org.sleuthkit.datamodel.AbstractContent Class Reference

Inherits org.sleuthkit.datamodel.Content.

Inherited by org.sleuthkit.datamodel.AbstractFile, org.sleuthkit.datamodel.FileSystem, org.sleuthkit.datamodel.HostAddress, org.sleuthkit.datamodel.Image, org.sleuthkit.datamodel.OsAccount, org.sleuthkit.datamodel.Pool, org.sleuthkit.datamodel.UnsupportedContent, org.sleuthkit.datamodel.Volume, and org.sleuthkit.datamodel.VolumeSystem.

Public Member Functions
boolean	equals (Object obj)
Score	getAggregateScore () throws TskCoreException
List< AnalysisResult >	getAllAnalysisResults () throws TskCoreException
ArrayList< BlackboardArtifact >	getAllArtifacts () throws TskCoreException
long	getAllArtifactsCount () throws TskCoreException
List< DataArtifact >	getAllDataArtifacts () throws TskCoreException
List< AnalysisResult >	getAnalysisResults (BlackboardArtifact.Type artifactType) throws TskCoreException
ArrayList< BlackboardArtifact >	getArtifacts (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
ArrayList< BlackboardArtifact >	getArtifacts (int artifactTypeID) throws TskCoreException
ArrayList< BlackboardArtifact >	getArtifacts (String artifactTypeName) throws TskCoreException
long	getArtifactsCount (ARTIFACT_TYPE type) throws TskCoreException
long	getArtifactsCount (int artifactTypeID) throws TskCoreException
long	getArtifactsCount (String artifactTypeName) throws TskCoreException
List< Content >	getChildren () throws TskCoreException
int	getChildrenCount () throws TskCoreException
List< Long >	getChildrenIds () throws TskCoreException
Content	getDataSource () throws TskCoreException
BlackboardArtifact	getGenInfoArtifact () throws TskCoreException
BlackboardArtifact	getGenInfoArtifact (boolean create) throws TskCoreException
ArrayList< BlackboardAttribute >	getGenInfoAttributes (ATTRIBUTE_TYPE attr_type) throws TskCoreException
Set< String >	getHashSetNames () throws TskCoreException
long	getId ()
String	getName ()
Content	getParent () throws TskCoreException
Optional< Long >	getParentId () throws TskCoreException
SleuthkitCase	getSleuthkitCase ()
String	getUniquePath () throws TskCoreException
boolean	hasChildren () throws TskCoreException
int	hashCode ()
AnalysisResultAdded	newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList) throws TskCoreException
AnalysisResultAdded	newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList, long dataSourceId) throws TskCoreException
BlackboardArtifact	newArtifact (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
BlackboardArtifact	newArtifact (int artifactTypeID) throws TskCoreException
DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList) throws TskCoreException
DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId) throws TskCoreException
DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId, long dataSourceId) throws TskCoreException
String	toString ()
String	toString (boolean preserveState)
Public Member Functions inherited from org.sleuthkit.datamodel.Content
public< T > T	accept (ContentVisitor< T > v)
void	close ()
long	getArtifactsCount (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
ArrayList< BlackboardAttribute >	getGenInfoAttributes (BlackboardAttribute.ATTRIBUTE_TYPE attr_type) throws TskCoreException
long	getSize ()
int	read (byte[] buf, long offset, long len) throws TskCoreException
Public Member Functions inherited from org.sleuthkit.datamodel.SleuthkitVisitableItem
public< T > T	accept (SleuthkitItemVisitor< T > v)

Static Public Attributes
static final long	UNKNOWN_ID = -1

Protected Member Functions
	AbstractContent (SleuthkitCase db, long obj_id, String name)

Protected Attributes
long	parentId

Detailed Description

Implements some general methods from the Content interface common across many content sub types

Definition at line 42 of file AbstractContent.java.

