Sleuth Kit Java Bindings (JNI)  4.8.0
Java bindings for using The Sleuth Kit
Classes | Public Member Functions | Static Public Member Functions | Public Attributes | List of all members
org.sleuthkit.datamodel.TimelineEventType Interface Reference

Inherits Comparable< TimelineEventType >.

Inherited by org.sleuthkit.datamodel.TimelineEventTypeImpl.

Classes

enum  HierarchyLevel
 

Public Member Functions

default int compareTo (TimelineEventType otherType)
 
default TimelineEventType getCategory ()
 
Optional<?extends TimelineEventType > getChild (String displayName)
 
SortedSet<?extends TimelineEventType > getChildren ()
 
String getDisplayName ()
 
TimelineEventType getParent ()
 
default SortedSet<?extends TimelineEventType > getSiblings ()
 
TimelineEventType.HierarchyLevel getTypeHierarchyLevel ()
 
long getTypeID ()
 

Static Public Member Functions

static SortedSet<?extends TimelineEventType > getCategoryTypes ()
 
static SortedSet<?extends TimelineEventType > getFileSystemTypes ()
 
static SortedSet<?extends TimelineEventType > getMiscTypes ()
 
static SortedSet<?extends TimelineEventType > getWebActivityTypes ()
 
static String stringValueOf (BlackboardAttribute attr)
 
static String toFrom (BlackboardAttribute dir)
 

Public Attributes

TimelineEventType CALL_LOG
 
TimelineEventType CUSTOM_TYPES
 
TimelineEventType DEVICES_ATTACHED
 
TimelineEventType EMAIL
 
TimelineEventType EXIF
 
TimelineEventType FILE_ACCESSED
 
TimelineEventType FILE_CHANGED
 
TimelineEventType FILE_CREATED
 
TimelineEventType FILE_MODIFIED
 
TimelineEventType FILE_SYSTEM
 
TimelineEventType GPS_BOOKMARK
 
TimelineEventType GPS_LAST_KNOWN_LOCATION
 
TimelineEventType GPS_ROUTE
 
TimelineEventType GPS_SEARCH
 
TimelineEventType GPS_TRACK
 
TimelineEventType GPS_TRACKPOINT
 
TimelineEventType INSTALLED_PROGRAM
 
TimelineEventType LOG_ENTRY
 
TimelineEventType MESSAGE
 
TimelineEventType MISC_TYPES
 
TimelineEventType OTHER
 
TimelineEventType RECENT_DOCUMENTS
 
TimelineEventType REGISTRY
 
TimelineEventType ROOT_EVENT_TYPE
 
TimelineEventType USER_CREATED
 
TimelineEventType WEB_ACTIVITY
 
TimelineEventType WEB_BOOKMARK
 
TimelineEventType WEB_COOKIE
 
TimelineEventType WEB_DOWNLOADS
 
TimelineEventType WEB_FORM_ADDRESSES
 
TimelineEventType WEB_FORM_AUTOFILL
 
TimelineEventType WEB_HISTORY
 
TimelineEventType WEB_SEARCH
 

Detailed Description

An interface implemented by timeline event types. Timeline event types are organized into a type hierarchy. This type hierarchy has three levels: the root level, the category level (e.g, file system events, web activity events), and the actual event level (e.g., file modified events, web download events).

Currently (9/20/19), all supported timeline event types are defined as members of this interface.

WARNING: THIS INTERFACE IS A "BETA" INTERFACE AND IS SUBJECT TO CHANGE AT ANY TIME.

Definition at line 55 of file TimelineEventType.java.

Member Function Documentation

default int org.sleuthkit.datamodel.TimelineEventType.compareTo ( TimelineEventType  otherType)

Definition at line 127 of file TimelineEventType.java.

References org.sleuthkit.datamodel.TimelineEventType.getTypeID().

default TimelineEventType org.sleuthkit.datamodel.TimelineEventType.getCategory ( )

Gets the category level event type for this event type in the type hierarchy.

Returns
The category event type.

Definition at line 108 of file TimelineEventType.java.

References org.sleuthkit.datamodel.TimelineEventType.getCategory(), org.sleuthkit.datamodel.TimelineEventType.getParent(), and org.sleuthkit.datamodel.TimelineEventType.ROOT_EVENT_TYPE.

