Inherits org.sleuthkit.datamodel.Content.

Classes
enum	ARTIFACT_TYPE

enum	ReviewStatus

class	Type

Public Member Functions
void	addAttribute (BlackboardAttribute attribute) throws TskCoreException

void	addAttributes (Collection< BlackboardAttribute > attributes) throws TskCoreException

void	close ()

boolean	equals (Object object)

ArrayList< BlackboardArtifact >	getAllArtifacts () throws TskCoreException

long	getAllArtifactsCount () throws TskCoreException

long	getArtifactID ()

ArrayList< BlackboardArtifact >	getArtifacts (String artifactTypeName) throws TskCoreException

ArrayList< BlackboardArtifact >	getArtifacts (int artifactTypeID) throws TskCoreException

ArrayList< BlackboardArtifact >	getArtifacts (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException

long	getArtifactsCount (String artifactTypeName) throws TskCoreException

long	getArtifactsCount (int artifactTypeID) throws TskCoreException

long	getArtifactsCount (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException

int	getArtifactTypeID ()

String	getArtifactTypeName ()

BlackboardAttribute	getAttribute (BlackboardAttribute.Type attributeType) throws TskCoreException

List< BlackboardAttribute >	getAttributes () throws TskCoreException

List< BlackboardAttribute >	getAttributes (final BlackboardAttribute.ATTRIBUTE_TYPE attributeType) throws TskCoreException

List< Content >	getChildren () throws TskCoreException

int	getChildrenCount () throws TskCoreException

List< Long >	getChildrenIds () throws TskCoreException

Content	getDataSource () throws TskCoreException

String	getDisplayName ()

BlackboardArtifact	getGenInfoArtifact () throws TskCoreException

BlackboardArtifact	getGenInfoArtifact (boolean create) throws TskCoreException

ArrayList< BlackboardAttribute >	getGenInfoAttributes (BlackboardAttribute.ATTRIBUTE_TYPE attr_type) throws TskCoreException

Set< String >	getHashSetNames () throws TskCoreException

long	getId ()

String	getName ()

long	getObjectID ()

synchronized Content	getParent () throws TskCoreException

ReviewStatus	getReviewStatus ()

String	getShortDescription () throws TskCoreException

long	getSize ()

SleuthkitCase	getSleuthkitCase ()

synchronized String	getUniquePath () throws TskCoreException

boolean	hasChildren () throws TskCoreException

int	hashCode ()

BlackboardArtifact	newArtifact (int artifactTypeID) throws TskCoreException

BlackboardArtifact	newArtifact (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException

final int	read (byte[] buf, long offset, long len) throws TskCoreException

String	toString ()

Protected Member Functions
	BlackboardArtifact (SleuthkitCase sleuthkitCase, long artifactID, long objID, long artifactObjID, int artifactTypeID, String artifactTypeName, String displayName)

Private Member Functions
void	loadArtifactContent () throws TskCoreException

Private Attributes
final long	artifactId

final long	artifactObjId

final int	artifactTypeId

final String	artifactTypeName

final List< BlackboardAttribute >	attrsCache = new ArrayList<BlackboardAttribute>()

volatile boolean	checkedHasChildren

volatile int	childrenCount

byte[]	contentBytes = null

final String	displayName

volatile boolean	hasChildren

boolean	loadedCacheFromDb = false

Content	parent

final ReviewStatus	reviewStatus

final SleuthkitCase	sleuthkitCase

final long	sourceObjId

String	uniquePath

Static Private Attributes
static final ResourceBundle	bundle = ResourceBundle.getBundle("org.sleuthkit.datamodel.Bundle")

Detailed Description

An artifact that has been posted to the blackboard. An artifact is a typed collection of name value pairs (attributes) that is associated with its source content (either a data source, or file within a data source). Both standard artifact types and custom artifact types are supported.

IMPORTANT NOTE: No more than one attribute of a given type should be added to an artifact.

Definition at line 46 of file BlackboardArtifact.java.

Constructor & Destructor Documentation

org.sleuthkit.datamodel.BlackboardArtifact.BlackboardArtifact	(	SleuthkitCase	sleuthkitCase,
		long	artifactID,
		long	objID,
		long	artifactObjID,
		int	artifactTypeID,
		String	artifactTypeName,
		String	displayName
	)

protected

Constructs an artifact that has been posted to the blackboard. An artifact is a typed collection of name value pairs (attributes) that is associated with its source content (either a data source, or file within a data source). Both standard artifact types and custom artifact types are supported.