Constructor & Destructor Documentation

AbstractContent()

org.sleuthkit.datamodel.AbstractContent.AbstractContent ( SleuthkitCase db, long obj_id, String name )

protected

Definition at line 57 of file AbstractContent.java.

References UNKNOWN_ID.

Referenced by equals(), org.sleuthkit.datamodel.AbstractFile.getFileSystem(), hashCode(), and toString().

Member Function Documentation

equals()

boolean org.sleuthkit.datamodel.AbstractContent.equals

(

Object

obj

)

Reimplemented in org.sleuthkit.datamodel.HostAddress.

Definition at line 310 of file AbstractContent.java.

References AbstractContent(), and getChildrenCount().

Referenced by org.sleuthkit.datamodel.AbstractFile.getUniquePath().

getAggregateScore()

Score org.sleuthkit.datamodel.AbstractContent.getAggregateScore

(

)

throws TskCoreException

Returns the final score for the content object.

Returns

Score.

Exceptions

TskCoreException

if critical error occurred within tsk core.

Implements org.sleuthkit.datamodel.Content.

Definition at line 512 of file AbstractContent.java.

getAllAnalysisResults()

List< AnalysisResult > org.sleuthkit.datamodel.AbstractContent.getAllAnalysisResults

(

)

throws TskCoreException

Get all analysis results associated with this content.

Returns

A list of analysis results.

Exceptions

TskCoreException

If critical error occurred within tsk core.

Implements org.sleuthkit.datamodel.Content.

Definition at line 502 of file AbstractContent.java.

getAllArtifacts()

ArrayList< BlackboardArtifact > org.sleuthkit.datamodel.AbstractContent.getAllArtifacts

(

)

throws TskCoreException

Get all artifacts associated with this content

Returns

a list of blackboard artifacts

Exceptions

TskCoreException

if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 497 of file AbstractContent.java.

getAllArtifactsCount()

long org.sleuthkit.datamodel.AbstractContent.getAllArtifactsCount

(

)

throws TskCoreException

Get count of all artifacts associated with this content

Returns

count of all blackboard artifacts for this content

Exceptions

TskCoreException

if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 537 of file AbstractContent.java.

getAllDataArtifacts()

List< DataArtifact > org.sleuthkit.datamodel.AbstractContent.getAllDataArtifacts

(

)

throws TskCoreException

Get all data artifacts associated with this content.

Returns

A list of data artifacts.

Exceptions

TskCoreException

If critical error occurred within tsk core.

Implements org.sleuthkit.datamodel.Content.

Definition at line 507 of file AbstractContent.java.

getAnalysisResults()

List< AnalysisResult > org.sleuthkit.datamodel.AbstractContent.getAnalysisResults

(

BlackboardArtifact.Type

artifactType

)

throws TskCoreException

Get all analysis results associated with this content, that have the given type.

Parameters

artifactType

Type to look up.

Returns

A list of analysis result artifacts matching the type.

Exceptions

TskCoreException

If critical error occurred within tsk core.

Implements org.sleuthkit.datamodel.Content.

Definition at line 517 of file AbstractContent.java.

getArtifacts() [1/3]

ArrayList< BlackboardArtifact > org.sleuthkit.datamodel.AbstractContent.getArtifacts

(

BlackboardArtifact.ARTIFACT_TYPE

type

)

throws TskCoreException

Get all artifacts associated with this content that have the given type

Parameters

type	type to look up

Returns

a list of blackboard artifacts matching the type

Exceptions

TskCoreException

if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 445 of file AbstractContent.java.

References getArtifacts().

getArtifacts() [2/3]

ArrayList< BlackboardArtifact > org.sleuthkit.datamodel.AbstractContent.getArtifacts

(

int

artifactTypeID

)

throws TskCoreException

Get all artifacts associated with this content that have the given type id

Parameters

artifactTypeID

type id to look up

Returns

a list of blackboard artifacts matching the type

Exceptions

TskCoreException

if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 427 of file AbstractContent.java.

