Sleuth Kit Java Bindings (JNI)
4.8.0
Java bindings for using The Sleuth Kit
|
Inherits org.sleuthkit.datamodel.blackboardutils.ArtifactHelperBase.
Public Member Functions | |
WebBrowserArtifactsHelper (SleuthkitCase caseDb, String moduleName, Content srcContent) | |
BlackboardArtifact | addWebBookmark (String url, String title, long creationTime, String progName) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebBookmark (String url, String title, long creationTime, String progName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebCookie (String url, long creationTime, String name, String value, String programName) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebCookie (String url, long creationTime, String name, String value, String programName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebDownload (String url, long startTime, String path, String programName) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebDownload (String url, long startTime, String path, String programName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebFormAddress (String personName, String email, String phoneNumber, String mailingAddress, long creationTime, long accessTime, int count) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebFormAddress (String personName, String email, String phoneNumber, String mailingAddress, long creationTime, long accessTime, int count, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebFormAutofill (String name, String value, long creationTime, long accessTime, int count) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebFormAutofill (String name, String value, long creationTime, long accessTime, int count, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebHistory (String url, long accessTime, String referrer, String title, String programName) throws TskCoreException, BlackboardException |
BlackboardArtifact | addWebHistory (String url, long accessTime, String referrer, String title, String programName, Collection< BlackboardAttribute > otherAttributesList) throws TskCoreException, BlackboardException |
Class to help ingest modules create Web Browser artifacts.
These include bookmarks, cookies, downloads, history, and web form autofill data.
Definition at line 44 of file WebBrowserArtifactsHelper.java.
org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.WebBrowserArtifactsHelper | ( | SleuthkitCase | caseDb, |
String | moduleName, | ||
Content | srcContent | ||
) |
Creates a WebBrowserArtifactsHelper.
caseDb | Sleuthkit case db. |
moduleName | Name of module using the helper. |
srcContent | Source content being processed by the module. |
Definition at line 54 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebBookmark | ( | String | url, |
String | title, | ||
long | creationTime, | ||
String | progName | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_BOOKMARK artifact.
url | Bookmark URL, required. |
title | Bookmark title, may be empty/null. |
creationTime | Date/time created, may be 0 if not available. |
progName | Application/program that created bookmark, may be empty/null. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 72 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebBookmark | ( | String | url, |
String | title, | ||
long | creationTime, | ||
String | progName, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_BOOKMARK artifact.
url | Bookmark URL, required. |
title | Bookmark title, may be empty/null. |
creationTime | Date/time created, may be 0 if not available. |
progName | Application/program that created bookmark, may be empty/null. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 92 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_CREATED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_TITLE, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebCookie | ( | String | url, |
long | creationTime, | ||
String | name, | ||
String | value, | ||
String | programName | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_COOKIE artifact.
url | Url of the site that created the cookie, required. |
creationTime | Create time of cookie, may be 0 if not available. |
name | Cookie name, may be empty or null. |
value | Cookie value, may be empty or null. |
programName | Name of the application/program that created the cookie, may be empty or null. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 135 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebCookie | ( | String | url, |
long | creationTime, | ||
String | name, | ||
String | value, | ||
String | programName, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_COOKIE artifact.
url | Url of the site that created the cookie, required. |
creationTime | Create time of cookie, may be 0 if not available. |
name | Cookie name, may be empty or null. |
value | Cookie value, may be empty or null. |
programName | Name of the application/program that created the cookie, may be empty or null. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 161 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_VALUE, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebDownload | ( | String | url, |
long | startTime, | ||
String | path, | ||
String | programName | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_DOWNNLOAD artifact.
url | URL downloaded from, required. |
startTime | Date/time downloaded, 0 if not available. |
path | Path of downloaded file, required. |
programName | Program that initiated the download, may be empty or null. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 205 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebDownload | ( | String | url, |
long | startTime, | ||
String | path, | ||
String | programName, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_DOWNNLOAD artifact.