Referenced by org.sleuthkit.datamodel.TimelineEventType.getCategory().

static SortedSet<? extends TimelineEventType> org.sleuthkit.datamodel.TimelineEventType.getCategoryTypes ( )
static

Definition at line 530 of file TimelineEventType.java.

References org.sleuthkit.datamodel.TimelineEventType.getChildren().

Optional<? extends TimelineEventType> org.sleuthkit.datamodel.TimelineEventType.getChild ( String  displayName)

Gets a specific child event type of this event type in the type hierarchy.

Parameters
displayNameThe display name of the desired child event type.
Returns
The child event type in an Optional object, may be empty.
SortedSet<? extends TimelineEventType> org.sleuthkit.datamodel.TimelineEventType.getChildren ( )

Gets the child event types of this event type in the type hierarchy.

Returns
A sorted set of the child event types.

Referenced by org.sleuthkit.datamodel.TimelineEventType.getCategoryTypes(), org.sleuthkit.datamodel.TimelineEventType.getFileSystemTypes(), org.sleuthkit.datamodel.TimelineEventType.getMiscTypes(), org.sleuthkit.datamodel.TimelineEventType.getSiblings(), and org.sleuthkit.datamodel.TimelineEventType.getWebActivityTypes().

String org.sleuthkit.datamodel.TimelineEventType.getDisplayName ( )

Gets the display name of this event type.

Returns
The event type display name.

Referenced by org.sleuthkit.datamodel.TimelineFilter.EventTypeFilter.getDisplayName().

static SortedSet<? extends TimelineEventType> org.sleuthkit.datamodel.TimelineEventType.getFileSystemTypes ( )
static

Definition at line 534 of file TimelineEventType.java.

References org.sleuthkit.datamodel.TimelineEventType.getChildren().

static SortedSet<? extends TimelineEventType> org.sleuthkit.datamodel.TimelineEventType.getMiscTypes ( )
static

Definition at line 542 of file TimelineEventType.java.

References org.sleuthkit.datamodel.TimelineEventType.getChildren().

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.getParent ( )

Gets the parent event type of this event type in the type hierarchy.

Returns
The parent event type.

Referenced by org.sleuthkit.datamodel.TimelineEventType.getCategory(), and org.sleuthkit.datamodel.TimelineEventType.getSiblings().

default SortedSet<? extends TimelineEventType> org.sleuthkit.datamodel.TimelineEventType.getSiblings ( )

Gets the sibling event types of this event type in the type hierarchy.

Returns
The sibling event types.

Definition at line 120 of file TimelineEventType.java.

References org.sleuthkit.datamodel.TimelineEventType.getChildren(), org.sleuthkit.datamodel.TimelineEventType.getParent(), and org.sleuthkit.datamodel.TimelineEventType.ROOT_EVENT_TYPE.

TimelineEventType.HierarchyLevel org.sleuthkit.datamodel.TimelineEventType.getTypeHierarchyLevel ( )

Gets the type hierarchy level of this event type.

Returns
The type hierarchy level.
long org.sleuthkit.datamodel.TimelineEventType.getTypeID ( )

Gets the unique ID of this event type in the case database.

Returns
The event type ID.

Referenced by org.sleuthkit.datamodel.TimelineEventType.compareTo().

static SortedSet<? extends TimelineEventType> org.sleuthkit.datamodel.TimelineEventType.getWebActivityTypes ( )
static

Definition at line 538 of file TimelineEventType.java.

References org.sleuthkit.datamodel.TimelineEventType.getChildren().

static String org.sleuthkit.datamodel.TimelineEventType.stringValueOf ( BlackboardAttribute  attr)
static

Definition at line 546 of file TimelineEventType.java.

References org.sleuthkit.datamodel.BlackboardAttribute.getDisplayString().

static String org.sleuthkit.datamodel.TimelineEventType.toFrom ( BlackboardAttribute  dir)
static

Definition at line 552 of file TimelineEventType.java.

References org.sleuthkit.datamodel.BlackboardAttribute.getDisplayString().

