongitude.text"),
1198 bundle.getString(
"BlackboardAttribute.tskGeoVelocity.text"),
1201 bundle.getString(
"BlackboardAttribute.tskGeoAltitude.text"),
1204 bundle.getString(
"BlackboardAttribute.tskGeoBearing.text"),
1207 bundle.getString(
"BlackboardAttribute.tskGeoHPrecision.text"),
1210 bundle.getString(
"BlackboardAttribute.tskGeoVPrecision.text"),
1213 bundle.getString(
"BlackboardAttribute.tskGeoMapDatum.text"),
1221 bundle.getString(
"BlackboardAttribute.tskFileTypeSig.text"),
1224 bundle.getString(
"BlackboardAttribute.tskFileTypeExt.text"),
1232 bundle.getString(
"BlackboardAttribute.tskTaggedArtifact.text"),
1240 bundle.getString(
"BlackboardAttribute.tskTagName.text"),
1243 bundle.getString(
"BlackboardAttribute.tskComment.text"),
1246 bundle.getString(
"BlackboardAttribute.tskUrlDecoded.text"),
1249 bundle.getString(
"BlackboardAttribute.tskDateTimeCreated.text"),
1252 bundle.getString(
"BlackboardAttribute.tskDateTimeModified.text"),
1255 bundle.getString(
"BlackboardAttribute.tskProcessorArchitecture.text"),
1258 bundle.getString(
"BlackboardAttribute.tskVersion.text"),
1261 bundle.getString(
"BlackboardAttribute.tskUserId.text"),
1264 bundle.getString(
"BlackboardAttribute.tskDescription.text"),
1267 bundle.getString(
"BlackboardAttribute.tskMessageType.text"),
1270 bundle.getString(
"BlackboardAttribute.tskPhoneNumberHome.text"),
1273 bundle.getString(
"BlackboardAttribute.tskPhoneNumberOffice.text"),
1276 bundle.getString(
"BlackboardAttribute.tskPhoneNumberMobile.text"),
1279 bundle.getString(
"BlackboardAttribute.tskPhoneNumberFrom.text"),
1282 bundle.getString(
"BlackboardAttribute.tskPhoneNumberTo.text"),
1285 bundle.getString(
"BlackboardAttribute.tskDirection.text"),
1288 bundle.getString(
"BlackboardAttribute.tskEmailHome.text"),
1291 bundle.getString(
"BlackboardAttribute.tskEmailOffice.text"),
1294 bundle.getString(
"BlackboardAttribute.tskDateTimeStart.text"),
1297 bundle.getString(
"BlackboardAttribute.tskDateTimeEnd.text"),
1300 bundle.getString(
"BlackboardAttribute.tskCalendarEntryType.text"),
1303 bundle.getString(
"BlackboardAttribute.tskLocation.text"),
1306 bundle.getString(
"BlackboardAttribute.tskShortcut.text"),
1309 bundle.getString(
"BlackboardAttribute.tskDeviceName.text"),
1312 bundle.getString(
"BlackboardAttribute.tskCategory.text"),
1315 bundle.getString(
"BlackboardAttribute.tskEmailReplyTo.text"),
1318 bundle.getString(
"BlackboardAttribute.tskServerName.text"),
1321 bundle.getString(
"BlackboardAttribute.tskCount.text"),
1324 bundle.getString(
"BlackboardAttribute.tskMinCount.text"),
1327 bundle.getString(
"BlackboardAttribute.tskPathSource.text"),
1330 bundle.getString(
"BlackboardAttribute.tskPermissions.text"),
1333 bundle.getString(
"BlackboardAttribute.tskAssociatedArtifact.text"),
1336 bundle.getString(
"BlackboardAttribute.tskIsDeleted.text"),
1339 bundle.getString(
"BlackboardAttribute.tskGeoLatitudeStart.text"),
1342 bundle.getString(
"BlackboardAttribute.tskGeoLatitudeEnd.text"),
1345 bundle.getString(
"BlackboardAttribute.tskGeoLongitudeStart.text"),
1348 bundle.getString(
"BlackboardAttribute.tskGeoLongitudeEnd.text"),
1351 bundle.getString(
"BlackboardAttribute.tskReadStatus.text"),
1354 bundle.getString(
"BlackboardAttribute.tskLocalPath.text"),
1357 bundle.getString(
"BlackboardAttribute.tskRemotePath.text"),
1360 bundle.getString(
"BlackboardAttribute.tskTempDir.text"),
