Sleuth Kit Java Bindings (JNI)  4.10.1
Java bindings for using The Sleuth Kit
Public Member Functions | Static Public Member Functions | Public Attributes | List of all members
org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE Enum Reference

Inherits org.sleuthkit.datamodel.SleuthkitVisitableItem.

Public Member Functions

public< T > T accept (SleuthkitItemVisitor< T > visitor)
 
String getDisplayName ()
 
String getLabel ()
 
int getTypeID ()
 

Static Public Member Functions

static ARTIFACT_TYPE fromID (int id)
 
static ARTIFACT_TYPE fromLabel (String label)
 

Public Attributes

 TSK_ACCOUNT
 
 TSK_ASSOCIATED_OBJECT
 
 TSK_BACKUP_EVENT
 
 TSK_BLUETOOTH_ADAPTER
 
 TSK_BLUETOOTH_PAIRING
 
 TSK_CALENDAR_ENTRY
 
 TSK_CALLLOG
 
 TSK_CLIPBOARD_CONTENT
 
 TSK_CONTACT
 
 TSK_DATA_SOURCE_USAGE
 
 TSK_DELETED_PROG
 
 TSK_DEVICE_ATTACHED
 
 TSK_DEVICE_INFO
 
 TSK_DOWNLOAD_SOURCE
 
 TSK_EMAIL_MSG
 
 TSK_ENCRYPTION_DETECTED
 
 TSK_ENCRYPTION_SUSPECTED
 
 TSK_EXT_MISMATCH_DETECTED
 
 TSK_EXTRACTED_TEXT
 
 TSK_FACE_DETECTED
 
 TSK_GEN_INFO
 
 TSK_GPS_AREA
 
 TSK_GPS_BOOKMARK
 
 TSK_GPS_LAST_KNOWN_LOCATION
 
 TSK_GPS_ROUTE
 
 TSK_GPS_SEARCH
 
 TSK_GPS_TRACK
 
 TSK_GPS_TRACKPOINT
 
 TSK_HASHSET_HIT
 
 TSK_INSTALLED_PROG
 
 TSK_INTERESTING_ARTIFACT_HIT
 
 TSK_INTERESTING_FILE_HIT
 an interesting/notable file hit More...
 
 TSK_IP_DHCP
 
 TSK_KEYWORD_HIT
 
 TSK_MESSAGE
 
 TSK_METADATA
 
 TSK_METADATA_EXIF
 
 TSK_OBJECT_DETECTED
 
 TSK_OS_ACCOUNT
 
 TSK_OS_INFO
 
 TSK_PROG_NOTIFICATIONS
 
 TSK_PROG_RUN
 
 TSK_RECENT_OBJECT
 
 TSK_REMOTE_DRIVE
 
 TSK_SCREEN_SHOTS
 
 TSK_SERVICE_ACCOUNT
 
 TSK_SIM_ATTACHED
 
 TSK_SPEED_DIAL_ENTRY
 
 TSK_TAG_ARTIFACT
 
 TSK_TAG_FILE
 
 TSK_TL_EVENT
 
 TSK_TOOL_OUTPUT
 
 TSK_USER_CONTENT_SUSPECTED
 
 TSK_USER_DEVICE_EVENT
 
 TSK_VERIFICATION_FAILED
 
 TSK_WEB_ACCOUNT_TYPE
 
 TSK_WEB_BOOKMARK
 
 TSK_WEB_CACHE
 
 TSK_WEB_CATEGORIZATION
 
 TSK_WEB_COOKIE
 
 TSK_WEB_DOWNLOAD
 
 TSK_WEB_FORM_ADDRESS
 
 TSK_WEB_FORM_AUTOFILL
 
 TSK_WEB_HISTORY
 
 TSK_WEB_SEARCH_QUERY
 
 TSK_WIFI_NETWORK
 
 TSK_WIFI_NETWORK_ADAPTER
 
 TSK_YARA_HIT
 

Detailed Description

Enum for the standard artifact types. Refer to http://sleuthkit.org/sleuthkit/docs/jni-docs/latest/artifact_catalog_page.html for details on the standard attributes for each artifact type.

Definition at line 925 of file BlackboardArtifact.java.

Member Function Documentation

public<T> T org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.accept ( SleuthkitItemVisitor< T >  visitor)

Accepts a visitor SleuthkitItemVisitor that will perform an operation on this artifact type and return some object as the result of the operation.

Parameters
visitorThe visitor, where the type parameter of the visitor is the type of the object that will be returned as the result of the visit operation.
Returns
An object of type T.

Implements org.sleuthkit.datamodel.SleuthkitVisitableItem.

