Sleuth Kit Java Bindings (JNI)  4.3
Java bindings for using The Sleuth Kit
org.sleuthkit.datamodel.BlackboardArtifact Class Reference

Inherits org.sleuthkit.datamodel.SleuthkitVisitableItem.

Classes

enum  ARTIFACT_TYPE
 
enum  ReviewStatus
 
class  Type
 

Public Member Functions

void addAttribute (BlackboardAttribute attr) throws TskCoreException
 
void addAttributes (Collection< BlackboardAttribute > attributes) throws TskCoreException
 
boolean equals (Object obj)
 
long getArtifactID ()
 
int getArtifactTypeID ()
 
String getArtifactTypeName ()
 
BlackboardAttribute getAttribute (BlackboardAttribute.Type attributeType) throws TskCoreException
 
List< BlackboardAttributegetAttributes () throws TskCoreException
 
List< BlackboardAttributegetAttributes (final BlackboardAttribute.ATTRIBUTE_TYPE attributeType) throws TskCoreException
 
String getDisplayName ()
 
long getObjectID ()
 
ReviewStatus getReviewStatus ()
 
SleuthkitCase getSleuthkitCase ()
 
int hashCode ()
 
String toString ()
 

Protected Member Functions

 BlackboardArtifact (SleuthkitCase sleuthkitCase, long artifactID, long objID, int artifactTypeID, String artifactTypeName, String displayName)
 

Private Attributes

final long artifactID
 
final int artifactTypeID
 
final String artifactTypeName
 
final List< BlackboardAttributeattrsCache = new ArrayList<BlackboardAttribute>()
 
final String displayName
 
boolean loadedCacheFromDb = false
 
final long objID
 
final ReviewStatus reviewStatus
 
final SleuthkitCase sleuthkitCase
 

Static Private Attributes

static final ResourceBundle bundle = ResourceBundle.getBundle("org.sleuthkit.datamodel.Bundle")
 

Detailed Description

Represents an artifact as stored in the Blackboard. Artifacts are a collection of name value pairs and have a type that represents the type of data they are storing. This class is used to create artifacts on the blackboard and is used to represent artifacts queried from the blackboard.

Definition at line 36 of file BlackboardArtifact.java.

Constructor & Destructor Documentation

org.sleuthkit.datamodel.BlackboardArtifact.BlackboardArtifact ( SleuthkitCase  sleuthkitCase,
long  artifactID,
long  objID,
int  artifactTypeID,
String  artifactTypeName,
String  displayName 
)
protected

Constructor for an artifact. Should only be used by SleuthkitCase. Sets the initial review status as "undecided"

Parameters
sleuthkitCasethe case that can be used to access the database this artifact is part of
artifactIDthe id for this artifact
objIDthe object this artifact is associated with
artifactTypeIDthe type id of this artifact
artifactTypeNamethe type name of this artifact
displayNamethe display name of this artifact
Deprecated:
use new BlackboardArtifact(SleuthkitCase, long, long, int, String, String, ReviewStatus) instead

Definition at line 645 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.artifactID, org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeID, org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeName, org.sleuthkit.datamodel.BlackboardArtifact.displayName, org.sleuthkit.datamodel.BlackboardArtifact.objID, org.sleuthkit.datamodel.BlackboardArtifact.sleuthkitCase, and org.sleuthkit.datamodel.BlackboardArtifact.ReviewStatus.UNDECIDED.

Member Function Documentation

void org.sleuthkit.datamodel.BlackboardArtifact.addAttribute ( BlackboardAttribute  attr) throws TskCoreException

Add an attribute to this artifact

Parameters
attrthe attribute to add
Exceptions
TskCoreExceptionif a critical error occurs and the attribute was not added

Definition at line 415 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitCase.addBlackboardAttribute().

void org.sleuthkit.datamodel.BlackboardArtifact.addAttributes ( Collection< BlackboardAttribute attributes) throws TskCoreException

Add a collection of attributes to this artifact in a single transaction (faster than individually)

Parameters
attributesList of attributes to add
Exceptions
TskCoreExceptionif a critical error occurs and the attribute was not added

Definition at line 431 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitCase.addBlackboardAttributes().

boolean org.sleuthkit.datamodel.BlackboardArtifact.equals ( Object  obj)
long org.sleuthkit.datamodel.BlackboardArtifact.getArtifactID ( )

Get the id for this artifact

Returns
id

Definition at line 367 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.artifactID.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.setReviewStatus().

int org.sleuthkit.datamodel.BlackboardArtifact.getArtifactTypeID ( )

Get the artifact type id for this artifact

Returns
artifact type id

Definition at line 385 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeID.