References getGenInfoArtifact(), and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GEN_INFO.

getArtifacts() [3/3]

ArrayList< BlackboardArtifact > org.sleuthkit.datamodel.AbstractContent.getArtifacts

(

String

artifactTypeName

)

throws TskCoreException

Get all artifacts associated with this content that have the given type name

Parameters

artifactTypeName

name of the type to look up

Returns

a list of blackboard artifacts matching the type

Exceptions

TskCoreException

if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 422 of file AbstractContent.java.

References getArtifacts().

Referenced by getArtifacts(), getArtifacts(), and getHashSetNames().

getArtifactsCount() [1/3]

long org.sleuthkit.datamodel.AbstractContent.getArtifactsCount

(

ARTIFACT_TYPE

type

)

throws TskCoreException

Definition at line 532 of file AbstractContent.java.

getArtifactsCount() [2/3]

long org.sleuthkit.datamodel.AbstractContent.getArtifactsCount

(

int

artifactTypeID

)

throws TskCoreException

Get count of all artifacts associated with this content that have the given type id

Parameters

artifactTypeID

type id to look up

Returns

count of blackboard artifacts matching the type

Exceptions

TskCoreException

if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 527 of file AbstractContent.java.

getArtifactsCount() [3/3]

long org.sleuthkit.datamodel.AbstractContent.getArtifactsCount

(

String

artifactTypeName

)

throws TskCoreException

Get count of all artifacts associated with this content that have the given type name

Parameters

artifactTypeName

name of the type to look up

Returns

count of blackboard artifacts matching the type

Exceptions

TskCoreException

if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 522 of file AbstractContent.java.

getChildren()

List< Content > org.sleuthkit.datamodel.AbstractContent.getChildren

(

)

throws TskCoreException

Gets all children of this abstract content, if any.

Returns

A list of the children.

Exceptions

TskCoreException

if there was an error querying the case database.

Implements org.sleuthkit.datamodel.Content.

Reimplemented in org.sleuthkit.datamodel.Image, org.sleuthkit.datamodel.Pool, org.sleuthkit.datamodel.Volume, and org.sleuthkit.datamodel.VolumeSystem.

Definition at line 191 of file AbstractContent.java.

References getSleuthkitCase().

Referenced by org.sleuthkit.datamodel.FileSystem.getRootDirectory(), and org.sleuthkit.datamodel.AbstractFile.listFiles().

getChildrenCount()

int org.sleuthkit.datamodel.AbstractContent.getChildrenCount

(

)

throws TskCoreException

Returns count of children objects. Note, this should be more efficient than getting children and counting them.

Returns

children count

Exceptions

TskCoreException

if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 112 of file AbstractContent.java.

References getSleuthkitCase().

Referenced by equals(), and hashCode().

getChildrenIds()

List< Long > org.sleuthkit.datamodel.AbstractContent.getChildrenIds

(

)

throws TskCoreException

Gets the object ids of objects, if any, that are children of this abstract content.

Returns

A list of the object ids.

Exceptions

TskCoreException

if there was an error querying the case database.

Implements org.sleuthkit.datamodel.Content.

Reimplemented in org.sleuthkit.datamodel.Image, org.sleuthkit.datamodel.Pool, org.sleuthkit.datamodel.Volume, and org.sleuthkit.datamodel.VolumeSystem.

Definition at line 211 of file AbstractContent.java.

References getSleuthkitCase().

getDataSource()

Content org.sleuthkit.datamodel.AbstractContent.getDataSource

(

)

throws TskCoreException

Gets the root data source (image, virtual directory, etc.) of this content.

Returns

Content associated with data source or null if one can't be found

Exceptions

TskCoreException

if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Reimplemented in org.sleuthkit.datamodel.AbstractFile, org.sleuthkit.datamodel.FsContent, org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.VirtualDirectory.

