Sleuth Kit Java Bindings (JNI)  4.6
Java bindings for using The Sleuth Kit
org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper Class Reference

Inherits org.sleuthkit.datamodel.blackboardutils.ArtifactHelperBase.

Public Member Functions

 WebBrowserArtifactsHelper (SleuthkitCase caseDb, String moduleName, Content srcContent)
 
BlackboardArtifact addWebBookmark (String url, String title, long creationTime, String progName) throws TskCoreException, BlackboardException
 
BlackboardArtifact addWebBookmark (String url, String title, long creationTime, String progName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException
 
BlackboardArtifact addWebCookie (String url, long creationTime, String name, String value, String programName) throws TskCoreException, BlackboardException
 
BlackboardArtifact addWebCookie (String url, long creationTime, String name, String value, String programName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException
 
BlackboardArtifact addWebDownload (String url, long startTime, String path, String programName) throws TskCoreException, BlackboardException
 
BlackboardArtifact addWebDownload (String url, long startTime, String path, String programName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException
 
BlackboardArtifact addWebFormAddress (String personName, String email, String phoneNumber, String mailingAddress, long creationTime, long accessTime, int count) throws TskCoreException, BlackboardException
 
BlackboardArtifact addWebFormAddress (String personName, String email, String phoneNumber, String mailingAddress, long creationTime, long accessTime, int count, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException
 
BlackboardArtifact addWebFormAutofill (String name, String value, long creationTime, long accessTime, int count) throws TskCoreException, BlackboardException
 
BlackboardArtifact addWebFormAutofill (String name, String value, long creationTime, long accessTime, int count, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException
 
BlackboardArtifact addWebHistory (String url, long accessTime, String referrer, String title, String programName) throws TskCoreException, BlackboardException
 
BlackboardArtifact addWebHistory (String url, long accessTime, String referrer, String title, String programName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException
 

Detailed Description

Class to help ingest modules create Web Browser artifacts.

These include bookmarks, cookies, downloads, history, and web form autofill data.

Definition at line 43 of file WebBrowserArtifactsHelper.java.

Constructor & Destructor Documentation

org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.WebBrowserArtifactsHelper ( SleuthkitCase  caseDb,
String  moduleName,
Content  srcContent 
)

Creates a WebBrowserArtifactsHelper.

Parameters
caseDbSleuthkit case db.
moduleNameName of module using the helper.
srcContentSource content being processed by the module.

Definition at line 53 of file WebBrowserArtifactsHelper.java.

Member Function Documentation

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebBookmark ( String  url,
String  title,
long  creationTime,
String  progName 
) throws TskCoreException, BlackboardException

Adds a TSK_WEB_BOOKMARK artifact.

Parameters
urlBookmark URL, required.
titleBookmark title, may be empty/null.
creationTimeDate/time created, may be 0 if not available.
progNameApplication/program that created bookmark, may be empty/null.
Returns
Bookmark artifact.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 71 of file WebBrowserArtifactsHelper.java.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebBookmark ( String  url,
String  title,
long  creationTime,
String  progName,
Collection< BlackboardAttribute otherAttributesList 
) throws TskCoreException, BlackboardException

Adds a TSK_WEB_BOOKMARK artifact.

Parameters
urlBookmark URL, required.
titleBookmark title, may be empty/null.
creationTimeDate/time created, may be 0 if not available.
progNameApplication/program that created bookmark, may be empty/null.
otherAttributesListOther attributes, may be an empty list.
Returns
Bookmark artifact.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 91 of file WebBrowserArtifactsHelper.java.

References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_CREATED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_TITLE, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebCookie ( String  url,
long  creationTime,
String  name,
String  value,
String  programName 
) throws TskCoreException, BlackboardException

Adds a TSK_WEB_COOKIE artifact.

Parameters
urlUrl of the site that created the cookie, required.
creationTimeCreate time of cookie, may be 0 if not available.
nameCookie name, may be empty or null.
valueCookie value, may be empty or null.
programNameName of the application/program that created the cookie, may be empty or null.
Returns
WebCookie artifact
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 134 of file WebBrowserArtifactsHelper.java.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebCookie ( String  url,
long  creationTime,
String  name,
String  value,
String  programName,
Collection< BlackboardAttribute otherAttributesList 
) throws TskCoreException, BlackboardException

Adds a TSK_WEB_COOKIE artifact.

Parameters
urlUrl of the site that created the cookie, required.
creationTimeCreate time of cookie, may be 0 if not available.
nameCookie name, may be empty or null.
valueCookie value, may be empty or null.
programNameName of the application/program that created the cookie, may be empty or null.
otherAttributesListOther attributes, may be an empty list.
Returns
WebCookie artifact
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 160 of file WebBrowserArtifactsHelper.java.

References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_VALUE, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebDownload ( String  url,
long  startTime,
String  path,
String  programName 
) throws TskCoreException, BlackboardException

Adds a TSK_WEB_DOWNNLOAD artifact.