Definition at line 1408 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitItemVisitor< T >.visit().

static ARTIFACT_TYPE org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.fromID ( int  id)
static

Gets the artifact type enum value that corresponds to a given type id. This method should only be used when the id is known to be one of the built-in types - otherwise use getArtifactType() in SleuthkitCase.

Parameters
idThe type id.
Returns
the corresponding enum

Definition at line 1378 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTypesInUse(), and org.sleuthkit.datamodel.BlackboardArtifact.getShortDescription().

static ARTIFACT_TYPE org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.fromLabel ( String  label)
static

Gets the standard artifact type enum value that corresponds to a given type name (label).

Parameters
labelThe type name
Returns
The enum element.

Definition at line 1359 of file BlackboardArtifact.java.

String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getDisplayName ( )

Gets the display name of this standard artifact type.

Returns
The display name.

Definition at line 1392 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getLabel ( )

Gets the type name (label) for this standard artifact type.

Returns
The type name.

Definition at line 1347 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

int org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getTypeID ( )

Gets the type id for this standard artifact type.

Returns
type id

Definition at line 1338 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTypesInUse(), and org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

Member Data Documentation

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ACCOUNT
Initial value:
=(39, "TSK_ACCOUNT",
bundle.getString("BlackboardArtifact.tskAccount.text"))

An account.

Definition at line 1153 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.CommunicationsManager.getAccountFileInstances().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ASSOCIATED_OBJECT
Initial value:
=(55, "TSK_ASSOCIATED_OBJECT",
bundle.getString("BlackboardArtifact.tskAssociatedObject.text"))

An associated object.

Definition at line 1241 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BACKUP_EVENT
Initial value:
=(63, "TSK_BACKUP_EVENT",
bundle.getString("BlackboardArtifact.tskBackupEvent.text"))

System/Application/File backup.

Definition at line 1283 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_ADAPTER
Initial value:
=(45, "TSK_BLUETOOTH_ADAPTER",
bundle.getString("BlackboardArtifact.tskBluetoothAdapter.text"))

A bluetooth adapter.

Definition at line 1183 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_PAIRING
Initial value:
=(28, "TSK_BLUETOOTH_PAIRING",
bundle.getString("BlackboardArtifact.tskBluetoothPairing.text"))

A bluetooth pairing entry.

Definition at line 1095 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALENDAR_ENTRY
Initial value:
=(26, "TSK_CALENDAR_ENTRY",
bundle.getString("BlackboardArtifact.tskCalendarEntry.text"))

A calendar entry from a phone, PIM, or a calendar application.

Definition at line 1085 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALLLOG
Initial value:
=(25, "TSK_CALLLOG",
bundle.getString("BlackboardArtifact.tskCalllog.text"))

A phone call log extracted from a phone or softphone application. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create call log artifacts.

Definition at line 1080 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper.addCalllog().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CLIPBOARD_CONTENT
Initial value:
=(54, "TSK_CLIPBOARD_CONTENT",
bundle.getString("BlackboardArtifact.tskClipboardContent.text"))

Indicates clipboard content

Definition at line 1236 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CONTACT
Initial value:
=(23, "TSK_CONTACT",
bundle.getString("BlackboardArtifact.tskContact.text"))

A contact extracted from a phone, or from an address book/email/messaging application. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create contact artifacts.

Definition at line 1064 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper.addContact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DATA_SOURCE_USAGE
Initial value:
=(48, "TSK_DATA_SOURCE_USAGE",
bundle.getString("BlackboardArtifact.tskDataSourceUsage.text"))

Categorization information for a data source.

Definition at line 1198 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DELETED_PROG
Initial value:
=(64, "TSK_DELETED_PROG",
bundle.getString("BlackboardArtifact.tskDeletedProg.text"))

Programs that have been deleted.

Definition at line 1288 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_ATTACHED
Initial value:
=(11, "TSK_DEVICE_ATTACHED",
bundle.getString("BlackboardArtifact.tskDeviceAttached.text"))

An attached device.

Definition at line 991 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_INFO
Initial value:
=(43, "TSK_DEVICE_INFO",
bundle.getString("BlackboardArtifact.tskDeviceInfo.text"))

Information related to a device.

Definition at line 1173 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DOWNLOAD_SOURCE
Initial value:
=(51, "TSK_DOWNLOAD_SOURCE",
bundle.getString("BlackboardArtifact.tskDownloadSource.text"))

Indicates source of a file/object

Deprecated:
TSK_ASSOCIATED_OBJECT should be used instead to associate the file/object with its source artifact/object..