1363 bundle.getString(
"BlackboardAttribute.tskProductId.text"),
1366 bundle.getString(
"BlackboardAttribute.tskOwner.text"),
1369 bundle.getString(
"BlackboardAttribute.tskOrganization.text"),
1372 bundle.getString(
"BlackboardAttribute.tskCardNumber.text"),
1375 bundle.getString(
"BlackboardAttribute.tskCardExpiration.text"),
1378 bundle.getString(
"BlackboardAttribute.tskCardServiceCode.text"),
1381 bundle.getString(
"BlackboardAttribute.tskCardDiscretionary.text"),
1384 bundle.getString(
"BlackboardAttribute.tskCardLRC.text"),
1387 bundle.getString(
"BlackboardAttribute.tskKeywordSearchDocumentID.text"),
1390 bundle.getString(
"BlackboardAttribute.tskCardScheme.text"),
1393 bundle.getString(
"BlackboardAttribute.tskCardType.text"),
1396 bundle.getString(
"BlackboardAttribute.tskBrandName.text"),
1399 bundle.getString(
"BlackboardAttribute.tskBankName.text"),
1402 bundle.getString(
"BlackboardAttribute.tskCountry.text"),
1405 bundle.getString(
"BlackboardAttribute.tskCity.text"),
1408 bundle.getString(
"BlackboardAttribute.tskAccountType.text"),
1414 bundle.getString(
"BlackboardAttribute.tskKeywordSearchType.text"),
1417 bundle.getString(
"BlackboardAttribute.tskHeaders.text"),
1420 bundle.getString(
"BlackboardAttribute.tskId.text"),
1423 bundle.getString(
"BlackboardAttribute.tskSsid.text"),
1426 bundle.getString(
"BlackboardAttribute.tskBssid.text"),
1429 bundle.getString(
"BlackboardAttribute.tskMacAddress.text"),
1432 bundle.getString(
"BlackboardAttribute.tskImei.text"),
1435 bundle.getString(
"BlackboardAttribute.tskImsi.text"),
1438 bundle.getString(
"BlackboardAttribute.tskIccid.text"),
1441 bundle.getString(
"BlackboardAttribute.tskthreadid.text"),
1448 bundle.getString(
"BlackboardAttribute.tskTLEventType.text"),
1451 bundle.getString(
"BlackboardAttribute.tskdatetimedeleted.text"),
1454 bundle.getString(
"BlackboardAttribute.tskdatetimepwdreset.text"),
1457 bundle.getString(
"BlackboardAttribute.tskdatetimepwdfail.text"),
1460 bundle.getString(
"BlackboardAttribute.tskdisplayname.text"),
1463 bundle.getString(
"BlackboardAttribute.tskpasswordsettings.text"),
1466 bundle.getString(
"BlackboardAttribute.tskaccountsettings.text"),
1469 bundle.getString(
"BlackboardAttribute.tskpasswordhint.text"),
1472 bundle.getString(
"BlackboardAttribute.tskgroups.text"),
1480 bundle.getString(
"BlackboardAttribute.tskattachments.text"),
1487 bundle.getString(
"BlackboardAttribute.tskgeopath.text"),
1494 bundle.getString(
"BlackboardAttribute.tskgeowaypoints.text"),
1497 bundle.getString(
"BlackboardAttribute.tskdistancetraveled.text"),
1500 bundle.getString(
"BlackboardAttribute.tskdistancefromhome.text"),
1503 bundle.getString(
"BlackboardAttribute.tskhashphotodna.text"),
1506 bundle.getString(
"BlackboardAttribute.tskbytessent.text"),
1509 bundle.getString(
"BlackboardAttribute.tskbytesreceived.text"),
1512 bundle.getString(
"BlackboardAttribute.tsklastprinteddatetime.text"),
1515 bundle.getString(
"BlackboardAttribute.tskrule.text"),
1518 bundle.getString(
"BlackboardAttribute.tskActivityType.text"),
1525 bundle.getString(
"BlackboardAttribute.tskgeoareapoints.text"),
1528 bundle.getString(
"BlackboardAttribute.tskRealm.text"),
1531 bundle.getString(
"BlackboardAttribute.tskHost.text"),
1534 bundle.getString(
"BlackboardAttribute.tskHomeDir.text"),
1537 bundle.getString(
"BlackboardAttribute.tskIsAdmin.text"),
1540 bundle.getString(