Parameters
urlURL downloaded from, required.
startTimeDate/time downloaded, 0 if not available.
pathPath of downloaded file, required.
programNameProgram that initiated the download, may be empty or null.
Returns
Web download artifact created.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 204 of file WebBrowserArtifactsHelper.java.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebDownload ( String  url,
long  startTime,
String  path,
String  programName,
Collection< BlackboardAttribute otherAttributesList 
) throws TskCoreException, BlackboardException

Adds a TSK_WEB_DOWNNLOAD artifact.

Parameters
urlURL downloaded from, required.
startTimeDate/time downloaded, 0 if not available.
pathPath of downloaded file, required.
programNameProgram that initiated the download, may be empty or null.
otherAttributesListOther attributes, may be an empty list.
Returns
Web download artifact created.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 223 of file WebBrowserArtifactsHelper.java.

References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PATH, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAddress ( String  personName,
String  email,
String  phoneNumber,
String  mailingAddress,
long  creationTime,
long  accessTime,
int  count 
) throws TskCoreException, BlackboardException

Adds a TSK_WEB_FORM_AUTOFILL artifact.

Parameters
personNamePerson name, required.
emailEmail address, may be empty or null.
phoneNumberPhone number, may be empty or null.
mailingAddressMailing address, may be empty or null.
creationTimeCreation time, may be 0 if not available.
accessTimeLast access time, may be 0 if not available.
countUse count, may be 0 if not available.
Returns
Web form address artifact created.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 267 of file WebBrowserArtifactsHelper.java.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAddress ( String  personName,
String  email,
String  phoneNumber,
String  mailingAddress,
long  creationTime,
long  accessTime,
int  count,
Collection< BlackboardAttribute otherAttributesList 
) throws TskCoreException, BlackboardException

Adds a TSK_WEB_FORM_ADDRESS artifact.

Parameters
personNamePerson name, required.
emailEmail address, may be empty or null.
phoneNumberPhone number, may be empty or null.
mailingAddressMailing address, may be empty or null.
creationTimeCreation time, may be 0 if not available.
accessTimeLast access time, may be 0 if not available.
countUse count, may be 0 if not available.
otherAttributesListOther attributes, may be an empty list.
Returns
Web form address artifact created.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 292 of file WebBrowserArtifactsHelper.java.

References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_COUNT, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_CREATED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_EMAIL, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_LOCATION, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PHONE_NUMBER, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_ADDRESS.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAutofill ( String  name,
String  value,
long  creationTime,
long  accessTime,
int  count 
) throws TskCoreException, BlackboardException

Adds a TSK_WEB_FORM_AUTOFILL artifact.

Parameters
nameName of autofill field, required.
valueValue of autofill field, required.
creationTimeCreate date/time, may be 0 if not available.
accessTimeLast access date/time, may be 0 if not available.
countCount of times used, may be 0 if not available.
Returns
Web form autofill artifact created.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 339 of file WebBrowserArtifactsHelper.java.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAutofill ( String  name,
String  value,
long  creationTime,
long  accessTime,
int  count,
Collection< BlackboardAttribute otherAttributesList 
) throws TskCoreException, BlackboardException

Adds a TSK_WEB_FORM_AUTOFILL artifact.

Parameters
nameName of autofill field, required.
valueValue of autofill field, required.
creationTimeCreate date/time, may be 0 if not available.
accessTimeLast access date/time, may be 0 if not available.
countCount of times used, may be 0 if not available.
otherAttributesListOther attributes, may be an empty list.
Returns
Web form autofill artifact created.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 362 of file WebBrowserArtifactsHelper.java.

References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_COUNT, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_CREATED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_VALUE, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_AUTOFILL.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebHistory ( String  url,
long  accessTime,
String  referrer,
String  title,
String  programName 
) throws TskCoreException, BlackboardException

Adds a Web History artifact.

Parameters
urlUrl visited, required.
accessTimeLast access time, may be 0 if not available.
referrerReferrer, may be empty or null.
titleWebsite title, may be empty or null.
programNameApplication/program recording the history, may be empty or null.
Returns
Web history artifact created.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 405 of file WebBrowserArtifactsHelper.java.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebHistory ( String  url,
long  accessTime,
String  referrer,
String  title,
String  programName,
Collection< BlackboardAttribute otherAttributesList 
) throws TskCoreException, BlackboardException

Adds a Web History artifact.

Parameters
urlUrl visited, required.
accessTimeLast access time, may be 0 if not available.
referrerReferrer, may be empty or null.
titleWebsite title, may be empty or null.
programNameApplication/program recording the history, may be empty or null.
otherAttributesListOther attributes, may be an empty list.
Returns
Web history artifact created.
Exceptions
TskCoreExceptionIf there is an error creating the artifact.
BlackboardExceptionIf there is a problem posting the artifact.

Definition at line 427 of file WebBrowserArtifactsHelper.java.

References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_REFERRER, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_TITLE, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY.


The documentation for this class was generated from the following file:

Copyright © 2011-2018 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.