String org.sleuthkit.datamodel.BlackboardArtifact.getArtifactTypeName ( )

Get the artifact type name for this artifact

Returns
artifact type name

Definition at line 394 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeName.

BlackboardAttribute org.sleuthkit.datamodel.BlackboardArtifact.getAttribute ( BlackboardAttribute.Type  attributeType) throws TskCoreException

Gets the attribute of this artifact of given type.

Parameters
attributeTypeThe type of attribute to get
Returns
The attribute of that type, returns null if there is no attribute of that type.
Exceptions
TskCoreExceptionif a critical error occurs and the attributes are not fetched

Definition at line 503 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.getAttributes().

List<BlackboardAttribute> org.sleuthkit.datamodel.BlackboardArtifact.getAttributes ( ) throws TskCoreException

Gets all attributes associated with this artifact

Returns
a list of attributes
Exceptions
TskCoreExceptionif a critical error occurs and the attributes are not fetched

Definition at line 452 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.attrsCache, and org.sleuthkit.datamodel.SleuthkitCase.getBlackboardAttributes().

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.getAttribute(), and org.sleuthkit.datamodel.AbstractContent.getGenInfoAttributes().

List<BlackboardAttribute> org.sleuthkit.datamodel.BlackboardArtifact.getAttributes ( final BlackboardAttribute.ATTRIBUTE_TYPE  attributeType) throws TskCoreException

Gets all attributes associated with this artifact that are of the given attribute type.

Parameters
attributeTypethe type of attributes to get
Returns
a list of attributes of the given type
Exceptions
TskCoreExceptionif a critical error occurs and the attributes are not fetched
Deprecated:
There should not be multiple attributes of a type on an artifact. Use getAttribute(BlackboardAttribute.Type) instead.

Definition at line 476 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitCase.getBlackboardAttributes().

String org.sleuthkit.datamodel.BlackboardArtifact.getDisplayName ( )

Get the artifact display name for this artifact

Returns
artifact display name

Definition at line 403 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.displayName.

long org.sleuthkit.datamodel.BlackboardArtifact.getObjectID ( )
ReviewStatus org.sleuthkit.datamodel.BlackboardArtifact.getReviewStatus ( )
SleuthkitCase org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase ( )

Gets the SleuthkitCase handle associated with this object

Returns
the case handle

Definition at line 532 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.sleuthkitCase.

int org.sleuthkit.datamodel.BlackboardArtifact.hashCode ( )

Definition at line 552 of file BlackboardArtifact.java.

String org.sleuthkit.datamodel.BlackboardArtifact.toString ( )

Definition at line 559 of file BlackboardArtifact.java.

Member Data Documentation

final int org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeID
private
final String org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeName
private
final List<BlackboardAttribute> org.sleuthkit.datamodel.BlackboardArtifact.attrsCache = new ArrayList<BlackboardAttribute>()
private
final ResourceBundle org.sleuthkit.datamodel.BlackboardArtifact.bundle = ResourceBundle.getBundle("org.sleuthkit.datamodel.Bundle")
staticprivate

Definition at line 38 of file BlackboardArtifact.java.

boolean org.sleuthkit.datamodel.BlackboardArtifact.loadedCacheFromDb = false
private

Definition at line 313 of file BlackboardArtifact.java.

final long org.sleuthkit.datamodel.BlackboardArtifact.objID
private
final ReviewStatus org.sleuthkit.datamodel.BlackboardArtifact.reviewStatus
private
final SleuthkitCase org.sleuthkit.datamodel.BlackboardArtifact.sleuthkitCase
private

The documentation for this class was generated from the following file:

Copyright © 2011-2015 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.