"BlackboardAttribute.tskCorrelationType.text"),
1543 bundle.getString(
"BlackboardAttribute.tskCorrelationValue.text"),
1546 bundle.getString(
"BlackboardAttribute.tskOtherCases.text"),
1549 private final int typeID;
1550 private final String typeName;
1551 private final String displayName;
1563 this.typeID = typeID;
1564 this.typeName = typeName;
1565 this.displayName = displayName;
1566 this.valueType = valueType;
1587 return this.typeName;
1596 return this.displayName;
1605 return this.valueType;
1621 static public ATTRIBUTE_TYPE
fromID(
int typeID) {
1622 for (ATTRIBUTE_TYPE attrType : ATTRIBUTE_TYPE.values()) {
1623 if (attrType.getTypeID() == typeID) {
1627 throw new IllegalArgumentException(
"No ATTRIBUTE_TYPE matching type: " + typeID);
1644 for (ATTRIBUTE_TYPE attrType : ATTRIBUTE_TYPE.values()) {
1645 if (attrType.getLabel().equals(typeName)) {
1649 throw new IllegalArgumentException(
"No ATTRIBUTE_TYPE matching type: " + typeName);
1671 public BlackboardAttribute(
int attributeTypeID, String moduleName,
int valueInt)
throws IllegalArgumentException {
1695 this(attributeTypeID, moduleName, valueInt);
1696 this.context = replaceNulls(context);
1719 long valueLong)
throws IllegalArgumentException {
1745 this(attributeTypeID, moduleName, valueLong);
1746 this.context = replaceNulls(context);
1767 double valueDouble)
throws IllegalArgumentException {
1790 double valueDouble) {
1791 this(attributeTypeID, moduleName, valueDouble);
1792 this.context = replaceNulls(context);
1812 public BlackboardAttribute(
int attributeTypeID, String moduleName, String valueString)
throws IllegalArgumentException {
1835 String valueString) {
1836 this(attributeTypeID, moduleName, valueString);
1837 this.context = replaceNulls(context);
1857 public BlackboardAttribute(
int attributeTypeID, String moduleName,
byte[] valueBytes)
throws IllegalArgumentException {
1880 byte[] valueBytes) {
1881 this(attributeTypeID, moduleName, valueBytes);
1882 this.context = replaceNulls(context);
1897 setArtifactId(artifactID);
1913 setCaseDatabase(sleuthkitCase);
1936 String getContextString() {
1991 return getSourcesCSV();
AbstractAttribute(BlackboardAttribute.Type attributeType, int valueInt)
BlackboardAttribute.Type getAttributeType()
BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE getValueType()
Long getDataSourceObjectID()
static final Type TSK_PROG_NAME
static final Type TSK_MESSAGE_TYPE
static final Type TSK_GEO_LONGITUDE_END
static final Type TSK_DEVICE_MODEL
static final Type TSK_PASSWORD_HINT
static final Type TSK_MAC_ADDRESS
static final Type TSK_CARD_SERVICE_CODE
static final Type TSK_TEMP_DIR
static final Type TSK_KEYWORD_PREVIEW
static final Type TSK_DATETIME_ACCESSED
static final Type TSK_USER_ID
static final Type TSK_LOCAL_PATH
static final Type TSK_PASSWORD_SETTINGS
static final Type TSK_CARD_LRC
static final Type TSK_MSG_ID
static final Type TSK_CORRELATION_VALUE
static final Type TSK_DOMAIN
static final Type TSK_DEVICE_ID
static final Type TSK_GROUPS
static final Type TSK_NAME
static final Type TSK_GEO_LATITUDE
static final Type TSK_PHONE_NUMBER_HOME
static final Type TSK_CALENDAR_ENTRY_TYPE
static final Type TSK_TEXT_FILE
static final Type TSK_NAME_PERSON
static final Type TSK_HASH_MD5
static final Type TSK_VALUE
static final Type TSK_COUNT
static final Type TSK_KEYWORD_SEARCH_DOCUMENT_ID
static final Type TSK_EMAIL_BCC
static final Type TSK_CARD_TYPE
