org.sleuthkit.datamodel.blackboardutils.ArtifactsHelper Class Reference

Inherits org.sleuthkit.datamodel.blackboardutils.ArtifactHelperBase.

Public Member Functions
	ArtifactsHelper (SleuthkitCase caseDb, String moduleName, Content srcContent)
BlackboardArtifact	addInstalledProgram (String programName, long dateInstalled) throws TskCoreException, BlackboardException
BlackboardArtifact	addInstalledProgram (String programName, long dateInstalled, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException

Detailed Description

This class helps ingest modules create miscellaneous artifacts.

Definition at line 35 of file ArtifactsHelper.java.

Constructor & Destructor Documentation

org.sleuthkit.datamodel.blackboardutils.ArtifactsHelper.ArtifactsHelper	(	SleuthkitCase	caseDb,
		String	moduleName,
		Content	srcContent
	)

Creates an artifact helper for modules to create artifacts.

Parameters

caseDb	Sleuthkit case database.
moduleName	Name of module using the helper.
srcContent	Source content for the artifacts.

Definition at line 45 of file ArtifactsHelper.java.

Member Function Documentation

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.ArtifactsHelper.addInstalledProgram	(	String	programName,
		long	dateInstalled
	)		throws TskCoreException, BlackboardException

Adds a TSK_INSTALLED_PROGRAM artifact.

Parameters

programName	Name of program, required.
dateInstalled	Date/time of install, can be 0 if not available.

Returns

Installed program artifact added.

Exceptions

TskCoreException	If there is an error creating the artifact.
BlackboardException	If there is a problem posting the artifact.

Definition at line 60 of file ArtifactsHelper.java.

BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.ArtifactsHelper.addInstalledProgram	(	String	programName,
		long	dateInstalled,
		Collection< BlackboardAttribute >	otherAttributesList
	)		throws TskCoreException, BlackboardException

Adds a TSK_INSTALLED_PROGRAM artifact.

Parameters

programName	Name of program, required.
dateInstalled	Date/time of install, can be 0 if not available.
otherAttributesList	Additional attributes, can be an empty list if no additional attributes.

Returns

Installed program artifact added.

Exceptions

TskCoreException	If there is an error creating the artifact.
BlackboardException	If there is a problem posting the artifact.

Definition at line 79 of file ArtifactsHelper.java.

References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME, org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INSTALLED_PROG, and org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/sleuthkit/bindings/java/src/org/sleuthkit/datamodel/blackboardutils/ArtifactsHelper.java