url | URL downloaded from, required. |
startTime | Date/time downloaded, 0 if not available. |
path | Path of downloaded file, required. |
programName | Program that initiated the download, may be empty or null. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 224 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PATH, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAddress | ( | String | personName, |
String | email, | ||
String | phoneNumber, | ||
String | mailingAddress, | ||
long | creationTime, | ||
long | accessTime, | ||
int | count | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_FORM_AUTOFILL artifact.
personName | Person name, required. |
Email address, may be empty or null. | |
phoneNumber | Phone number, may be empty or null. |
mailingAddress | Mailing address, may be empty or null. |
creationTime | Creation time, may be 0 if not available. |
accessTime | Last access time, may be 0 if not available. |
count | Use count, may be 0 if not available. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 268 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAddress | ( | String | personName, |
String | email, | ||
String | phoneNumber, | ||
String | mailingAddress, | ||
long | creationTime, | ||
long | accessTime, | ||
int | count, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_FORM_ADDRESS artifact.
personName | Person name, required. |
Email address, may be empty or null. | |
phoneNumber | Phone number, may be empty or null. |
mailingAddress | Mailing address, may be empty or null. |
creationTime | Creation time, may be 0 if not available. |
accessTime | Last access time, may be 0 if not available. |
count | Use count, may be 0 if not available. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 293 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.BlackboardArtifact.addAttributes(), org.sleuthkit.datamodel.CommunicationsManager.createAccountFileInstance(), org.sleuthkit.datamodel.Account.Type.EMAIL, org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.Account.Type.PHONE, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_COUNT, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_CREATED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_EMAIL, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_LOCATION, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PHONE_NUMBER, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_ADDRESS.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAutofill | ( | String | name, |
String | value, | ||
long | creationTime, | ||
long | accessTime, | ||
int | count | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_FORM_AUTOFILL artifact.
name | Name of autofill field, required. |
value | Value of autofill field, required. |
creationTime | Create date/time, may be 0 if not available. |
accessTime | Last access date/time, may be 0 if not available. |
count | Count of times used, may be 0 if not available. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 349 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAutofill | ( | String | name, |
String | value, | ||
long | creationTime, | ||
long | accessTime, | ||
int | count, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a TSK_WEB_FORM_AUTOFILL artifact.
name | Name of autofill field, required. |
value | Value of autofill field, required. |
creationTime | Create date/time, may be 0 if not available. |
accessTime | Last access date/time, may be 0 if not available. |
count | Count of times used, may be 0 if not available. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 372 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_COUNT, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_CREATED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_VALUE, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_AUTOFILL.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebHistory | ( | String | url, |
long | accessTime, | ||
String | referrer, | ||
String | title, | ||
String | programName | ||
) | throws TskCoreException, BlackboardException |
Adds a Web History artifact.
url | Url visited, required. |
accessTime | Last access time, may be 0 if not available. |
referrer | Referrer, may be empty or null. |
title | Website title, may be empty or null. |
programName | Application/program recording the history, may be empty or null. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 415 of file WebBrowserArtifactsHelper.java.
BlackboardArtifact org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebHistory | ( | String | url, |
long | accessTime, | ||
String | referrer, | ||
String | title, | ||
String | programName, | ||
Collection< BlackboardAttribute > | otherAttributesList | ||
) | throws TskCoreException, BlackboardException |
Adds a Web History artifact.
url | Url visited, required. |
accessTime | Last access time, may be 0 if not available. |
referrer | Referrer, may be empty or null. |
title | Website title, may be empty or null. |
programName | Application/program recording the history, may be empty or null. |
otherAttributesList | Other attributes, may be an empty list. |
TskCoreException | If there is an error creating the artifact. |
BlackboardException | If there is a problem posting the artifact. |
Definition at line 437 of file WebBrowserArtifactsHelper.java.
References org.sleuthkit.datamodel.BlackboardArtifact.newArtifact(), org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_REFERRER, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_TITLE, org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL, and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY.
Copyright © 2011-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.