Definition at line 1221 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EMAIL_MSG
Initial value:
=(13, "TSK_EMAIL_MSG",
bundle.getString("BlackboardArtifact.tskEmailMsg.text"))

An email message.

Definition at line 1002 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_DETECTED
Initial value:
=(33, "TSK_ENCRYPTION_DETECTED",
bundle.getString("BlackboardArtifact.tskEncryptionDetected.text"))

An encrypted file.

Definition at line 1120 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_SUSPECTED
Initial value:
=(40, "TSK_ENCRYPTION_SUSPECTED",
bundle.getString("BlackboardArtifact.tskEncryptionSuspected.text"))

An encrypted file.

Definition at line 1158 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EXT_MISMATCH_DETECTED
Initial value:
=(34, "TSK_EXT_MISMATCH_DETECTED",
bundle.getString("BlackboardArtifact.tskExtMismatchDetected.text"))

A file with an extension that does not match its MIME type.

Definition at line 1125 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EXTRACTED_TEXT
Initial value:
=(14, "TSK_EXTRACTED_TEXT",
bundle.getString("BlackboardArtifact.tskExtractedText.text"))

Text extracted from the source content.

Definition at line 1007 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_FACE_DETECTED
Initial value:
=(38, "TSK_FACE_DETECTED",
bundle.getString("BlackboardArtifact.tskFaceDetected.text"))

A human face was detected in a media file.

Definition at line 1148 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GEN_INFO
Initial value:
=(1, "TSK_GEN_INFO",
bundle.getString("BlackboardArtifact.tskGenInfo.text"))

A generic information artifact.

Definition at line 930 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.AbstractContent.getArtifacts(), org.sleuthkit.datamodel.AbstractContent.getGenInfoArtifact(), org.sleuthkit.datamodel.AbstractContent.newArtifact(), and org.sleuthkit.datamodel.AbstractFile.newArtifact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_AREA
Initial value:
=(67, "TSK_GPS_AREA",
bundle.getString("BlackboardArtifact.tskGPSArea.text"))

Stores the outline of an area using GPS coordinates.

Definition at line 1303 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.GeoArtifactsHelper.addArea().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_BOOKMARK
Initial value:
=(29, "TSK_GPS_BOOKMARK",
bundle.getString("BlackboardArtifact.tskGpsBookmark.text"))

A GPS bookmark / way point that the user saved.

Definition at line 1100 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_LAST_KNOWN_LOCATION
Initial value:
=(30, "TSK_GPS_LAST_KNOWN_LOCATION",
bundle.getString("BlackboardArtifact.tskGpsLastKnownLocation.text"))

A GPS last known location record.

Definition at line 1105 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_ROUTE
Initial value:
=(36, "TSK_GPS_ROUTE",
bundle.getString("BlackboardArtifact.tskGpsRoute.text"))

A route based on GPS coordinates. Use org.sleuthkit.datamodel.blackboardutils.GeoArtifactsHelper.addRoute() to create route artifacts.

Definition at line 1138 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.GeoArtifactsHelper.addRoute().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_SEARCH
Initial value:
=(31, "TSK_GPS_SEARCH",
bundle.getString("BlackboardArtifact.tskGpsSearch.text"))

A GPS search record.

Definition at line 1110 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_TRACK
Initial value:
=(58, "TSK_GPS_TRACK",
bundle.getString("BlackboardArtifact.tskTrack.text"))

Stores a GPS track log. Use org.sleuthkit.datamodel.blackboardutils.GeoArtifactsHelper.addTrack() to create track artifacts.

Definition at line 1258 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.GeoArtifactsHelper.addTrack().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_TRACKPOINT
Initial value:
=(7, "TSK_GPS_TRACKPOINT",
bundle.getString("BlackboardArtifact.tskGpsTrackpoint.text"))

A GPS track point (geolocation data).

Deprecated:
Use TSK_GPS_TRACK instead

Definition at line 971 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_HASHSET_HIT
Initial value:
=(10, "TSK_HASHSET_HIT",
bundle.getString("BlackboardArtifact.tskHashsetHit.text"))

A hit for a hash set (hash database).

Definition at line 986 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.AbstractContent.getHashSetNames().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INSTALLED_PROG
Initial value:
=(8, "TSK_INSTALLED_PROG",
bundle.getString("BlackboardArtifact.tskInstalledProg.text"))

An installed program.

Definition at line 976 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.ArtifactsHelper.addInstalledProgram().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_ARTIFACT_HIT
Initial value:
=(35, "TSK_INTERESTING_ARTIFACT_HIT",
bundle.getString("BlackboardArtifact.tskInterestingArtifactHit.text"))

An meta-artifact to call attention to an artifact deemed to be interesting.

