Sleuth Kit Java Bindings (JNI)  4.3
Java bindings for using The Sleuth Kit
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT Enum Reference

Public Member Functions

String getSQL ()
 

Public Attributes

 COUNT_ARTIFACTS_BY_SOURCE_AND_TYPE =("SELECT COUNT(*) AS count FROM blackboard_artifacts WHERE obj_id = ? AND artifact_type_id = ? AND review_status_id != " + BlackboardArtifact.ReviewStatus.REJECTED.getID())
 
 COUNT_ARTIFACTS_BY_TAG_NAME =("SELECT COUNT(*) AS count FROM blackboard_artifact_tags WHERE tag_name_id = ?")
 
 COUNT_ARTIFACTS_FROM_SOURCE =("SELECT COUNT(*) AS count FROM blackboard_artifacts WHERE obj_id = ? AND review_status_id != " + BlackboardArtifact.ReviewStatus.REJECTED.getID())
 
 COUNT_ARTIFACTS_OF_TYPE =("SELECT COUNT(*) AS count FROM blackboard_artifacts WHERE artifact_type_id = ? AND review_status_id != " + BlackboardArtifact.ReviewStatus.REJECTED.getID())
 
 COUNT_CHILD_OBJECTS_BY_PARENT =("SELECT COUNT(obj_id) AS count FROM tsk_objects WHERE par_obj_id = ?")
 
 COUNT_CONTENT_TAGS_BY_TAG_NAME =("SELECT COUNT(*) AS count FROM content_tags WHERE tag_name_id = ?")
 
 DELETE_ARTIFACT_TAG =("DELETE FROM blackboard_artifact_tags WHERE tag_id = ?")
 
 DELETE_CONTENT_TAG =("DELETE FROM content_tags WHERE tag_id = ?")
 
 DELETE_REPORT =("DELETE FROM reports WHERE reports.report_id = ?")
 
 INSERT_ARTIFACT
 
 INSERT_ARTIFACT_TAG =("INSERT INTO blackboard_artifact_tags (artifact_id, tag_name_id, comment) VALUES (?, ?, ?)")
 
 INSERT_BYTE_ATTRIBUTE
 
 INSERT_CONTENT_TAG =("INSERT INTO content_tags (obj_id, tag_name_id, comment, begin_byte_offset, end_byte_offset) VALUES (?, ?, ?, ?, ?)")
 
 INSERT_DOUBLE_ATTRIBUTE
 
 INSERT_FILE
 
 INSERT_INGEST_JOB =("INSERT INTO ingest_jobs (obj_id, host_name, start_date_time, end_date_time, status_id, settings_dir) VALUES (?, ?, ?, ?, ?, ?)")
 
 INSERT_INGEST_MODULE =("INSERT INTO ingest_modules (display_name, unique_name, type_id, version) VALUES(?, ?, ?, ?)")
 
 INSERT_INT_ATTRIBUTE
 
 INSERT_LAYOUT_FILE
 
 INSERT_LOCAL_PATH =("INSERT INTO tsk_files_path (obj_id, path, encoding_type) VALUES (?, ?, ?)")
 
 INSERT_LONG_ATTRIBUTE
 
 INSERT_OBJECT =("INSERT INTO tsk_objects (par_obj_id, type) VALUES (?, ?)")
 
 INSERT_REPORT =("INSERT INTO reports (path, crtime, src_module_name, report_name) VALUES (?, ?, ?, ?)")
 
 INSERT_STRING_ATTRIBUTE
 
 INSERT_TAG_NAME =("INSERT INTO tag_names (display_name, description, color) VALUES (?, ?, ?)")
 
 POSTGRESQL_INSERT_ARTIFACT
 
 SELECT_ARTIFACT_TAG_BY_ID =("SELECT * FROM blackboard_artifact_tags INNER JOIN tag_names ON blackboard_artifact_tags.tag_name_id = tag_names.tag_name_id WHERE blackboard_artifact_tags.tag_id = ?")
 
 SELECT_ARTIFACT_TAGS =("SELECT * FROM blackboard_artifact_tags INNER JOIN tag_names ON blackboard_artifact_tags.tag_name_id = tag_names.tag_name_id")
 
 SELECT_ARTIFACT_TAGS_BY_ARTIFACT =("SELECT * FROM blackboard_artifact_tags INNER JOIN tag_names ON blackboard_artifact_tags.tag_name_id = tag_names.tag_name_id WHERE blackboard_artifact_tags.artifact_id = ?")
 
