Sleuth Kit Java Bindings (JNI)
4.3
Java bindings for using The Sleuth Kit
|
Static Public Member Functions | |
static List< OSInfo > | getAllOSInfo (SleuthkitCase skCase) throws TskCoreException |
static List< OSInfo > | getOSInfo (SleuthkitCase skCase) throws TskCoreException |
static List< OSInfo > | getOSInfo (SleuthkitCase skCase, FsContent fsc) throws TskCoreException |
Private Member Functions | |
OSUtility () | |
Static Private Member Functions | |
static List< OSInfo > | getOSInfoInternal (SleuthkitCase skCase, boolean includeBackups, boolean restrictFs, long fsId) throws TskCoreException |
Utility class to combine information from various OS info artifacts into fewer objects.
Definition at line 30 of file OSUtility.java.
|
private |
Definition at line 32 of file OSUtility.java.
|
static |
Creates a list of all OS Info data on any file system, including the backups
skCase | - Have to pass this in because we don't have access to the normal method |
TskCoreException |
Definition at line 77 of file OSUtility.java.
References org.sleuthkit.datamodel.OSUtility.getOSInfoInternal().
|
static |
Get all non-backup OSInfo data
skCase | - Have to pass this in because we don't have access to the normal method |
TskCoreException |
Definition at line 45 of file OSUtility.java.
References org.sleuthkit.datamodel.OSUtility.getOSInfoInternal().
|
static |
Get OSInfo from the same file system as the given object. Will not include backups.
skCase | - Have to pass this in because we don't have access to the normal method |
fsc | - FsContent from the same file system we want the OS information from |
TskCoreException |
Definition at line 62 of file OSUtility.java.
References org.sleuthkit.datamodel.OSUtility.getOSInfoInternal().
|
staticprivate |
Internal method to find and combine the requested OS Info data.
skCase | - Have to pass this in because we don't have access to the normal method |
includeBackups | - true if we should include registry data found in "RegBack" |
restrictFs | - true if an file system id is being provided to match against |
fsId | - the file system ID that the registry hives must be on (if restrictFs is set) |
TskCoreException |
Definition at line 97 of file OSUtility.java.
References org.sleuthkit.datamodel.OSInfo.combine(), org.sleuthkit.datamodel.FsContent.getFileSystemId(), org.sleuthkit.datamodel.AbstractContent.getParent(), org.sleuthkit.datamodel.AbstractFile.getParentPath(), and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_INFO.
Referenced by org.sleuthkit.datamodel.OSUtility.getAllOSInfo(), and org.sleuthkit.datamodel.OSUtility.getOSInfo().
Copyright © 2011-2015 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.