Definition at line 1131 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT
Initial value:
=(12, "TSK_INTERESTING_FILE_HIT",
bundle.getString("BlackboardArtifact.tskInterestingFileHit.text"))

an interesting/notable file hit

An meta-artifact to call attention to a file deemed to be interesting.

Definition at line 997 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_IP_DHCP
Initial value:
=(61, "TSK_IP_DHCP",
bundle.getString("BlackboardArtifact.tskDhcpInfo.text"))

DHCP Information that is store for a device.

Definition at line 1273 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT
Initial value:
=(9, "TSK_KEYWORD_HIT",
bundle.getString("BlackboardArtifact.tskKeywordHits.text"))

A search hit for a keyword.

Definition at line 981 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.Report.getArtifacts(), org.sleuthkit.datamodel.Report.getArtifactsCount(), and org.sleuthkit.datamodel.Report.newArtifact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_MESSAGE
Initial value:
=(24, "TSK_MESSAGE",
bundle.getString("BlackboardArtifact.tskMessage.text"))

An SMS/MMS message extracted from phone, or from another messaging application, like IM. Use methods in org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper to create message artifacts.

Definition at line 1072 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper.addMessage().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA
Initial value:
=(57, "TSK_METADATA",
bundle.getString("BlackboardArtifact.tskMetadata.text"))

Stores metadata about an object.

Definition at line 1251 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA_EXIF
Initial value:
=(16, "TSK_METADATA_EXIF",
bundle.getString("BlackboardArtifact.tskMetadataExif.text"))

EXIF metadata.

Definition at line 1017 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OBJECT_DETECTED
Initial value:
=(41, "TSK_OBJECT_DETECTED",
bundle.getString("BlackboardArtifact.tskObjectDetected.text"))

Definition at line 1163 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_ACCOUNT
Initial value:
=(20, "TSK_OS_ACCOUNT",
bundle.getString("BlackboardArtifact.tskOsAccount.text"))

An operating system user account.

Definition at line 1043 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_INFO
Initial value:
=(19, "TSK_OS_INFO",
bundle.getString("BlackboardArtifact.tskOsInfo.text"))

Information pertaining to an operating system.

Definition at line 1038 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PROG_NOTIFICATIONS
Initial value:
=(62, "TSK_PROG_NOTIFICATIONS",
bundle.getString("BlackboardArtifact.tskProgNotifications.text"))

Notifications Sent to User.

Definition at line 1278 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PROG_RUN
Initial value:
=(32, "TSK_PROG_RUN",
bundle.getString("BlackboardArtifact.tskProgRun.text"))

Application run information.

Definition at line 1115 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_RECENT_OBJECT
Initial value:
=(6, "TSK_RECENT_OBJ",
bundle.getString("BlackboardArtifact.tsk.recentObject.text"))

A recent object.

Definition at line 963 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_REMOTE_DRIVE
Initial value:
=(37, "TSK_REMOTE_DRIVE",
bundle.getString("BlackboardArtifact.tskRemoteDrive.text"))

A remote drive.

Definition at line 1143 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SCREEN_SHOTS
Initial value:
=(60, "TSK_SCREEN_SHOTS",
bundle.getString("BlackboardArtifact.tskScreenShots.text"))

Screen shots from device or Application.

Definition at line 1268 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SERVICE_ACCOUNT
Initial value:
=(21, "TSK_SERVICE_ACCOUNT",
bundle.getString("BlackboardArtifact.tskServiceAccount.text"))

An application or Web service account.

Definition at line 1048 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SIM_ATTACHED
Initial value:
=(44, "TSK_SIM_ATTACHED",
bundle.getString("BlackboardArtifact.tskSimAttached.text"))

A SIM card.

Definition at line 1178 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SPEED_DIAL_ENTRY
Initial value:
=(27, "TSK_SPEED_DIAL_ENTRY",
bundle.getString("BlackboardArtifact.tskSpeedDialEntry.text"))

A speed dial entry from a phone.

Definition at line 1090 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TAG_ARTIFACT
Initial value:
=(18, "TSK_TAG_ARTIFACT",
bundle.getString("BlackboardArtifact.tskTagArtifact.text"))

A tag applied to an artifact.

Deprecated:
Tags are no longer treated as artifacts.

Definition at line 1033 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TAG_FILE
Initial value:
=(17, "TSK_TAG_FILE",
bundle.getString("BlackboardArtifact.tagFile.text"))

A tag applied to a file.

Deprecated:
Tags are no longer treated as artifacts.

