Inherits org.sleuthkit.datamodel.Content.

Inherited by org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

Public Member Functions
String	getAcquisitionDetails () throws TskCoreException
String	getAcquisitionToolName () throws TskCoreException
String	getAcquisitionToolSettings () throws TskCoreException
String	getAcquisitionToolVersion () throws TskCoreException
long	getContentSize (SleuthkitCase sleuthkitCase) throws TskCoreException
Long	getDateAdded () throws TskCoreException
String	getDeviceId ()
Host	getHost () throws TskCoreException
String	getTimeZone ()
void	setAcquisitionDetails (String details) throws TskCoreException
void	setAcquisitionToolDetails (String name, String version, String settings) throws TskCoreException
void	setDisplayName (String newName) throws TskCoreException
Public Member Functions inherited from org.sleuthkit.datamodel.Content
public< T > T	accept (ContentVisitor< T > v)
void	close ()
Score	getAggregateScore () throws TskCoreException
List< AnalysisResult >	getAllAnalysisResults () throws TskCoreException
ArrayList< BlackboardArtifact >	getAllArtifacts () throws TskCoreException
long	getAllArtifactsCount () throws TskCoreException
List< DataArtifact >	getAllDataArtifacts () throws TskCoreException
List< AnalysisResult >	getAnalysisResults (BlackboardArtifact.Type artifactType) throws TskCoreException
ArrayList< BlackboardArtifact >	getArtifacts (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
ArrayList< BlackboardArtifact >	getArtifacts (int artifactTypeID) throws TskCoreException
ArrayList< BlackboardArtifact >	getArtifacts (String artifactTypeName) throws TskCoreException
long	getArtifactsCount (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
long	getArtifactsCount (int artifactTypeID) throws TskCoreException
long	getArtifactsCount (String artifactTypeName) throws TskCoreException
List< Content >	getChildren () throws TskCoreException
int	getChildrenCount () throws TskCoreException
List< Long >	getChildrenIds () throws TskCoreException
Content	getDataSource () throws TskCoreException
BlackboardArtifact	getGenInfoArtifact () throws TskCoreException
BlackboardArtifact	getGenInfoArtifact (boolean create) throws TskCoreException
ArrayList< BlackboardAttribute >	getGenInfoAttributes (BlackboardAttribute.ATTRIBUTE_TYPE attr_type) throws TskCoreException
Set< String >	getHashSetNames () throws TskCoreException
long	getId ()
String	getName ()
Content	getParent () throws TskCoreException
long	getSize ()
String	getUniquePath () throws TskCoreException
boolean	hasChildren () throws TskCoreException
AnalysisResultAdded	newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList) throws TskCoreException
AnalysisResultAdded	newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList, long dataSourceId) throws TskCoreException
BlackboardArtifact	newArtifact (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
BlackboardArtifact	newArtifact (int artifactTypeID) throws TskCoreException
DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList) throws TskCoreException
DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId) throws TskCoreException
DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId, long dataSourceId) throws TskCoreException
int	read (byte[] buf, long offset, long len) throws TskCoreException
Public Member Functions inherited from org.sleuthkit.datamodel.SleuthkitVisitableItem
public< T > T	accept (SleuthkitItemVisitor< T > v)

Detailed Description

A data source (e.g., an image, a local disk, a virtual directory of logical files, etc.).

Definition at line 25 of file DataSource.java.

Member Function Documentation

◆ getAcquisitionDetails()

String org.sleuthkit.datamodel.DataSource.getAcquisitionDetails ( ) throws TskCoreException

Gets the acquisition details field from the case database.

Returns: The acquisition details

Exceptions

TskCoreException Thrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

◆ getAcquisitionToolName()

String org.sleuthkit.datamodel.DataSource.getAcquisitionToolName ( ) throws TskCoreException

Gets the acquisition tool name field from the case database.

Returns: The acquisition tool name. May be Null if not set.

Exceptions

TskCoreException Thrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

References getAcquisitionToolName().

Referenced by getAcquisitionToolName().