static final Type TSK_CARD_SCHEME
static final Type TSK_ISDELETED
static final Type TSK_GEO_HPRECISION
static final Type TSK_DISTANCE_TRAVELED
static final Type TSK_URL
static final Type TSK_URL_DECODED
static final Type TSK_CITY
boolean equals(Object that)
static final Type TSK_PHONE_NUMBER_TO
static final Type TSK_TITLE
static final Type TSK_OWNER
static final Type TSK_DATETIME_PASSWORD_FAIL
static final Type TSK_HOME_DIR
static final Type TSK_DISTANCE_FROM_HOMEPOINT
static final Type TSK_DEVICE_MAKE
static final Type TSK_EMAIL_CC
static final Type TSK_KEYWORD_SEARCH_TYPE
static final Type TSK_BANK_NAME
static final Type TSK_COUNTRY
static final Type TSK_REMOTE_PATH
static final Type TSK_GEO_VELOCITY
static final Type TSK_ACTIVITY_TYPE
static final Type TSK_SET_NAME
static final Type TSK_PHONE_NUMBER
static final Type TSK_GEO_MAPDATUM
static final Type TSK_GEO_ALTITUDE
static final Type TSK_EMAIL_FROM
static final Type TSK_PATH
static final Type TSK_USER_NAME
static final Type TSK_EMAIL_CONTENT_PLAIN
static final Type TSK_DISPLAY_NAME
static final Type TSK_BYTES_SENT
static final Type TSK_DATETIME_SENT
static final Type TSK_BRAND_NAME
static final Type TSK_DATETIME_END
static final Type TSK_GEO_BEARING
static final Type TSK_HASH_SHA1
static final Type TSK_COMMENT
static final Type TSK_PERMISSIONS
static final Type TSK_PHONE_NUMBER_MOBILE
static final Type TSK_EMAIL
static final Type TSK_OTHER_CASES
static final Type TSK_TEXT
static final Type TSK_GEO_VPRECISION
static final Type TSK_SERVER_NAME
static final Type TSK_HASH_PHOTODNA
static final Type TSK_PASSWORD
static final Type TSK_IMSI
static final Type TSK_ENTROPY
static final Type TSK_BSSID
static final Type TSK_DEVICE_NAME
static final Type TSK_MIN_COUNT
static final Type TSK_KEYWORD
static final Type TSK_HOST
static final Type TSK_SHORTCUT
static final Type TSK_HEADERS
static final Type TSK_DATETIME_RCVD
static final Type TSK_BYTES_RECEIVED
static final Type TSK_DATETIME_PASSWORD_RESET
static final Type TSK_SSID
static final Type TSK_DATETIME_DELETED
static final Type TSK_VERSION
static final Type TSK_DESCRIPTION
static final Type TSK_EMAIL_HOME
static final Type TSK_ICCID
static final Type TSK_TL_EVENT_TYPE
static final Type TSK_GEO_AREAPOINTS
static final Type TSK_HASH_SHA2_256
static final Type TSK_HASH_SHA2_512
static final Type TSK_EMAIL_REPLYTO
static final Type TSK_REFERRER
static final Type TSK_PRODUCT_ID
static final Type TSK_DATETIME_CREATED
static final Type TSK_SUBJECT
static final Type TSK_ORGANIZATION
static final Type TSK_RULE
static final Type TSK_EMAIL_CONTENT_HTML
static final Type TSK_FILE_TYPE_EXT
static final Type TSK_IS_ADMIN
static final Type TSK_IP_ADDRESS
static final Type TSK_DIRECTION
static final Type TSK_DATETIME_START
static final Type TSK_TEXT_LANGUAGE
static final Type TSK_MSG_REPLY_ID
static final Type TSK_CARD_NUMBER
static final Type TSK_CARD_DISCRETIONARY
static final Type TSK_ACCOUNT_SETTINGS
static final Type TSK_STEG_DETECTED
TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE getValueType()
static final Type TSK_LAST_PRINTED_DATETIME
static final Type TSK_CORRELATION_TYPE
static final Type TSK_PHONE_NUMBER_OFFICE
static final Type TSK_CARD_EXPIRATION
static final Type TSK_GEO_WAYPOINTS
Type(int typeID, String typeName, String displayName, TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE valueType)
static final Type TSK_READ_STATUS