Member Data Documentation

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.CALL_LOG
Initial value:
= new TimelineEventArtifactTypeImpl(16,
getBundle().getString("MiscTypes.Calls.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_CALLLOG),
new Type(TSK_DATETIME_START),
new AttributeExtractor(new Type(TSK_NAME)),
artf -> {
BlackboardAttribute phoneNumber = getAttributeSafe(artf, new Type(TSK_PHONE_NUMBER));
if (phoneNumber == null) {
phoneNumber = getAttributeSafe(artf, new Type(TSK_PHONE_NUMBER_TO));
}
if (phoneNumber == null) {
phoneNumber = getAttributeSafe(artf, new Type(TSK_PHONE_NUMBER_FROM));
}
return stringValueOf(phoneNumber);
},
new AttributeExtractor(new Type(TSK_DIRECTION)))

Definition at line 345 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.CUSTOM_TYPES
Initial value:
= new TimelineEventTypeImpl(22,
getBundle().getString("BaseTypes.customTypes.name"),
HierarchyLevel.CATEGORY, ROOT_EVENT_TYPE) {
@Override
public SortedSet< TimelineEventType> getChildren() {
return ImmutableSortedSet.of(OTHER, USER_CREATED);
}
}

Definition at line 426 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.DEVICES_ATTACHED
Initial value:
= new TimelineEventArtifactTypeImpl(21,
getBundle().getString("MiscTypes.devicesAttached.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_DEVICE_ATTACHED),
new Type(TSK_DATETIME),
new AttributeExtractor(new Type(TSK_DEVICE_MAKE)),
new AttributeExtractor(new Type(TSK_DEVICE_MODEL)),
new AttributeExtractor(new Type(TSK_DEVICE_ID)))

Definition at line 416 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.EMAIL
Initial value:
= new TimelineEventArtifactTypeImpl(17,
getBundle().getString("MiscTypes.Email.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_EMAIL_MSG),
new Type(TSK_DATETIME_SENT),
artf -> {
String emailFrom = stringValueOf(getAttributeSafe(artf, new Type(TSK_EMAIL_FROM)));
if (emailFrom.length() > TimelineEventArtifactTypeImpl.EMAIL_TO_FROM_LENGTH_MAX) {
emailFrom = emailFrom.substring(0, TimelineEventArtifactTypeImpl.EMAIL_TO_FROM_LENGTH_MAX);
}
String emailTo = stringValueOf(getAttributeSafe(artf, new Type(TSK_EMAIL_TO)));
if (emailTo.length() > TimelineEventArtifactTypeImpl.EMAIL_TO_FROM_LENGTH_MAX) {
emailTo = emailTo.substring(0, TimelineEventArtifactTypeImpl.EMAIL_TO_FROM_LENGTH_MAX);
}
return emailFrom + " to " + emailTo;
},
new AttributeExtractor(new Type(TSK_SUBJECT)),
artf -> {
final BlackboardAttribute msgAttribute = getAttributeSafe(artf, new Type(TSK_EMAIL_CONTENT_PLAIN));
String msg = stringValueOf(msgAttribute);
if (msg.length() > TimelineEventArtifactTypeImpl.EMAIL_FULL_DESCRIPTION_LENGTH_MAX) {
msg = msg.substring(0, TimelineEventArtifactTypeImpl.EMAIL_FULL_DESCRIPTION_LENGTH_MAX);
}
return msg;
})

Definition at line 364 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.EXIF
Initial value:
= new TimelineEventArtifactTypeImpl(20,
getBundle().getString("MiscTypes.exif.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_METADATA_EXIF),
new Type(TSK_DATETIME_CREATED),
new AttributeExtractor(new Type(TSK_DEVICE_MAKE)),
new AttributeExtractor(new Type(TSK_DEVICE_MODEL)),
artf -> artf.getSleuthkitCase().getAbstractFileById(artf.getObjectID()).getName()
)

Definition at line 406 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.FILE_ACCESSED
Initial value:
= new FilePathEventType(5,
getBundle().getString("FileSystemTypes.fileAccessed.name"),
HierarchyLevel.EVENT, FILE_SYSTEM)

Definition at line 237 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.FILE_CHANGED
Initial value:
= new FilePathEventType(7,
getBundle().getString("FileSystemTypes.fileChanged.name"),
HierarchyLevel.EVENT, FILE_SYSTEM)

Definition at line 245 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.FILE_CREATED
Initial value:
= new FilePathEventType(6,
getBundle().getString("FileSystemTypes.fileCreated.name"),
HierarchyLevel.EVENT, FILE_SYSTEM)