 SELECT_ARTIFACT_TAGS_BY_TAG_NAME =("SELECT * FROM blackboard_artifact_tags WHERE tag_name_id = ?")
 
 SELECT_ARTIFACTS_BY_TYPE
 
 SELECT_ATTR_BY_VALUE_BYTE =("SELECT source FROM blackboard_attributes WHERE artifact_id = ? AND attribute_type_id = ? AND value_type = 4 AND value_byte = ?")
 
 SELECT_CONTENT_TAG_BY_ID =("SELECT * FROM content_tags INNER JOIN tag_names ON content_tags.tag_name_id = tag_names.tag_name_id WHERE tag_id = ?")
 
 SELECT_CONTENT_TAGS =("SELECT * FROM content_tags INNER JOIN tag_names ON content_tags.tag_name_id = tag_names.tag_name_id")
 
 SELECT_CONTENT_TAGS_BY_CONTENT =("SELECT * FROM content_tags INNER JOIN tag_names ON content_tags.tag_name_id = tag_names.tag_name_id WHERE content_tags.obj_id = ?")
 
 SELECT_CONTENT_TAGS_BY_TAG_NAME =("SELECT * FROM content_tags WHERE tag_name_id = ?")
 
 SELECT_DERIVED_FILE =("SELECT derived_id, rederive FROM tsk_files_derived WHERE obj_id = ?")
 
 SELECT_ENCODING_FOR_FILE =("SELECT encoding_type FROM tsk_files_path WHERE obj_id = ?")
 
 SELECT_FILE_BY_ID =("SELECT * FROM tsk_files WHERE obj_id = ? LIMIT 1")
 
 SELECT_FILE_DERIVATION_METHOD =("SELECT tool_name, tool_version, other FROM tsk_files_derived_method WHERE derived_id = ?")
 
 SELECT_FILE_IDS_BY_PARENT
 
 SELECT_FILE_IDS_BY_PARENT_AND_TYPE
 
 SELECT_FILE_NAME =("SELECT name FROM tsk_files WHERE obj_id = ?")
 
 SELECT_FILE_SYSTEM_BY_OBJECT =("SELECT fs_obj_id from tsk_files WHERE obj_id=?")
 
 SELECT_FILES_BY_DATA_SOURCE_AND_NAME =("SELECT * FROM tsk_files WHERE LOWER(name) LIKE LOWER(?) AND LOWER(name) NOT LIKE LOWER('%journal%') AND data_source_obj_id = ?")
 
 SELECT_FILES_BY_DATA_SOURCE_AND_PARENT_PATH_AND_NAME =("SELECT * FROM tsk_files WHERE LOWER(name) LIKE LOWER(?) AND LOWER(name) NOT LIKE LOWER('%journal%') AND LOWER(parent_path) LIKE LOWER(?) AND data_source_obj_id = ?")
 
 SELECT_FILES_BY_PARENT
 
 SELECT_FILES_BY_PARENT_AND_TYPE
 
 SELECT_LOCAL_PATH_AND_ENCODING_FOR_FILE =("SELECT path, encoding_type FROM tsk_files_path WHERE obj_id = ?")
 
 SELECT_LOCAL_PATH_FOR_FILE =("SELECT path FROM tsk_files_path WHERE obj_id = ?")
 
 SELECT_MAX_OBJECT_ID =("SELECT MAX(obj_id) AS max_obj_id FROM tsk_objects")
 
 SELECT_PATH_FOR_FILE =("SELECT parent_path FROM tsk_files WHERE obj_id = ?")
 
 SELECT_REPORTS =("SELECT * FROM reports")
 
 SELECT_TAG_NAMES =("SELECT * FROM tag_names")
 
 SELECT_TAG_NAMES_IN_USE
 
 UPDATE_ATTR_BY_VALUE_BYTE =("UPDATE blackboard_attributes SET source = ? WHERE artifact_id = ? AND attribute_type_id = ? AND value_type = 4 AND value_byte = ?")
 
 UPDATE_FILE_MD5 =("UPDATE tsk_files SET md5 = ? WHERE obj_id = ?")
 
 UPDATE_IMAGE_PATH =("UPDATE tsk_image_names SET name = ? WHERE obj_id = ?")
 

Private Member Functions

 PREPARED_STATEMENT (String sql)
 

Private Attributes

final String sql
 

Detailed Description

Definition at line 7372 of file SleuthkitCase.java.