Definition at line 223 of file AbstractContent.java.

References org.sleuthkit.datamodel.Content.getDataSource(), and getParent().

Referenced by org.sleuthkit.datamodel.FsContent.getDataSource(), org.sleuthkit.datamodel.VolumeSystem.getVolumeSystemHandle(), newAnalysisResult(), newDataArtifact(), and org.sleuthkit.datamodel.FileSystem.read().

getGenInfoArtifact() [1/2]

BlackboardArtifact org.sleuthkit.datamodel.AbstractContent.getGenInfoArtifact

(

)

throws TskCoreException

Return the TSK_GEN_INFO artifact for the file so that individual attributes can be added to it. Creates one if it does not already exist.

Returns

Instance of the TSK_GEN_INFO artifact

Exceptions

TskCoreException

Implements org.sleuthkit.datamodel.Content.

Definition at line 450 of file AbstractContent.java.

References getGenInfoArtifact().

Referenced by getArtifacts(), getGenInfoArtifact(), getGenInfoAttributes(), and newArtifact().

getGenInfoArtifact() [2/2]

BlackboardArtifact org.sleuthkit.datamodel.AbstractContent.getGenInfoArtifact

(

boolean

create

)

throws TskCoreException

Return the TSK_GEN_INFO artifact for the file so that individual attributes can be added to it. If one does not create, behavior depends on the create argument.

Parameters

create

If true, an artifact will be created if it does not already exist.

Returns

Instance of the TSK_GEN_INFO artifact or null if artifact does not already exist and create was set to false

Exceptions

TskCoreException

Implements org.sleuthkit.datamodel.Content.

Definition at line 455 of file AbstractContent.java.

References newDataArtifact(), and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GEN_INFO.

getGenInfoAttributes()

ArrayList< BlackboardAttribute > org.sleuthkit.datamodel.AbstractContent.getGenInfoAttributes

(

ATTRIBUTE_TYPE

attr_type

)

throws TskCoreException

Definition at line 477 of file AbstractContent.java.

References getGenInfoArtifact().

getHashSetNames()

Set< String > org.sleuthkit.datamodel.AbstractContent.getHashSetNames

(

)

throws TskCoreException

Get the names of all the hashsets that this content is in.

Returns

the names of the hashsets that this content is in

Exceptions

TskCoreException

if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 542 of file AbstractContent.java.

References getArtifacts(), org.sleuthkit.datamodel.AbstractAttribute.getValueString(), org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_HASHSET_HIT, and org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_SET_NAME.

getId()

long org.sleuthkit.datamodel.AbstractContent.getId

(

)

Returns the unique object ID that was assigned to it in the database. This is a Sleuth Kit database-assigned number.

Returns

object id

Implements org.sleuthkit.datamodel.Content.

Reimplemented in org.sleuthkit.datamodel.HostAddress, and org.sleuthkit.datamodel.OsAccount.

Definition at line 178 of file AbstractContent.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.attributes.MessageAttachments.FileAttachment.FileAttachment(), org.sleuthkit.datamodel.AbstractFile.addAttributes(), org.sleuthkit.datamodel.SleuthkitCase.addCarvedFiles(), org.sleuthkit.datamodel.Image.getContentSize(), org.sleuthkit.datamodel.VirtualDirectory.getDataSource(), org.sleuthkit.datamodel.DerivedFile.getDerivedMethod(), org.sleuthkit.datamodel.AbstractFile.getFileSystem(), org.sleuthkit.datamodel.SleuthkitCase.getFileSystems(), org.sleuthkit.datamodel.LayoutFile.getNumParts(), org.sleuthkit.datamodel.AbstractFile.getRanges(), org.sleuthkit.datamodel.Pool.getSize(), org.sleuthkit.datamodel.SpecialDirectory.isDataSource(), org.sleuthkit.datamodel.LocalDirectory.isRoot(), newDataArtifact(), org.sleuthkit.datamodel.AbstractFile.save(), and org.sleuthkit.datamodel.Image.setDisplayName().

getName()

String org.sleuthkit.datamodel.AbstractContent.getName

(

)

Get the name of this content object (does not include parent path)

Returns

the name

Implements org.sleuthkit.datamodel.Content.