Definition at line 241 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.FILE_MODIFIED
Initial value:
= new FilePathEventType(4,
getBundle().getString("FileSystemTypes.fileModified.name"),
HierarchyLevel.EVENT, FILE_SYSTEM)

Definition at line 233 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.FILE_SYSTEM
Initial value:
= new TimelineEventTypeImpl(1,
getBundle().getString("BaseTypes.fileSystem.name"),
HierarchyLevel.CATEGORY, ROOT_EVENT_TYPE) {
@Override
public SortedSet< TimelineEventType> getChildren() {
return ImmutableSortedSet.of(FILE_MODIFIED, FILE_ACCESSED,
FILE_CREATED, FILE_CHANGED);
}
}

Definition at line 190 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.GPS_BOOKMARK
Initial value:
= new TimelineEventArtifactTypeImpl(29,
getBundle().getString("MiscTypes.GPSBookmark.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_GPS_BOOKMARK),
new Type(TSK_DATETIME),
new AttributeExtractor(new Type(TSK_NAME)),
artf -> {
final BlackboardAttribute longitude = getAttributeSafe(artf, new Type(TSK_GEO_LONGITUDE));
final BlackboardAttribute latitude = getAttributeSafe(artf, new Type(TSK_GEO_LATITUDE));
return stringValueOf(latitude) + " " + stringValueOf(longitude);
},
new EmptyExtractor())

Definition at line 485 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.GPS_LAST_KNOWN_LOCATION
Initial value:
= new TimelineEventArtifactTypeImpl(30,
getBundle().getString("MiscTypes.GPSLastknown.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_GPS_LAST_KNOWN_LOCATION),
new Type(TSK_DATETIME),
new AttributeExtractor(new Type(TSK_NAME)),
artf -> {
final BlackboardAttribute longitude = getAttributeSafe(artf, new Type(TSK_GEO_LONGITUDE));
final BlackboardAttribute latitude = getAttributeSafe(artf, new Type(TSK_GEO_LATITUDE));
return stringValueOf(latitude) + " " + stringValueOf(longitude);
},
new EmptyExtractor())

Definition at line 498 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.GPS_ROUTE
Initial value:
= new TimelineEventArtifactTypeImpl(14,
getBundle().getString("MiscTypes.GPSRoutes.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_GPS_ROUTE),
new Type(TSK_DATETIME),
new AttributeExtractor(new Type(TSK_PROG_NAME)),
new AttributeExtractor(new Type(TSK_LOCATION)),
artf -> {
final BlackboardAttribute latStart = getAttributeSafe(artf, new Type(TSK_GEO_LATITUDE_START));
final BlackboardAttribute longStart = getAttributeSafe(artf, new Type(TSK_GEO_LONGITUDE_START));
final BlackboardAttribute latEnd = getAttributeSafe(artf, new Type(TSK_GEO_LATITUDE_END));
final BlackboardAttribute longEnd = getAttributeSafe(artf, new Type(TSK_GEO_LONGITUDE_END));
return String.format("from %1$s %2$s to %3$s %4$s", stringValueOf(latStart), stringValueOf(longStart), stringValueOf(latEnd), stringValueOf(longEnd));
})

Definition at line 316 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.GPS_SEARCH
Initial value:
= new TimelineEventArtifactTypeImpl(31,
getBundle().getString("MiscTypes.GPSearch.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_GPS_SEARCH),
new Type(TSK_DATETIME),
new AttributeExtractor(new Type(TSK_NAME)),
artf -> {
final BlackboardAttribute longitude = getAttributeSafe(artf, new Type(TSK_GEO_LONGITUDE));
final BlackboardAttribute latitude = getAttributeSafe(artf, new Type(TSK_GEO_LATITUDE));
return stringValueOf(latitude) + " " + stringValueOf(longitude);
},
new EmptyExtractor())

Definition at line 511 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.GPS_TRACK
Initial value:
= new GPSTrackArtifactEventType(32,
getBundle().getString("MiscTypes.GPSTrack.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_GPS_TRACK),
new Type(TSK_NAME))