static final Type TSK_LOCATION
static final Type TSK_FLAG
static final Type TSK_EMAIL_TO
static final Type TSK_PATH_ID
static final Type TSK_PATH_SOURCE
static final Type TSK_EMAIL_CONTENT_RTF
static final Type TSK_GEO_LONGITUDE_START
static final Type TSK_GEO_TRACKPOINTS
static final Type TSK_IMEI
static final Type TSK_ATTACHMENTS
static final Type TSK_KEYWORD_REGEXP
static final Type TSK_CATEGORY
static final Type TSK_ASSOCIATED_ARTIFACT
static final Type TSK_GEO_LATITUDE_START
static final Type TSK_PROCESSOR_ARCHITECTURE
static final Type TSK_DATETIME_MODIFIED
static final Type TSK_GEO_LATITUDE_END
static final Type TSK_EMAIL_OFFICE
Type(BlackboardAttribute.ATTRIBUTE_TYPE type)
static final Type TSK_THREAD_ID
static final Type TSK_GEO_LONGITUDE
static final Type TSK_DATETIME
static final Type TSK_PHONE_NUMBER_FROM
static final Type TSK_MALWARE_DETECTED
static final Type TSK_REALM
static final Type TSK_ACCOUNT_TYPE
BlackboardAttribute(int attributeTypeID, String moduleName, long valueLong)
BlackboardAttribute(int attributeTypeID, String moduleName, int valueInt)
BlackboardAttribute(ATTRIBUTE_TYPE attributeType, String source, long valueLong)
BlackboardAttribute(int attributeTypeID, String moduleName, String context, String valueString)
BlackboardAttribute(Type attributeType, String source, int valueInt)
BlackboardAttribute(ATTRIBUTE_TYPE attributeType, String source, String valueString)
void setArtifactID(long artifactID)
BlackboardAttribute(Type attributeType, String source, String valueString)
String getAttributeTypeName()
String getDisplayString()
boolean equals(Object that)
BlackboardAttribute(int attributeTypeID, String moduleName, String valueString)
BlackboardAttribute(Type attributeType, String source, byte[] valueBytes)
BlackboardAttribute(int attributeTypeID, String moduleName, String context, int valueInt)
void addSource(String source)
BlackboardArtifact getParentArtifact()
BlackboardAttribute(ATTRIBUTE_TYPE attributeType, String source, int valueInt)
String getAttributeTypeDisplayName()
List< String > getSources()
BlackboardAttribute(int attributeTypeID, String moduleName, String context, double valueDouble)
BlackboardAttribute(Type attributeType, String source, long valueLong)
BlackboardAttribute(int attributeTypeID, String moduleName, String context, long valueLong)
BlackboardAttribute(ATTRIBUTE_TYPE attributeType, String source, double valueDouble)
BlackboardAttribute(int attributeTypeID, String moduleName, String context, byte[] valueBytes)
BlackboardAttribute(int attributeTypeID, String moduleName, double valueDouble)
void setCase(SleuthkitCase sleuthkitCase)
BlackboardAttribute(Type attributeType, String source, double valueDouble)
BlackboardAttribute(ATTRIBUTE_TYPE attributeType, String source, byte[] valueBytes)
BlackboardAttribute(int attributeTypeID, String moduleName, byte[] valueBytes)
static String epochToTime(long epoch)
TSK_DATETIME_PASSWORD_RESET
static ATTRIBUTE_TYPE fromID(int typeID)
TSK_LAST_PRINTED_DATETIME
TSK_DATETIME_PASSWORD_FAIL
TSK_PROCESSOR_ARCHITECTURE
TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE getValueType()
static ATTRIBUTE_TYPE fromLabel(String typeName)
TSK_DISTANCE_FROM_HOMEPOINT
TSK_KEYWORD_SEARCH_DOCUMENT_ID
static TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE fromType(long typeId)
static TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE fromLabel(String typeName)