Definition at line 69 of file AbstractContent.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.attributes.MessageAttachments.FileAttachment.FileAttachment(), org.sleuthkit.datamodel.SleuthkitCase.addCarvedFiles(), org.sleuthkit.datamodel.SleuthkitCase.addLocalDirectory(), org.sleuthkit.datamodel.SleuthkitCase.addVirtualDirectory(), org.sleuthkit.datamodel.AbstractFile.close(), getUniquePath(), org.sleuthkit.datamodel.AbstractFile.getUniquePath(), org.sleuthkit.datamodel.Image.getUniquePath(), org.sleuthkit.datamodel.Volume.getUniquePath(), and org.sleuthkit.datamodel.AbstractFile.save().

getParent()

Content org.sleuthkit.datamodel.AbstractContent.getParent

(

)

throws TskCoreException

Returns

returns the parent of this Content object or null if there isn't one as is the case for Image.

Exceptions

TskCoreException

Implements org.sleuthkit.datamodel.Content.

Definition at line 126 of file AbstractContent.java.

References getParentId().

Referenced by getDataSource(), org.sleuthkit.datamodel.Pool.getSize(), getUniquePath(), org.sleuthkit.datamodel.Volume.getUniquePath(), org.sleuthkit.datamodel.LocalDirectory.isRoot(), org.sleuthkit.datamodel.Volume.read(), and toString().

getParentId()

Optional< Long > org.sleuthkit.datamodel.AbstractContent.getParentId

(

)

throws TskCoreException

Returns the parent object id of the content or empty if no parent can be identified.

Returns

An optional of the parent object id.

Exceptions

TskCoreException

Definition at line 153 of file AbstractContent.java.

References parentId, and UNKNOWN_ID.

Referenced by getParent().

getSleuthkitCase()

SleuthkitCase org.sleuthkit.datamodel.AbstractContent.getSleuthkitCase

(

)

Gets handle of SleuthkitCase to which this content belongs

Returns

the case handle

Reimplemented in org.sleuthkit.datamodel.HostAddress, and org.sleuthkit.datamodel.OsAccount.

