Sleuth Kit Java Bindings (JNI)
4.3
Java bindings for using The Sleuth Kit
|
Inherits org.sleuthkit.datamodel.SleuthkitVisitableItem.
Classes | |
enum | ARTIFACT_TYPE |
enum | ReviewStatus |
class | Type |
Public Member Functions | |
void | addAttribute (BlackboardAttribute attr) throws TskCoreException |
void | addAttributes (Collection< BlackboardAttribute > attributes) throws TskCoreException |
boolean | equals (Object obj) |
long | getArtifactID () |
int | getArtifactTypeID () |
String | getArtifactTypeName () |
BlackboardAttribute | getAttribute (BlackboardAttribute.Type attributeType) throws TskCoreException |
List< BlackboardAttribute > | getAttributes () throws TskCoreException |
List< BlackboardAttribute > | getAttributes (final BlackboardAttribute.ATTRIBUTE_TYPE attributeType) throws TskCoreException |
String | getDisplayName () |
long | getObjectID () |
ReviewStatus | getReviewStatus () |
SleuthkitCase | getSleuthkitCase () |
int | hashCode () |
String | toString () |
Protected Member Functions | |
BlackboardArtifact (SleuthkitCase sleuthkitCase, long artifactID, long objID, int artifactTypeID, String artifactTypeName, String displayName) | |
Private Attributes | |
final long | artifactID |
final int | artifactTypeID |
final String | artifactTypeName |
final List< BlackboardAttribute > | attrsCache = new ArrayList<BlackboardAttribute>() |
final String | displayName |
boolean | loadedCacheFromDb = false |
final long | objID |
final ReviewStatus | reviewStatus |
final SleuthkitCase | sleuthkitCase |
Static Private Attributes | |
static final ResourceBundle | bundle = ResourceBundle.getBundle("org.sleuthkit.datamodel.Bundle") |
Represents an artifact as stored in the Blackboard. Artifacts are a collection of name value pairs and have a type that represents the type of data they are storing. This class is used to create artifacts on the blackboard and is used to represent artifacts queried from the blackboard.
Definition at line 36 of file BlackboardArtifact.java.
|
protected |
Constructor for an artifact. Should only be used by SleuthkitCase. Sets the initial review status as "undecided"
sleuthkitCase | the case that can be used to access the database this artifact is part of |
artifactID | the id for this artifact |
objID | the object this artifact is associated with |
artifactTypeID | the type id of this artifact |
artifactTypeName | the type name of this artifact |
displayName | the display name of this artifact |
Definition at line 645 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.BlackboardArtifact.artifactID, org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeID, org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeName, org.sleuthkit.datamodel.BlackboardArtifact.displayName, org.sleuthkit.datamodel.BlackboardArtifact.objID, org.sleuthkit.datamodel.BlackboardArtifact.sleuthkitCase, and org.sleuthkit.datamodel.BlackboardArtifact.ReviewStatus.UNDECIDED.
void org.sleuthkit.datamodel.BlackboardArtifact.addAttribute | ( | BlackboardAttribute | attr | ) | throws TskCoreException |
Add an attribute to this artifact
attr | the attribute to add |
TskCoreException | if a critical error occurs and the attribute was not added |
Definition at line 415 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.SleuthkitCase.addBlackboardAttribute().
void org.sleuthkit.datamodel.BlackboardArtifact.addAttributes | ( | Collection< BlackboardAttribute > | attributes | ) | throws TskCoreException |
Add a collection of attributes to this artifact in a single transaction (faster than individually)
attributes | List of attributes to add |
TskCoreException | if a critical error occurs and the attribute was not added |
Definition at line 431 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.SleuthkitCase.addBlackboardAttributes().
boolean org.sleuthkit.datamodel.BlackboardArtifact.equals | ( | Object | obj | ) |
Definition at line 537 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.BlackboardArtifact.artifactID.
long org.sleuthkit.datamodel.BlackboardArtifact.getArtifactID | ( | ) |
Get the id for this artifact
Definition at line 367 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.BlackboardArtifact.artifactID.
Referenced by org.sleuthkit.datamodel.SleuthkitCase.setReviewStatus().
int org.sleuthkit.datamodel.BlackboardArtifact.getArtifactTypeID | ( | ) |
Get the artifact type id for this artifact
Definition at line 385 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeID.
String org.sleuthkit.datamodel.BlackboardArtifact.getArtifactTypeName | ( | ) |
Get the artifact type name for this artifact
Definition at line 394 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeName.
BlackboardAttribute org.sleuthkit.datamodel.BlackboardArtifact.getAttribute | ( | BlackboardAttribute.Type | attributeType | ) | throws TskCoreException |
Gets the attribute of this artifact of given type.
attributeType | The type of attribute to get |
TskCoreException | if a critical error occurs and the attributes are not fetched |
Definition at line 503 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.BlackboardArtifact.getAttributes().
