Sleuth Kit Java Bindings (JNI)
4.6
Java bindings for using The Sleuth Kit
|
Inherits org.sleuthkit.datamodel.Content.
Inherited by org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.
Public Member Functions | |
String | getAcquisitionDetails () throws TskCoreException |
long | getContentSize (SleuthkitCase sleuthkitCase) throws TskCoreException |
String | getDeviceId () |
String | getTimeZone () |
void | setAcquisitionDetails (String details) throws TskCoreException |
void | setDisplayName (String newName) throws TskCoreException |
Public Member Functions inherited from org.sleuthkit.datamodel.Content | |
public< T > T | accept (ContentVisitor< T > v) |
void | close () |
ArrayList< BlackboardArtifact > | getAllArtifacts () throws TskCoreException |
long | getAllArtifactsCount () throws TskCoreException |
ArrayList< BlackboardArtifact > | getArtifacts (String artifactTypeName) throws TskCoreException |
ArrayList< BlackboardArtifact > | getArtifacts (int artifactTypeID) throws TskCoreException |
ArrayList< BlackboardArtifact > | getArtifacts (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException |
long | getArtifactsCount (String artifactTypeName) throws TskCoreException |
long | getArtifactsCount (int artifactTypeID) throws TskCoreException |
long | getArtifactsCount (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException |
List< Content > | getChildren () throws TskCoreException |
int | getChildrenCount () throws TskCoreException |
List< Long > | getChildrenIds () throws TskCoreException |
Content | getDataSource () throws TskCoreException |
BlackboardArtifact | getGenInfoArtifact () throws TskCoreException |
BlackboardArtifact | getGenInfoArtifact (boolean create) throws TskCoreException |
ArrayList< BlackboardAttribute > | getGenInfoAttributes (BlackboardAttribute.ATTRIBUTE_TYPE attr_type) throws TskCoreException |
Set< String > | getHashSetNames () throws TskCoreException |
long | getId () |
String | getName () |
Content | getParent () throws TskCoreException |
long | getSize () |
String | getUniquePath () throws TskCoreException |
boolean | hasChildren () throws TskCoreException |
BlackboardArtifact | newArtifact (int artifactTypeID) throws TskCoreException |
BlackboardArtifact | newArtifact (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException |
int | read (byte[] buf, long offset, long len) throws TskCoreException |
Public Member Functions inherited from org.sleuthkit.datamodel.SleuthkitVisitableItem | |
public< T > T | accept (SleuthkitItemVisitor< T > v) |
A data source (e.g., an image, a local disk, a virtual directory of logical files, etc.).
Definition at line 25 of file DataSource.java.
String org.sleuthkit.datamodel.DataSource.getAcquisitionDetails | ( | ) | throws TskCoreException |
Gets the acquisition details field from the case database.
TskCoreException | Thrown if the data can not be read |
Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.
long org.sleuthkit.datamodel.DataSource.getContentSize | ( | SleuthkitCase | sleuthkitCase | ) | throws TskCoreException |
Gets the size of the contents of the data source in bytes. This size can change as archive files within the data source are expanded, files are carved, etc., and is different from the size of the data source as returned by Content.getSize, which is the size of the data source as a file.
sleuthkitCase | The sleuthkit case instance from which to make calls to the database. |
TskCoreException | Thrown when there is an issue trying to retrieve data from the database. |
Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.
String org.sleuthkit.datamodel.DataSource.getDeviceId | ( | ) |
Gets the ASCII-printable identifier for the device associated with the data source. This identifier is intended to be unique across multiple cases (e.g., a UUID).
Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.
String org.sleuthkit.datamodel.DataSource.getTimeZone | ( | ) |
Gets the time zone that was used to process the data source.
Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.
void org.sleuthkit.datamodel.DataSource.setAcquisitionDetails | ( | String | details | ) | throws TskCoreException |
Sets the acquisition details field in the case database.
details | The acquisition details |
TskCoreException | Thrown if the data can not be written |
Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.
void org.sleuthkit.datamodel.DataSource.setDisplayName | ( | String | newName | ) | throws TskCoreException |
Set the name for this data source.
newName | The new name for the data source |
TskCoreException | Thrown if an error occurs while updating the database |
Implemented in org.sleuthkit.datamodel.Image, and org.sleuthkit.datamodel.LocalFilesDataSource.
Copyright © 2011-2018 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.