Definition at line 305 of file AbstractContent.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper.addAttachments(), org.sleuthkit.datamodel.AbstractFile.addAttributes(), org.sleuthkit.datamodel.AbstractFile.countChildrenOfType(), org.sleuthkit.datamodel.Image.getAcquisitionDetails(), org.sleuthkit.datamodel.LocalFilesDataSource.getAcquisitionDetails(), org.sleuthkit.datamodel.Image.getAcquisitionToolName(), org.sleuthkit.datamodel.LocalFilesDataSource.getAcquisitionToolName(), org.sleuthkit.datamodel.Image.getAcquisitionToolSettings(), org.sleuthkit.datamodel.LocalFilesDataSource.getAcquisitionToolSettings(), org.sleuthkit.datamodel.Image.getAcquisitionToolVersion(), org.sleuthkit.datamodel.LocalFilesDataSource.getAcquisitionToolVersion(), org.sleuthkit.datamodel.AbstractFile.getAttributes(), getChildren(), org.sleuthkit.datamodel.Image.getChildren(), org.sleuthkit.datamodel.Pool.getChildren(), org.sleuthkit.datamodel.Volume.getChildren(), org.sleuthkit.datamodel.VolumeSystem.getChildren(), getChildrenCount(), getChildrenIds(), org.sleuthkit.datamodel.Image.getChildrenIds(), org.sleuthkit.datamodel.Pool.getChildrenIds(), org.sleuthkit.datamodel.Volume.getChildrenIds(), org.sleuthkit.datamodel.VolumeSystem.getChildrenIds(), org.sleuthkit.datamodel.AbstractFile.getDataSource(), org.sleuthkit.datamodel.Image.getDateAdded(), org.sleuthkit.datamodel.LocalFilesDataSource.getDateAdded(), org.sleuthkit.datamodel.DerivedFile.getDerivedMethod(), org.sleuthkit.datamodel.AbstractFile.getFileSystem(), org.sleuthkit.datamodel.Image.getFileSystems(), org.sleuthkit.datamodel.Image.getHost(), org.sleuthkit.datamodel.LocalFilesDataSource.getHost(), org.sleuthkit.datamodel.Image.getImageHandle(), org.sleuthkit.datamodel.Image.getMd5(), org.sleuthkit.datamodel.FsContent.getParentDirectory(), org.sleuthkit.datamodel.AbstractFile.getRanges(), org.sleuthkit.datamodel.Image.getSha1(), org.sleuthkit.datamodel.Image.getSha256(), hasChildren(), org.sleuthkit.datamodel.AbstractFile.save(), org.sleuthkit.datamodel.Image.setAcquisitionDetails(), org.sleuthkit.datamodel.LocalFilesDataSource.setAcquisitionDetails(), org.sleuthkit.datamodel.Image.setAcquisitionToolDetails(), org.sleuthkit.datamodel.LocalFilesDataSource.setAcquisitionToolDetails(), org.sleuthkit.datamodel.Image.setDisplayName(), org.sleuthkit.datamodel.LocalFilesDataSource.setDisplayName(), org.sleuthkit.datamodel.Image.setMD5(), org.sleuthkit.datamodel.Image.setSha1(), org.sleuthkit.datamodel.Image.setSha256(), and org.sleuthkit.datamodel.Image.setSizes().

getUniquePath()

String org.sleuthkit.datamodel.AbstractContent.getUniquePath

(

)

throws TskCoreException

Returns

returns the full path to this Content object starting with a "/" followed by the Image name and similarly for all other segments in the hierarchy.

Implements org.sleuthkit.datamodel.Content.

Reimplemented in org.sleuthkit.datamodel.AbstractFile, org.sleuthkit.datamodel.Image, org.sleuthkit.datamodel.LocalFilesDataSource, and org.sleuthkit.datamodel.Volume.

Definition at line 79 of file AbstractContent.java.

References getName(), getParent(), and org.sleuthkit.datamodel.Content.getUniquePath().

Referenced by toString().

hasChildren()

boolean org.sleuthkit.datamodel.AbstractContent.hasChildren

(

)

throws TskCoreException

Returns true if the content object has children objects. Note, this should be more efficient than getting children and checking it empty.

Returns

true if has children, false otherwise.

Exceptions

TskCoreException

if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 100 of file AbstractContent.java.

References getSleuthkitCase().

hashCode()

int org.sleuthkit.datamodel.AbstractContent.hashCode

(

)

Reimplemented in org.sleuthkit.datamodel.HostAddress.

Definition at line 336 of file AbstractContent.java.

References AbstractContent(), and getChildrenCount().

newAnalysisResult() [1/2]

AnalysisResultAdded org.sleuthkit.datamodel.AbstractContent.newAnalysisResult	(	BlackboardArtifact.Type	artifactType,
		Score	score,
		String	conclusion,
		String	configuration,
		String	justification,
		Collection< BlackboardAttribute >	attributesList ) throws TskCoreException

Create and add an analysis result associated with this content.

Parameters

artifactType	Type of analysis result artifact to create.
score	Score associated with this analysis.
conclusion	Conclusion from the analysis, may be empty.
configuration	Configuration element associated with this analysis, may be empty.
justification	Justification
attributesList	Additional attributes to attach to this analysis result artifact.