List<BlackboardAttribute> org.sleuthkit.datamodel.BlackboardArtifact.getAttributes | ( | ) | throws TskCoreException |
Gets all attributes associated with this artifact
TskCoreException | if a critical error occurs and the attributes are not fetched |
Definition at line 452 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.BlackboardArtifact.attrsCache, and org.sleuthkit.datamodel.SleuthkitCase.getBlackboardAttributes().
Referenced by org.sleuthkit.datamodel.BlackboardArtifact.getAttribute(), and org.sleuthkit.datamodel.AbstractContent.getGenInfoAttributes().
List<BlackboardAttribute> org.sleuthkit.datamodel.BlackboardArtifact.getAttributes | ( | final BlackboardAttribute.ATTRIBUTE_TYPE | attributeType | ) | throws TskCoreException |
Gets all attributes associated with this artifact that are of the given attribute type.
attributeType | the type of attributes to get |
TskCoreException | if a critical error occurs and the attributes are not fetched |
Definition at line 476 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.SleuthkitCase.getBlackboardAttributes().
String org.sleuthkit.datamodel.BlackboardArtifact.getDisplayName | ( | ) |
Get the artifact display name for this artifact
Definition at line 403 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.BlackboardArtifact.displayName.
long org.sleuthkit.datamodel.BlackboardArtifact.getObjectID | ( | ) |
Get the object id of the object this artifact is associated with
Definition at line 376 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.BlackboardArtifact.objID.
Referenced by org.sleuthkit.datamodel.SleuthkitCase.getAllBlackboardArtifactTags(), org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTagByID(), and org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTagsByTagName().
ReviewStatus org.sleuthkit.datamodel.BlackboardArtifact.getReviewStatus | ( | ) |
Definition at line 358 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.BlackboardArtifact.reviewStatus.
SleuthkitCase org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase | ( | ) |
Gets the SleuthkitCase handle associated with this object
Definition at line 532 of file BlackboardArtifact.java.
References org.sleuthkit.datamodel.BlackboardArtifact.sleuthkitCase.
int org.sleuthkit.datamodel.BlackboardArtifact.hashCode | ( | ) |
Definition at line 552 of file BlackboardArtifact.java.
String org.sleuthkit.datamodel.BlackboardArtifact.toString | ( | ) |
Definition at line 559 of file BlackboardArtifact.java.
|
private |
Definition at line 305 of file BlackboardArtifact.java.
Referenced by org.sleuthkit.datamodel.BlackboardArtifact.BlackboardArtifact(), org.sleuthkit.datamodel.BlackboardArtifact.equals(), and org.sleuthkit.datamodel.BlackboardArtifact.getArtifactID().
|
private |
Definition at line 307 of file BlackboardArtifact.java.
Referenced by org.sleuthkit.datamodel.BlackboardArtifact.BlackboardArtifact(), and org.sleuthkit.datamodel.BlackboardArtifact.getArtifactTypeID().
|
private |
Definition at line 308 of file BlackboardArtifact.java.
Referenced by org.sleuthkit.datamodel.BlackboardArtifact.BlackboardArtifact(), and org.sleuthkit.datamodel.BlackboardArtifact.getArtifactTypeName().
|
private |
Definition at line 312 of file BlackboardArtifact.java.
Referenced by org.sleuthkit.datamodel.BlackboardArtifact.getAttributes().
|
staticprivate |
Definition at line 38 of file BlackboardArtifact.java.
|
private |
Definition at line 309 of file BlackboardArtifact.java.
Referenced by org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.ARTIFACT_TYPE(), org.sleuthkit.datamodel.BlackboardArtifact.BlackboardArtifact(), org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getDisplayName(), org.sleuthkit.datamodel.BlackboardArtifact.getDisplayName(), and org.sleuthkit.datamodel.BlackboardArtifact.ReviewStatus.getDisplayName().
|
private |
Definition at line 313 of file BlackboardArtifact.java.
|
private |
Definition at line 306 of file BlackboardArtifact.java.
Referenced by org.sleuthkit.datamodel.BlackboardArtifact.BlackboardArtifact(), and org.sleuthkit.datamodel.BlackboardArtifact.getObjectID().
|
private |
Definition at line 310 of file BlackboardArtifact.java.
Referenced by org.sleuthkit.datamodel.BlackboardArtifact.getReviewStatus().
|
private |
Definition at line 311 of file BlackboardArtifact.java.
Referenced by org.sleuthkit.datamodel.BlackboardArtifact.BlackboardArtifact(), and org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase().
Copyright © 2011-2015 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.