Constructor & Destructor Documentation

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.PREPARED_STATEMENT ( String  sql)
private

Definition at line 7462 of file SleuthkitCase.java.

Member Function Documentation

String org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.getSQL ( )

Definition at line 7466 of file SleuthkitCase.java.

Member Data Documentation

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.COUNT_ARTIFACTS_BY_SOURCE_AND_TYPE =("SELECT COUNT(*) AS count FROM blackboard_artifacts WHERE obj_id = ? AND artifact_type_id = ? AND review_status_id != " + BlackboardArtifact.ReviewStatus.REJECTED.getID())
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.COUNT_ARTIFACTS_BY_TAG_NAME =("SELECT COUNT(*) AS count FROM blackboard_artifact_tags WHERE tag_name_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.COUNT_ARTIFACTS_FROM_SOURCE =("SELECT COUNT(*) AS count FROM blackboard_artifacts WHERE obj_id = ? AND review_status_id != " + BlackboardArtifact.ReviewStatus.REJECTED.getID())
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.COUNT_ARTIFACTS_OF_TYPE =("SELECT COUNT(*) AS count FROM blackboard_artifacts WHERE artifact_type_id = ? AND review_status_id != " + BlackboardArtifact.ReviewStatus.REJECTED.getID())
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.COUNT_CHILD_OBJECTS_BY_PARENT =("SELECT COUNT(obj_id) AS count FROM tsk_objects WHERE par_obj_id = ?")

Definition at line 7430 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.COUNT_CONTENT_TAGS_BY_TAG_NAME =("SELECT COUNT(*) AS count FROM content_tags WHERE tag_name_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.DELETE_ARTIFACT_TAG =("DELETE FROM blackboard_artifact_tags WHERE tag_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.DELETE_CONTENT_TAG =("DELETE FROM content_tags WHERE tag_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.DELETE_REPORT =("DELETE FROM reports WHERE reports.report_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_ARTIFACT
Initial value:
=("INSERT INTO blackboard_artifacts (artifact_id, obj_id, artifact_type_id, review_status_id) "
+ "VALUES (?, ?, ?," + BlackboardArtifact.ReviewStatus.UNDECIDED.getID() + ")")

Definition at line 7399 of file SleuthkitCase.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.newBlackboardArtifact().

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_ARTIFACT_TAG =("INSERT INTO blackboard_artifact_tags (artifact_id, tag_name_id, comment) VALUES (?, ?, ?)")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_BYTE_ATTRIBUTE
Initial value:
=("INSERT INTO blackboard_attributes (artifact_id, artifact_type_id, source, context, attribute_type_id, value_type, value_byte) "
+ "VALUES (?,?,?,?,?,?,?)")

Definition at line 7405 of file SleuthkitCase.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addBlackBoardAttribute().

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_CONTENT_TAG =("INSERT INTO content_tags (obj_id, tag_name_id, comment, begin_byte_offset, end_byte_offset) VALUES (?, ?, ?, ?, ?)")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_DOUBLE_ATTRIBUTE
Initial value:
=("INSERT INTO blackboard_attributes (artifact_id, artifact_type_id, source, context, attribute_type_id, value_type, value_double) "
+ "VALUES (?,?,?,?,?,?,?)")

Definition at line 7411 of file SleuthkitCase.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addBlackBoardAttribute().

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_FILE
Initial value:
=("INSERT INTO tsk_files (obj_id, fs_obj_id, name, type, has_path, dir_type, meta_type, dir_flags, meta_flags, size, ctime, crtime, atime, mtime, parent_path, data_source_obj_id) "
+ "VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)")

Definition at line 7425 of file SleuthkitCase.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addCarvedFiles(), org.sleuthkit.datamodel.SleuthkitCase.addDerivedFile(), org.sleuthkit.datamodel.SleuthkitCase.addLayoutFiles(), org.sleuthkit.datamodel.SleuthkitCase.addLocalFile(), org.sleuthkit.datamodel.SleuthkitCase.addLocalFilesDataSource(), and org.sleuthkit.datamodel.SleuthkitCase.addVirtualDirectory().

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_INGEST_JOB =("INSERT INTO ingest_jobs (obj_id, host_name, start_date_time, end_date_time, status_id, settings_dir) VALUES (?, ?, ?, ?, ?, ?)")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_INGEST_MODULE =("INSERT INTO ingest_modules (display_name, unique_name, type_id, version) VALUES(?, ?, ?, ?)")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_INT_ATTRIBUTE
Initial value:
=("INSERT INTO blackboard_attributes (artifact_id, artifact_type_id, source, context, attribute_type_id, value_type, value_int32) "
+ "VALUES (?,?,?,?,?,?,?)")