Returns

AnalysisResultAdded The analysis return added and the current aggregate score of content.

Exceptions

TskCoreException

if critical error occurred within tsk core.

Implements org.sleuthkit.datamodel.Content.

Definition at line 368 of file AbstractContent.java.

References org.sleuthkit.datamodel.SleuthkitCase.CaseDbTransaction.commit(), getDataSource(), org.sleuthkit.datamodel.Content.getId(), and org.sleuthkit.datamodel.SleuthkitCase.CaseDbTransaction.rollback().

Referenced by newArtifact().

newAnalysisResult() [2/2]

AnalysisResultAdded org.sleuthkit.datamodel.AbstractContent.newAnalysisResult	(	BlackboardArtifact.Type	artifactType,
		Score	score,
		String	conclusion,
		String	configuration,
		String	justification,
		Collection< BlackboardAttribute >	attributesList,
		long	dataSourceId ) throws TskCoreException

Create and add an analysis result associated with this content.

Parameters

artifactType	Type of analysis result artifact to create.
score	Score associated with this analysis.
conclusion	Conclusion from the analysis, may be empty.
configuration	Configuration element associated with this analysis, may be empty.
justification	Justification
attributesList	Additional attributes to attach to this analysis result artifact.
dataSourceId	The data source for the analysis result

Returns

AnalysisResultAdded The analysis return added and the current aggregate score of content.

Exceptions

TskCoreException

if critical error occurred within tsk core.

Implements org.sleuthkit.datamodel.Content.

Definition at line 384 of file AbstractContent.java.

References org.sleuthkit.datamodel.SleuthkitCase.CaseDbTransaction.commit(), and org.sleuthkit.datamodel.SleuthkitCase.CaseDbTransaction.rollback().

newArtifact() [1/2]

BlackboardArtifact org.sleuthkit.datamodel.AbstractContent.newArtifact

(

BlackboardArtifact.ARTIFACT_TYPE

type

)

throws TskCoreException

Create and add an artifact associated with this content to the blackboard

Parameters

type	artifact enum tyoe

Returns

the blackboard artifact created (the artifact type id can be looked up from this)

Exceptions

TskCoreException

if critical error occurred within tsk core

Deprecated

Please use newDataArtifact or newAnalysisResult.

Implements org.sleuthkit.datamodel.Content.

Definition at line 417 of file AbstractContent.java.

References newArtifact().

newArtifact() [2/2]

BlackboardArtifact org.sleuthkit.datamodel.AbstractContent.newArtifact

(

int

artifactTypeID

)

throws TskCoreException

Create and add an artifact associated with this content to the blackboard

Parameters

artifactTypeID

id of the artifact type (if the id doesn't already exist an exception will be thrown)

Returns

the blackboard artifact created (the artifact type id can be looked up from this)

Exceptions

TskCoreException

if critical error occurred within tsk core

Deprecated

Please use newDataArtifact or newAnalysisResult.

Implements org.sleuthkit.datamodel.Content.

Reimplemented in org.sleuthkit.datamodel.AbstractFile.

Definition at line 348 of file AbstractContent.java.

References org.sleuthkit.datamodel.AnalysisResultAdded.getAnalysisResult(), getGenInfoArtifact(), newAnalysisResult(), newDataArtifact(), org.sleuthkit.datamodel.Score.SCORE_UNKNOWN, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GEN_INFO.

Referenced by newArtifact().

newDataArtifact() [1/3]

DataArtifact org.sleuthkit.datamodel.AbstractContent.newDataArtifact	(	BlackboardArtifact.Type	artifactType,
		Collection< BlackboardAttribute >	attributesList ) throws TskCoreException

Create and add a data artifact associated with this abstract file. This method creates the data artifact with the os account id associated with this abstract file if one exists.

Parameters

artifactType	Type of data artifact to create.
attributesList	Additional attributes to attach to this data artifact.

Returns

DataArtifact New data artifact.