◆ getAcquisitionToolSettings()

String org.sleuthkit.datamodel.DataSource.getAcquisitionToolSettings ( ) throws TskCoreException

Gets the acquisition tool settings field from the case database.

Returns: The acquisition tool settings. May be Null if not set.

Exceptions

TskCoreException Thrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

References getAcquisitionToolSettings().

Referenced by getAcquisitionToolSettings().

◆ getAcquisitionToolVersion()

String org.sleuthkit.datamodel.DataSource.getAcquisitionToolVersion ( ) throws TskCoreException

Gets the acquisition tool version field from the case database.

Returns: The acquisition tool version. May be Null if not set.

Exceptions

TskCoreException Thrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

References getAcquisitionToolVersion().

Referenced by getAcquisitionToolVersion().

◆ getContentSize()

long org.sleuthkit.datamodel.DataSource.getContentSize ( SleuthkitCase sleuthkitCase ) throws TskCoreException

Gets the size of the contents of the data source in bytes. This size can change as archive files within the data source are expanded, files are carved, etc., and is different from the size of the data source as returned by Content.getSize, which is the size of the data source as a file.

Parameters

sleuthkitCase The sleuthkit case instance from which to make calls to the database.

Returns: The size in bytes.

Exceptions

TskCoreException Thrown when there is an issue trying to retrieve data from the database.

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

◆ getDateAdded()

Long org.sleuthkit.datamodel.DataSource.getDateAdded ( ) throws TskCoreException

Gets the added date field from the case database.

Returns: The date time when the image was added in epoch seconds.

Exceptions

TskCoreException Thrown if the data can not be read

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

References getDateAdded().

Referenced by getDateAdded().

◆ getDeviceId()

String org.sleuthkit.datamodel.DataSource.getDeviceId ( )

Gets the ASCII-printable identifier for the device associated with the data source. This identifier is intended to be unique across multiple cases (e.g., a UUID).

Returns: The device id.

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

◆ getHost()

Host org.sleuthkit.datamodel.DataSource.getHost ( ) throws TskCoreException

Gets the host for this data source.

Returns: The host

Exceptions

TskCoreException

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

References getHost().

Referenced by getHost().

◆ getTimeZone()

String org.sleuthkit.datamodel.DataSource.getTimeZone ( )

Gets the time zone that was used to process the data source.

Returns: The time zone.

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

◆ setAcquisitionDetails()

void org.sleuthkit.datamodel.DataSource.setAcquisitionDetails ( String details ) throws TskCoreException

Sets the acquisition details field in the case database.

Parameters

details The acquisition details

Exceptions

TskCoreException Thrown if the data can not be written

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

◆ setAcquisitionToolDetails()

void org.sleuthkit.datamodel.DataSource.setAcquisitionToolDetails	(	String	name,
		String	version,
		String	settings ) throws TskCoreException

Sets the acquisition tool details such as its name, version number and any settings used during the acquisition to acquire data.

Parameters

name	The name of the acquisition tool. May be NULL.
version	The acquisition tool version number. May be NULL.
settings	The settings used by the acquisition tool. May be NULL.

Exceptions

TskCoreException Thrown if the data can not be written

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

◆ setDisplayName()

void org.sleuthkit.datamodel.DataSource.setDisplayName ( String newName ) throws TskCoreException

Set the name for this data source.

Parameters

newName The new name for the data source

Exceptions

TskCoreException Thrown if an error occurs while updating the database

Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.

The documentation for this interface was generated from the following file:

/home/carriersleuth/repos/sleuthkit/bindings/java/src/org/sleuthkit/datamodel/DataSource.java

Public Member Functions

Detailed Description

Member Function Documentation

◆ getAcquisitionDetails()

◆ getAcquisitionToolName()

◆ getAcquisitionToolSettings()

◆ getAcquisitionToolVersion()

◆ getContentSize()

◆ getDateAdded()

◆ getDeviceId()

◆ getHost()

◆ getTimeZone()

◆ setAcquisitionDetails()

◆ setAcquisitionToolDetails()

◆ setDisplayName()