Definition at line 524 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.GPS_TRACKPOINT
Initial value:
= new TimelineEventArtifactTypeImpl(15,
getBundle().getString("MiscTypes.GPSTrackpoint.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_GPS_TRACKPOINT),
new Type(TSK_DATETIME),
new AttributeExtractor(new Type(TSK_PROG_NAME)),
artf -> {
final BlackboardAttribute longitude = getAttributeSafe(artf, new Type(TSK_GEO_LONGITUDE));
final BlackboardAttribute latitude = getAttributeSafe(artf, new Type(TSK_GEO_LATITUDE));
return stringValueOf(latitude) + " " + stringValueOf(longitude);
},
new EmptyExtractor())

Definition at line 332 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.INSTALLED_PROGRAM
Initial value:
= new TimelineEventArtifactTypeImpl(19,
getBundle().getString("MiscTypes.installedPrograms.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_INSTALLED_PROG),
new Type(TSK_DATETIME),
new AttributeExtractor(new Type(TSK_PROG_NAME)),
new EmptyExtractor(),
new EmptyExtractor())

Definition at line 397 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.LOG_ENTRY
Initial value:
= new TimelineEventArtifactTypeSingleDescription(24,
getBundle().getString("MiscTypes.LogEntry.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_TL_EVENT),
new BlackboardAttribute.Type(TSK_DATETIME),
new BlackboardAttribute.Type(TSK_DESCRIPTION))

Definition at line 444 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.MESSAGE

Definition at line 284 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.MISC_TYPES
Initial value:
= new TimelineEventTypeImpl(3,
getBundle().getString("BaseTypes.miscTypes.name"),
HierarchyLevel.CATEGORY, ROOT_EVENT_TYPE) {
@Override
public SortedSet<TimelineEventType> getChildren() {
ImmutableSortedSet.Builder<TimelineEventType> builder = ImmutableSortedSet.orderedBy(new Comparator<TimelineEventType>() {
@Override
public int compare(TimelineEventType o1, TimelineEventType o2) {
return o1.getDisplayName().compareTo(o2.getDisplayName());
}
});
builder.add(CALL_LOG, DEVICES_ATTACHED, EMAIL,
EXIF, GPS_BOOKMARK, GPS_LAST_KNOWN_LOCATION, GPS_TRACKPOINT,
GPS_ROUTE, GPS_SEARCH, GPS_TRACK, INSTALLED_PROGRAM, LOG_ENTRY, MESSAGE,
RECENT_DOCUMENTS, REGISTRY);
return builder.build();
}
}

Definition at line 212 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.OTHER
Initial value:
= new TimelineEventArtifactTypeSingleDescription(23,
getBundle().getString("CustomTypes.other.name"),
CUSTOM_TYPES,
new BlackboardArtifact.Type(TSK_TL_EVENT),
new BlackboardAttribute.Type(TSK_DATETIME),
new BlackboardAttribute.Type(TSK_DESCRIPTION))

Definition at line 436 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.RECENT_DOCUMENTS
Initial value:
= new FilePathArtifactEventType(18,
getBundle().getString("MiscTypes.recentDocuments.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_RECENT_OBJECT),
new Type(TSK_DATETIME),
new Type(TSK_PATH))

Definition at line 390 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.REGISTRY
Initial value:
= new TimelineEventArtifactTypeSingleDescription(25,
getBundle().getString("MiscTypes.Registry.name"),
MISC_TYPES,
new BlackboardArtifact.Type(TSK_TL_EVENT),
new BlackboardAttribute.Type(TSK_DATETIME),
new BlackboardAttribute.Type(TSK_DESCRIPTION))

Definition at line 451 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.ROOT_EVENT_TYPE
Initial value:
= new TimelineEventTypeImpl(0,
getBundle().getString("RootEventType.eventTypes.name"),
HierarchyLevel.ROOT, null) {
@Override
public SortedSet< TimelineEventType> getChildren() {
return ImmutableSortedSet.of(FILE_SYSTEM, WEB_ACTIVITY, MISC_TYPES, CUSTOM_TYPES);
}
}

The root type of all event types. No event should actually have this type.

Definition at line 181 of file TimelineEventType.java.

Referenced by org.sleuthkit.datamodel.TimelineEventType.getCategory(), org.sleuthkit.datamodel.TimelineFilter.EventTypeFilter.getDisplayName(), and org.sleuthkit.datamodel.TimelineEventType.getSiblings().