Exceptions

TskCoreException

If a critical error occurred within tsk core.

Implements org.sleuthkit.datamodel.Content.

Reimplemented in org.sleuthkit.datamodel.AbstractFile.

Definition at line 410 of file AbstractContent.java.

References newDataArtifact().

newDataArtifact() [2/3]

DataArtifact org.sleuthkit.datamodel.AbstractContent.newDataArtifact	(	BlackboardArtifact.Type	artifactType,
		Collection< BlackboardAttribute >	attributesList,
		Long	osAccountId ) throws TskCoreException

Create and add a data artifact associated with this content.

Parameters

artifactType	Type of analysis result artifact to create.
attributesList	Additional attributes to attach to this data artifact.
osAccountId	The OS account id associated with the artifact. May be null.

Returns

DataArtifact New data artifact.

Exceptions

TskCoreException

If a critical error occurred within tsk core.

Implements org.sleuthkit.datamodel.Content.

Definition at line 400 of file AbstractContent.java.

References getDataSource(), and getId().

Referenced by getGenInfoArtifact(), newArtifact(), and newDataArtifact().

newDataArtifact() [3/3]

DataArtifact org.sleuthkit.datamodel.AbstractContent.newDataArtifact	(	BlackboardArtifact.Type	artifactType,
		Collection< BlackboardAttribute >	attributesList,
		Long	osAccountId,
		long	dataSourceId ) throws TskCoreException

Create and add a data artifact associated with this content.

Parameters

artifactType	Type of analysis result artifact to create.
attributesList	Additional attributes to attach to this data artifact.
osAccountId	The OS account id associated with the artifact. May be null.
dataSourceId	The data source id of the artifact

Returns

DataArtifact New data artifact.

Exceptions

TskCoreException

If a critical error occurred within tsk core.

Implements org.sleuthkit.datamodel.Content.

Definition at line 405 of file AbstractContent.java.

toString() [1/2]

String org.sleuthkit.datamodel.AbstractContent.toString

(

)

Definition at line 556 of file AbstractContent.java.

References toString().

Referenced by toString().

toString() [2/2]

String org.sleuthkit.datamodel.AbstractContent.toString

(

boolean

preserveState

)

Reimplemented in org.sleuthkit.datamodel.AbstractFile, org.sleuthkit.datamodel.DerivedFile, org.sleuthkit.datamodel.Directory, org.sleuthkit.datamodel.File, org.sleuthkit.datamodel.FileSystem, org.sleuthkit.datamodel.FsContent, org.sleuthkit.datamodel.Image, org.sleuthkit.datamodel.LayoutFile, org.sleuthkit.datamodel.LocalDirectory, org.sleuthkit.datamodel.LocalFile, org.sleuthkit.datamodel.Pool, org.sleuthkit.datamodel.SlackFile, org.sleuthkit.datamodel.VirtualDirectory, org.sleuthkit.datamodel.Volume, and org.sleuthkit.datamodel.VolumeSystem.

Definition at line 560 of file AbstractContent.java.

References AbstractContent(), org.sleuthkit.datamodel.Content.getId(), getParent(), getUniquePath(), and parentId.

Member Data Documentation

parentId

long org.sleuthkit.datamodel.AbstractContent.parentId

protected

Definition at line 51 of file AbstractContent.java.

Referenced by org.sleuthkit.datamodel.LocalFile.LocalFile(), org.sleuthkit.datamodel.LocalFile.LocalFile(), getParentId(), and toString().

UNKNOWN_ID

final long org.sleuthkit.datamodel.AbstractContent.UNKNOWN_ID = -1

static

Definition at line 45 of file AbstractContent.java.

Referenced by AbstractContent(), org.sleuthkit.datamodel.LocalFile.LocalFile(), and getParentId().

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/sleuthkit/bindings/java/src/org/sleuthkit/datamodel/AbstractContent.java