Definition at line 1025 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TL_EVENT
Initial value:
=(53, "TSK_TL_EVENT",
bundle.getString("BlackboardArtifact.tskTLEvent.text"))

A generic (timeline) event.

Definition at line 1231 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TOOL_OUTPUT
Initial value:
=(22, "TSK_TOOL_OUTPUT",
bundle.getString("BlackboardArtifact.tskToolOutput.text"))

Output from an external tool or module (raw text).

Deprecated:
Tool output should be saved as a report.

Definition at line 1056 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_USER_CONTENT_SUSPECTED
Initial value:
=(56, "TSK_USER_CONTENT_SUSPECTED",
bundle.getString("BlackboardArtifact.tskUserContentSuspected.text"))

Indicates file may have been created by the user.

Definition at line 1246 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_USER_DEVICE_EVENT
Initial value:
=(65, "TSK_USER_DEVICE_EVENT",
bundle.getString("BlackboardArtifact.tskUserDeviceEvent.text"))

Activity on the System/Application.

Definition at line 1293 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_VERIFICATION_FAILED
Initial value:
=(47, "TSK_VERIFICATION_FAILED",
bundle.getString("BlackboardArtifact.tskVerificationFailed.text"))

Indicates a verification failure

Definition at line 1193 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_ACCOUNT_TYPE
Initial value:
=(59, "TSK_WEB_ACCOUNT_TYPE",
bundle.getString("BlackboardArtifact.tskWebAccountType.text"))

Stores a role on a given domain.

Definition at line 1263 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK
Initial value:
=(2, "TSK_WEB_BOOKMARK",
bundle.getString("BlackboardArtifact.tskWebBookmark.text"))

A Web bookmark. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create bookmark artifacts.

Definition at line 937 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebBookmark().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_CACHE
Initial value:
=(52, "TSK_WEB_CACHE",
bundle.getString("BlackboardArtifact.tskWebCache.text"))

Indicates web cache data

Definition at line 1226 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_CATEGORIZATION
Initial value:
=(68, "TSK_WEB_CATEGORIZATION",
bundle.getString("BlackboardArtifact.tskWebCategorization.text"))

Definition at line 1306 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE
Initial value:
=(3, "TSK_WEB_COOKIE",
bundle.getString("BlackboardArtifact.tskWebCookie.text"))

A Web cookie. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create cookie artifacts.

Definition at line 944 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebCookie().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD
Initial value:
=(5, "TSK_WEB_DOWNLOAD",
bundle.getString("BlackboardArtifact.tskWebDownload.text"))

A Web download. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create download artifacts.

Definition at line 958 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebDownload().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_ADDRESS
Initial value:
=(50, "TSK_WEB_FORM_ADDRESSES ",
bundle.getString("BlackboardArtifact.tskWebFormAddresses.text"))

Indicates an person's address filled in a web form. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create web form address artifacts.

Definition at line 1212 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAddress().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_FORM_AUTOFILL
Initial value:
=(49, "TSK_WEB_FORM_AUTOFILL",
bundle.getString("BlackboardArtifact.tskWebFormAutofill.text"))

Indicates auto fill data from a Web form. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create web form autofill artifacts.

Definition at line 1205 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebFormAutofill().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY
Initial value:
=(4, "TSK_WEB_HISTORY",
bundle.getString("BlackboardArtifact.tskWebHistory.text"))

A Web history. Use methods in org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper to create history artifacts.

Definition at line 951 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.blackboardutils.WebBrowserArtifactsHelper.addWebHistory().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_SEARCH_QUERY
Initial value:
=(15, "TSK_WEB_SEARCH_QUERY",
bundle.getString("BlackboardArtifact.tskWebSearchQuery.text"))

A Web search engine query extracted from Web history.

Definition at line 1012 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WIFI_NETWORK
Initial value:
=(42, "TSK_WIFI_NETWORK",
bundle.getString("BlackboardArtifact.tskWIFINetwork.text"))

A wireless network.

Definition at line 1168 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WIFI_NETWORK_ADAPTER
Initial value:
=(46, "TSK_WIFI_NETWORK_ADAPTER",
bundle.getString("BlackboardArtifact.tskWIFINetworkAdapter.text"))

A wireless network adapter.

Definition at line 1188 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_YARA_HIT
Initial value:
=(66, "TSK_YARA_HIT",
bundle.getString("BlackboardArtifact.tskYaraHit.text"))

Indicates that the file had a yara pattern match hit.

Definition at line 1298 of file BlackboardArtifact.java.

The documentation for this enum was generated from the following file:

Copyright © 2011-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.