Sleuth Kit Java Bindings (JNI)  4.3
Java bindings for using The Sleuth Kit
org.sleuthkit.datamodel.OSUtility Class Reference

Static Public Member Functions

static List< OSInfogetAllOSInfo (SleuthkitCase skCase) throws TskCoreException
 
static List< OSInfogetOSInfo (SleuthkitCase skCase) throws TskCoreException
 
static List< OSInfogetOSInfo (SleuthkitCase skCase, FsContent fsc) throws TskCoreException
 

Private Member Functions

 OSUtility ()
 

Static Private Member Functions

static List< OSInfogetOSInfoInternal (SleuthkitCase skCase, boolean includeBackups, boolean restrictFs, long fsId) throws TskCoreException
 

Detailed Description

Utility class to combine information from various OS info artifacts into fewer objects.

Definition at line 30 of file OSUtility.java.

Constructor & Destructor Documentation

org.sleuthkit.datamodel.OSUtility.OSUtility ( )
private

Definition at line 32 of file OSUtility.java.

Member Function Documentation

static List<OSInfo> org.sleuthkit.datamodel.OSUtility.getAllOSInfo ( SleuthkitCase  skCase) throws TskCoreException
static

Creates a list of all OS Info data on any file system, including the backups

Parameters
skCase- Have to pass this in because we don't have access to the normal method
Returns
- List of OSInfo objects
Exceptions
TskCoreException

Definition at line 77 of file OSUtility.java.

References org.sleuthkit.datamodel.OSUtility.getOSInfoInternal().

static List<OSInfo> org.sleuthkit.datamodel.OSUtility.getOSInfo ( SleuthkitCase  skCase) throws TskCoreException
static

Get all non-backup OSInfo data

Parameters
skCase- Have to pass this in because we don't have access to the normal method
Returns
List of OSInfo objects
Exceptions
TskCoreException

Definition at line 45 of file OSUtility.java.

References org.sleuthkit.datamodel.OSUtility.getOSInfoInternal().

static List<OSInfo> org.sleuthkit.datamodel.OSUtility.getOSInfo ( SleuthkitCase  skCase,
FsContent  fsc 
) throws TskCoreException
static

Get OSInfo from the same file system as the given object. Will not include backups.

Parameters
skCase- Have to pass this in because we don't have access to the normal method
fsc- FsContent from the same file system we want the OS information from
Returns
- List of OSInfo objects
Exceptions
TskCoreException

Definition at line 62 of file OSUtility.java.

References org.sleuthkit.datamodel.OSUtility.getOSInfoInternal().

static List<OSInfo> org.sleuthkit.datamodel.OSUtility.getOSInfoInternal ( SleuthkitCase  skCase,
boolean  includeBackups,
boolean  restrictFs,
long  fsId 
) throws TskCoreException
staticprivate

Internal method to find and combine the requested OS Info data.

Parameters
skCase- Have to pass this in because we don't have access to the normal method
includeBackups- true if we should include registry data found in "RegBack"
restrictFs- true if an file system id is being provided to match against
fsId- the file system ID that the registry hives must be on (if restrictFs is set)
Returns
- List of OSInfo objects
Exceptions
TskCoreException

Definition at line 97 of file OSUtility.java.

References org.sleuthkit.datamodel.OSInfo.combine(), org.sleuthkit.datamodel.FsContent.getFileSystemId(), org.sleuthkit.datamodel.AbstractContent.getParent(), org.sleuthkit.datamodel.AbstractFile.getParentPath(), and org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_INFO.

Referenced by org.sleuthkit.datamodel.OSUtility.getAllOSInfo(), and org.sleuthkit.datamodel.OSUtility.getOSInfo().


The documentation for this class was generated from the following file:

Copyright © 2011-2015 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.