Definition at line 7407 of file SleuthkitCase.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addBlackBoardAttribute().

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_LAYOUT_FILE
Initial value:
=("INSERT INTO tsk_file_layout (obj_id, byte_start, byte_len, sequence) "
+ "VALUES (?, ?, ?, ?)")

Definition at line 7427 of file SleuthkitCase.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addCarvedFiles(), and org.sleuthkit.datamodel.SleuthkitCase.addLayoutFiles().

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_LOCAL_PATH =("INSERT INTO tsk_files_path (obj_id, path, encoding_type) VALUES (?, ?, ?)")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_LONG_ATTRIBUTE
Initial value:
=("INSERT INTO blackboard_attributes (artifact_id, artifact_type_id, source, context, attribute_type_id, value_type, value_int64) "
+ "VALUES (?,?,?,?,?,?,?)")

Definition at line 7409 of file SleuthkitCase.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addBlackBoardAttribute().

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_REPORT =("INSERT INTO reports (path, crtime, src_module_name, report_name) VALUES (?, ?, ?, ?)")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_STRING_ATTRIBUTE
Initial value:
=("INSERT INTO blackboard_attributes (artifact_id, artifact_type_id, source, context, attribute_type_id, value_type, value_text) "
+ "VALUES (?,?,?,?,?,?,?)")

Definition at line 7403 of file SleuthkitCase.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addBlackBoardAttribute().

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.INSERT_TAG_NAME =("INSERT INTO tag_names (display_name, description, color) VALUES (?, ?, ?)")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.POSTGRESQL_INSERT_ARTIFACT
Initial value:
=("INSERT INTO blackboard_artifacts (artifact_id, obj_id, artifact_type_id, review_status_id) "
+ "VALUES (DEFAULT, ?, ?," + BlackboardArtifact.ReviewStatus.UNDECIDED.getID() + ")")

Definition at line 7401 of file SleuthkitCase.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.newBlackboardArtifact().

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_ARTIFACT_TAG_BY_ID =("SELECT * FROM blackboard_artifact_tags INNER JOIN tag_names ON blackboard_artifact_tags.tag_name_id = tag_names.tag_name_id WHERE blackboard_artifact_tags.tag_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_ARTIFACT_TAGS =("SELECT * FROM blackboard_artifact_tags INNER JOIN tag_names ON blackboard_artifact_tags.tag_name_id = tag_names.tag_name_id")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_ARTIFACT_TAGS_BY_ARTIFACT =("SELECT * FROM blackboard_artifact_tags INNER JOIN tag_names ON blackboard_artifact_tags.tag_name_id = tag_names.tag_name_id WHERE blackboard_artifact_tags.artifact_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_ARTIFACT_TAGS_BY_TAG_NAME =("SELECT * FROM blackboard_artifact_tags WHERE tag_name_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_ARTIFACTS_BY_TYPE
Initial value:
=("SELECT artifact_id, obj_id FROM blackboard_artifacts "
+ "WHERE artifact_type_id = ?")

Definition at line 7374 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_ATTR_BY_VALUE_BYTE =("SELECT source FROM blackboard_attributes WHERE artifact_id = ? AND attribute_type_id = ? AND value_type = 4 AND value_byte = ?")

Definition at line 7456 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_CONTENT_TAG_BY_ID =("SELECT * FROM content_tags INNER JOIN tag_names ON content_tags.tag_name_id = tag_names.tag_name_id WHERE tag_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_CONTENT_TAGS =("SELECT * FROM content_tags INNER JOIN tag_names ON content_tags.tag_name_id = tag_names.tag_name_id")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_CONTENT_TAGS_BY_CONTENT =("SELECT * FROM content_tags INNER JOIN tag_names ON content_tags.tag_name_id = tag_names.tag_name_id WHERE content_tags.obj_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_CONTENT_TAGS_BY_TAG_NAME =("SELECT * FROM content_tags WHERE tag_name_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_DERIVED_FILE =("SELECT derived_id, rederive FROM tsk_files_derived WHERE obj_id = ?")

Definition at line 7421 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_ENCODING_FOR_FILE =("SELECT encoding_type FROM tsk_files_path WHERE obj_id = ?")

