Autopsy  4.4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
CustomArtifactType.java
Go to the documentation of this file.
1 /*
2  * Autopsy Forensic Browser
3  *
4  * Copyright 2011-2017 Basis Technology Corp.
5  * Contact: carrier <at> sleuthkit <dot> org
6  *
7  * Licensed under the Apache License, Version 2.0 (the "License");
8  * you may not use this file except in compliance with the License.
9  * You may obtain a copy of the License at
10  *
11  * http://www.apache.org/licenses/LICENSE-2.0
12  *
13  * Unless required by applicable law or agreed to in writing, software
14  * distributed under the License is distributed on an "AS IS" BASIS,
15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16  * See the License for the specific language governing permissions and
17  * limitations under the License.
18  */
19 package org.sleuthkit.autopsy.test;
20 
21 import java.util.ArrayList;
22 import java.util.List;
23 import javax.xml.bind.DatatypeConverter;
26 import org.sleuthkit.datamodel.BlackboardArtifact;
27 import org.sleuthkit.datamodel.BlackboardAttribute;
28 import org.sleuthkit.datamodel.Content;
29 import org.sleuthkit.datamodel.TskCoreException;
30 
34 final class CustomArtifactType {
35 
36  private static final String MODULE_NAME = CustomArtifactsCreatorIngestModuleFactory.getModuleName();
37  private static final String ADDITIONAL_MODULE_NAME = "Another Module";
38  private static final String ARTIFACT_TYPE_NAME = "CUSTOM_ARTIFACT";
39  private static final String ARTIFACT_DISPLAY_NAME = "Custom Artifact";
40  private static final String INT_ATTR_TYPE_NAME = "CUSTOM_INT_ATTRIBUTE";
41  private static final String INT_ATTR_DISPLAY_NAME = "Custom Integer";
42  private static final String DOUBLE_ATTR_TYPE_NAME = "CUSTOM_DOUBLE_ATTRIBUTE";
43  private static final String DOUBLE_ATTR_DISPLAY_NAME = "Custom Double";
44  private static final String LONG_ATTR_TYPE_NAME = "CUSTOM_LONG_ATTRIBUTE";
45  private static final String LONG_ATTR_DISPLAY_NAME = "Custom Long";
46  private static final String DATETIME_ATTR_TYPE_NAME = "CUSTOM_DATETIME_ATTRIBUTE";
47  private static final String DATETIME_ATTR_DISPLAY_NAME = "Custom Datetime";
48  private static final String BYTES_ATTR_TYPE_NAME = "CUSTOM_BYTES_ATTRIBUTE";
49  private static final String BYTES_ATTR_DISPLAY_NAME = "Custom Bytes";
50  private static final String STRING_ATTR_TYPE_NAME = "CUSTOM_STRING_ATTRIBUTE";
51  private static final String STRING_ATTR_DISPLAY_NAME = "Custom String";
52  private static BlackboardArtifact.Type artifactType;
53  private static BlackboardAttribute.Type intAttrType;
54  private static BlackboardAttribute.Type doubleAttrType;
55  private static BlackboardAttribute.Type longAttributeType;
56  private static BlackboardAttribute.Type dateTimeAttrType;
57  private static BlackboardAttribute.Type bytesAttrType;
58  private static BlackboardAttribute.Type stringAttrType;
59 
66  static void addToCaseDatabase() throws Blackboard.BlackboardException {
67  Blackboard blackboard = Case.getCurrentCase().getServices().getBlackboard();
68  artifactType = blackboard.getOrAddArtifactType(ARTIFACT_TYPE_NAME, ARTIFACT_DISPLAY_NAME);
69  intAttrType = blackboard.getOrAddAttributeType(INT_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.INTEGER, INT_ATTR_DISPLAY_NAME);
70  doubleAttrType = blackboard.getOrAddAttributeType(DOUBLE_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.DOUBLE, DOUBLE_ATTR_DISPLAY_NAME);
71  longAttributeType = blackboard.getOrAddAttributeType(LONG_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.LONG, LONG_ATTR_DISPLAY_NAME);
72  dateTimeAttrType = blackboard.getOrAddAttributeType(DATETIME_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.DATETIME, DATETIME_ATTR_DISPLAY_NAME);
73  bytesAttrType = blackboard.getOrAddAttributeType(BYTES_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.BYTE, BYTES_ATTR_DISPLAY_NAME);
74  stringAttrType = blackboard.getOrAddAttributeType(STRING_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.STRING, STRING_ATTR_DISPLAY_NAME);
75  }
76 
86  static BlackboardArtifact createInstance(Content source) throws TskCoreException {
87  BlackboardArtifact artifact = source.newArtifact(artifactType.getTypeID());
88  List<BlackboardAttribute> attributes = new ArrayList<>();
89  attributes.add(new BlackboardAttribute(intAttrType, MODULE_NAME, 0));
90  attributes.add(new BlackboardAttribute(doubleAttrType, MODULE_NAME, 0.0));
91  attributes.add(new BlackboardAttribute(longAttributeType, MODULE_NAME, 0L));
92  attributes.add(new BlackboardAttribute(dateTimeAttrType, MODULE_NAME, 60L));
93  attributes.add(new BlackboardAttribute(bytesAttrType, MODULE_NAME, DatatypeConverter.parseHexBinary("ABCD")));
94  attributes.add(new BlackboardAttribute(stringAttrType, MODULE_NAME, "Zero"));
95  artifact.addAttributes(attributes);
96 
97  /*
98  * Add a second source module to the attributes. Try to do it twice. The
99  * second attempt should have no effect on the data.
100  */
101  for (BlackboardAttribute attr : attributes) {
102  attr.addSource(ADDITIONAL_MODULE_NAME);
103  attr.addSource(ADDITIONAL_MODULE_NAME);
104  }
105 
106  return artifact;
107  }
108 
112  private CustomArtifactType() {
113  }
114 
115 }

Copyright © 2012-2016 Basis Technology. Generated on: Fri Sep 29 2017
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.