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.USER_CREATED
Initial value:
= new TimelineEventArtifactTypeSingleDescription(26,
getBundle().getString("CustomTypes.userCreated.name"),
CUSTOM_TYPES,
new BlackboardArtifact.Type(TSK_TL_EVENT),
new BlackboardAttribute.Type(TSK_DATETIME),
new BlackboardAttribute.Type(TSK_DESCRIPTION))

Definition at line 459 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.WEB_ACTIVITY
Initial value:
= new TimelineEventTypeImpl(2,
getBundle().getString("BaseTypes.webActivity.name"),
HierarchyLevel.CATEGORY, ROOT_EVENT_TYPE) {
@Override
public SortedSet< TimelineEventType> getChildren() {
return ImmutableSortedSet.of(WEB_DOWNLOADS, WEB_COOKIE, WEB_BOOKMARK,
WEB_HISTORY, WEB_SEARCH, WEB_FORM_AUTOFILL, WEB_FORM_ADDRESSES);
}
}

Definition at line 200 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.WEB_BOOKMARK
Initial value:
= new URLArtifactEventType(10,
getBundle().getString("WebTypes.webBookmarks.name"),
WEB_ACTIVITY,
new BlackboardArtifact.Type(TSK_WEB_BOOKMARK),
new Type(TSK_DATETIME_CREATED),
new Type(TSK_URL))

Definition at line 263 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.WEB_COOKIE
Initial value:
= new URLArtifactEventType(9,
getBundle().getString("WebTypes.webCookies.name"),
WEB_ACTIVITY,
new BlackboardArtifact.Type(TSK_WEB_COOKIE),
new Type(TSK_DATETIME),
new Type(TSK_URL))

Definition at line 256 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.WEB_DOWNLOADS
Initial value:
= new URLArtifactEventType(8,
getBundle().getString("WebTypes.webDownloads.name"),
WEB_ACTIVITY,
new BlackboardArtifact.Type(TSK_WEB_DOWNLOAD),
new Type(TSK_DATETIME_ACCESSED),
new Type(TSK_URL))

Definition at line 249 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.WEB_FORM_ADDRESSES
Initial value:
= new URLArtifactEventType(28,
getBundle().getString("WebTypes.webFormAddress.name"),
WEB_ACTIVITY,
new BlackboardArtifact.Type(TSK_WEB_FORM_ADDRESS),
new Type(TSK_DATETIME_ACCESSED),
new Type(TSK_EMAIL))

Definition at line 478 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.WEB_FORM_AUTOFILL
Initial value:
= new TimelineEventArtifactTypeImpl(27,
getBundle().getString("WebTypes.webFormAutoFill.name"),
WEB_ACTIVITY,
new BlackboardArtifact.Type(TSK_WEB_FORM_AUTOFILL),
new Type(TSK_DATETIME_ACCESSED),
artf -> {
final BlackboardAttribute name = getAttributeSafe(artf, new Type(TSK_NAME));
final BlackboardAttribute value = getAttributeSafe(artf, new Type(TSK_VALUE));
final BlackboardAttribute count = getAttributeSafe(artf, new Type(TSK_COUNT));
return stringValueOf(name) + ":" + stringValueOf(value) + " count: " + stringValueOf(count);
}, new EmptyExtractor(), new EmptyExtractor())

Definition at line 466 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.WEB_HISTORY
Initial value:
= new URLArtifactEventType(11,
getBundle().getString("WebTypes.webHistory.name"),
WEB_ACTIVITY,
new BlackboardArtifact.Type(TSK_WEB_HISTORY),
new Type(TSK_DATETIME_ACCESSED),
new Type(TSK_URL))

Definition at line 270 of file TimelineEventType.java.

TimelineEventType org.sleuthkit.datamodel.TimelineEventType.WEB_SEARCH
Initial value:
= new URLArtifactEventType(12,
getBundle().getString("WebTypes.webSearch.name"),
WEB_ACTIVITY,
new BlackboardArtifact.Type(TSK_WEB_SEARCH_QUERY),
new Type(TSK_DATETIME_ACCESSED),
new Type(TSK_DOMAIN))

Definition at line 277 of file TimelineEventType.java.

The documentation for this interface was generated from the following file:

Copyright © 2011-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.