Definition at line 7417 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_FILE_BY_ID =("SELECT * FROM tsk_files WHERE obj_id = ? LIMIT 1")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_FILE_DERIVATION_METHOD =("SELECT tool_name, tool_version, other FROM tsk_files_derived_method WHERE derived_id = ?")

Definition at line 7422 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_FILE_IDS_BY_PARENT
Initial value:
=("SELECT tsk_files.obj_id AS obj_id "
+ "FROM tsk_objects INNER JOIN tsk_files "
+ "ON tsk_objects.obj_id=tsk_files.obj_id "
+ "WHERE (tsk_objects.par_obj_id = ?)")

Definition at line 7389 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_FILE_IDS_BY_PARENT_AND_TYPE
Initial value:
=("SELECT tsk_files.obj_id AS obj_id "
+ "FROM tsk_objects INNER JOIN tsk_files "
+ "ON tsk_objects.obj_id=tsk_files.obj_id "
+ "WHERE (tsk_objects.par_obj_id = ? "
+ "AND tsk_files.type = ? )")

Definition at line 7393 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_FILE_NAME =("SELECT name FROM tsk_files WHERE obj_id = ?")

Definition at line 7420 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_FILE_SYSTEM_BY_OBJECT =("SELECT fs_obj_id from tsk_files WHERE obj_id=?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_FILES_BY_DATA_SOURCE_AND_NAME =("SELECT * FROM tsk_files WHERE LOWER(name) LIKE LOWER(?) AND LOWER(name) NOT LIKE LOWER('%journal%') AND data_source_obj_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_FILES_BY_DATA_SOURCE_AND_PARENT_PATH_AND_NAME =("SELECT * FROM tsk_files WHERE LOWER(name) LIKE LOWER(?) AND LOWER(name) NOT LIKE LOWER('%journal%') AND LOWER(parent_path) LIKE LOWER(?) AND data_source_obj_id = ?")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_FILES_BY_PARENT
Initial value:
=("SELECT tsk_files.* "
+ "FROM tsk_objects INNER JOIN tsk_files "
+ "ON tsk_objects.obj_id=tsk_files.obj_id "
+ "WHERE (tsk_objects.par_obj_id = ? ) "
+ "ORDER BY tsk_files.dir_type, LOWER(tsk_files.name)")

Definition at line 7379 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_FILES_BY_PARENT_AND_TYPE
Initial value:
=("SELECT tsk_files.* "
+ "FROM tsk_objects INNER JOIN tsk_files "
+ "ON tsk_objects.obj_id=tsk_files.obj_id "
+ "WHERE (tsk_objects.par_obj_id = ? AND tsk_files.type = ? ) "
+ "ORDER BY tsk_files.dir_type, LOWER(tsk_files.name)")

Definition at line 7384 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_LOCAL_PATH_AND_ENCODING_FOR_FILE =("SELECT path, encoding_type FROM tsk_files_path WHERE obj_id = ?")

Definition at line 7418 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_LOCAL_PATH_FOR_FILE =("SELECT path FROM tsk_files_path WHERE obj_id = ?")

Definition at line 7416 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_MAX_OBJECT_ID =("SELECT MAX(obj_id) AS max_obj_id FROM tsk_objects")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_PATH_FOR_FILE =("SELECT parent_path FROM tsk_files WHERE obj_id = ?")

Definition at line 7419 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_REPORTS =("SELECT * FROM reports")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_TAG_NAMES =("SELECT * FROM tag_names")
org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.SELECT_TAG_NAMES_IN_USE
Initial value:
=("SELECT * FROM tag_names "
+ "WHERE tag_name_id IN "
+ "(SELECT tag_name_id from content_tags UNION SELECT tag_name_id FROM blackboard_artifact_tags)")

Definition at line 7433 of file SleuthkitCase.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getTagNamesInUse().

final String org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.sql
private

Definition at line 7460 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.UPDATE_ATTR_BY_VALUE_BYTE =("UPDATE blackboard_attributes SET source = ? WHERE artifact_id = ? AND attribute_type_id = ? AND value_type = 4 AND value_byte = ?")

Definition at line 7457 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.UPDATE_FILE_MD5 =("UPDATE tsk_files SET md5 = ? WHERE obj_id = ?")

Definition at line 7415 of file SleuthkitCase.java.

org.sleuthkit.datamodel.SleuthkitCase.PREPARED_STATEMENT.UPDATE_IMAGE_PATH =("UPDATE tsk_image_names SET name = ? WHERE obj_id = ?")

The documentation for this enum was generated from the following file:

Copyright © 2011-2015 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.