Sleuth Kit Java Bindings (JNI)  4.3
Java bindings for using The Sleuth Kit
org.sleuthkit.datamodel.OSInfo Class Reference

Public Member Functions

 OSInfo ()
 
 OSInfo (BlackboardArtifact a_art, boolean a_isBackup, long a_fileSystemId, Content a_parent) throws TskCoreException
 
 OSInfo (BlackboardArtifact a_art, boolean a_isBackup, Content a_parent) throws TskCoreException
 
void combine (OSInfo a_osInfo)
 
List< BlackboardArtifactgetArtifacts ()
 
String getAttributeValue (ATTRIBUTE_TYPE attrType)
 
String getCompName ()
 
String getDomain ()
 
long getFileSystemId ()
 
boolean getIsBackup ()
 
String getOSName ()
 
String getProcessorArchitecture ()
 
boolean haveFileSystem ()
 
boolean matches (OSInfo a_osInfo)
 

Private Attributes

final List< BlackboardArtifactartifacts
 
final Map< Integer, String > attributeMap
 
final long fileSystemId
 
final boolean haveFsContent
 
final boolean haveParentId
 
final boolean isBackup
 
final long parentObjId
 

Detailed Description

Utility class to hold information from OS Info artifacts

Definition at line 31 of file OSInfo.java.

Constructor & Destructor Documentation

org.sleuthkit.datamodel.OSInfo.OSInfo ( )

Definition at line 41 of file OSInfo.java.

org.sleuthkit.datamodel.OSInfo.OSInfo ( BlackboardArtifact  a_art,
boolean  a_isBackup,
long  a_fileSystemId,
Content  a_parent 
) throws TskCoreException

Initialize an OSInfo object

Parameters
a_art- OSInfo artifact associated with one registry hive
a_isBackup- True if the registry hive was found in a "RegBack" directory
a_fileSystemId- File system ID for FS containing the registry hive
a_parent- Parent directory containing the registry hive. Can be null
Exceptions
TskCoreException

Definition at line 64 of file OSInfo.java.

org.sleuthkit.datamodel.OSInfo.OSInfo ( BlackboardArtifact  a_art,
boolean  a_isBackup,
Content  a_parent 
) throws TskCoreException

Initialize an OSInfo object (without file system information)

Parameters
a_art- OSInfo artifact associated with one registry hive
a_isBackup- True if the registry hive was found in a "RegBack" directory
a_parent- Parent directory containing the registry hive. Can be null
Exceptions
TskCoreException

Definition at line 95 of file OSInfo.java.

Member Function Documentation

void org.sleuthkit.datamodel.OSInfo.combine ( OSInfo  a_osInfo)

Combine the attribute map for two OSInfo objects.

Parameters
a_osInfo- The OSInfo object to combine with

Definition at line 145 of file OSInfo.java.

References org.sleuthkit.datamodel.OSInfo.artifacts, and org.sleuthkit.datamodel.OSInfo.attributeMap.

Referenced by org.sleuthkit.datamodel.OSUtility.getOSInfoInternal().

List<BlackboardArtifact> org.sleuthkit.datamodel.OSInfo.getArtifacts ( )

Definition at line 150 of file OSInfo.java.

References org.sleuthkit.datamodel.OSInfo.artifacts.

String org.sleuthkit.datamodel.OSInfo.getAttributeValue ( ATTRIBUTE_TYPE  attrType)
String org.sleuthkit.datamodel.OSInfo.getCompName ( )
String org.sleuthkit.datamodel.OSInfo.getDomain ( )
long org.sleuthkit.datamodel.OSInfo.getFileSystemId ( )

Definition at line 158 of file OSInfo.java.

References org.sleuthkit.datamodel.OSInfo.fileSystemId.

boolean org.sleuthkit.datamodel.OSInfo.getIsBackup ( )

Definition at line 162 of file OSInfo.java.

References org.sleuthkit.datamodel.OSInfo.isBackup.

String org.sleuthkit.datamodel.OSInfo.getOSName ( )
String org.sleuthkit.datamodel.OSInfo.getProcessorArchitecture ( )
boolean org.sleuthkit.datamodel.OSInfo.haveFileSystem ( )

Definition at line 154 of file OSInfo.java.

References org.sleuthkit.datamodel.OSInfo.haveFsContent.

boolean org.sleuthkit.datamodel.OSInfo.matches ( OSInfo  a_osInfo)

Determine whether two OSInfo objects should be combined.

Parameters
a_osInfo- the OSInfo object to compare against
Returns

Definition at line 121 of file OSInfo.java.

References org.sleuthkit.datamodel.OSInfo.fileSystemId, org.sleuthkit.datamodel.OSInfo.haveFsContent, org.sleuthkit.datamodel.OSInfo.haveParentId, org.sleuthkit.datamodel.OSInfo.isBackup, and org.sleuthkit.datamodel.OSInfo.parentObjId.

Member Data Documentation

final List<BlackboardArtifact> org.sleuthkit.datamodel.OSInfo.artifacts
private
final Map<Integer, String> org.sleuthkit.datamodel.OSInfo.attributeMap
private

Definition at line 34 of file OSInfo.java.

Referenced by org.sleuthkit.datamodel.OSInfo.combine().

final long org.sleuthkit.datamodel.OSInfo.fileSystemId
private
final boolean org.sleuthkit.datamodel.OSInfo.haveFsContent
private
final boolean org.sleuthkit.datamodel.OSInfo.haveParentId
private

Definition at line 38 of file OSInfo.java.

Referenced by org.sleuthkit.datamodel.OSInfo.matches().

final boolean org.sleuthkit.datamodel.OSInfo.isBackup
private
final long org.sleuthkit.datamodel.OSInfo.parentObjId
private

Definition at line 39 of file OSInfo.java.

Referenced by org.sleuthkit.datamodel.OSInfo.matches().


The documentation for this class was generated from the following file:

Copyright © 2011-2015 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.