Parameters

sleuthkitCase	The SleuthKit case (case database) that contains the artifact data.
artifactID	The unique id for this artifact.
objID	The unique id of the content with which this artifact is associated.
artifactObjID	The unique id of the artifact, in tsk_objects
artifactTypeID	The type id of this artifact.
artifactTypeName	The type name of this artifact.
displayName	The display name of this artifact.

Deprecated:: Use new BlackboardArtifact(SleuthkitCase, long, long, int, String, String, ReviewStatus) instead.

Definition at line 1303 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeName, org.sleuthkit.datamodel.BlackboardArtifact.displayName, org.sleuthkit.datamodel.BlackboardArtifact.sleuthkitCase, and org.sleuthkit.datamodel.BlackboardArtifact.ReviewStatus.UNDECIDED.

Member Function Documentation

void org.sleuthkit.datamodel.BlackboardArtifact.addAttribute ( BlackboardAttribute attribute ) throws TskCoreException

Adds an attribute to this artifact.

IMPORTANT NOTE: No more than one attribute of a given type should be added to an artifact.

Parameters

attribute The attribute to add

Exceptions

TskCoreException If an error occurs and the attribute was not added to the artifact.

Definition at line 285 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitCase.addBlackboardAttribute(), and org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase().

void org.sleuthkit.datamodel.BlackboardArtifact.addAttributes ( Collection< BlackboardAttribute > attributes ) throws TskCoreException

Adds a collection of attributes to this artifact in a single operation (faster than adding each attribute individually).

Parameters

attributes The collection of attributes.

Exceptions

TskCoreException If an error occurs and the attributes were not added to the artifact.

Definition at line 346 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitCase.addBlackboardAttributes(), and org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase().

void org.sleuthkit.datamodel.BlackboardArtifact.close ( )

Close the Content object.

Implements org.sleuthkit.datamodel.Content.

Definition at line 704 of file BlackboardArtifact.java.

boolean org.sleuthkit.datamodel.BlackboardArtifact.equals ( Object object )

Tests this artifact for equality with another object.

Parameters

object The other object.

Returns: True or false.

Definition at line 632 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.getArtifactID().

ArrayList<BlackboardArtifact> org.sleuthkit.datamodel.BlackboardArtifact.getAllArtifacts ( ) throws TskCoreException

Get all artifacts associated with this content

Returns: a list of blackboard artifacts

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 401 of file BlackboardArtifact.java.

long org.sleuthkit.datamodel.BlackboardArtifact.getAllArtifactsCount ( ) throws TskCoreException

Get count of all artifacts associated with this content

Returns: count of all blackboard artifacts for this content

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 461 of file BlackboardArtifact.java.

long org.sleuthkit.datamodel.BlackboardArtifact.getArtifactID ( )

Gets the unique id for this artifact.

Returns: The artifact id.

Definition at line 148 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.artifactId.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.equals(), org.sleuthkit.datamodel.BlackboardArtifact.getName(), and org.sleuthkit.datamodel.SleuthkitCase.setReviewStatus().

ArrayList<BlackboardArtifact> org.sleuthkit.datamodel.BlackboardArtifact.getArtifacts ( String artifactTypeName ) throws TskCoreException

Get all artifacts associated with this content that have the given type name

Parameters

artifactTypeName name of the type to look up

Returns: a list of blackboard artifacts matching the type

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 417 of file BlackboardArtifact.java.

ArrayList<BlackboardArtifact> org.sleuthkit.datamodel.BlackboardArtifact.getArtifacts ( int artifactTypeID ) throws TskCoreException

Get all artifacts associated with this content that have the given type id

Parameters

artifactTypeID type id to look up

Returns: a list of blackboard artifacts matching the type

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 433 of file BlackboardArtifact.java.

ArrayList<BlackboardArtifact> org.sleuthkit.datamodel.BlackboardArtifact.getArtifacts ( BlackboardArtifact.ARTIFACT_TYPE type ) throws TskCoreException

Get all artifacts associated with this content that have the given type

Parameters

type	type to look up

Returns: a list of blackboard artifacts matching the type

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 448 of file BlackboardArtifact.java.

long org.sleuthkit.datamodel.BlackboardArtifact.getArtifactsCount ( String artifactTypeName ) throws TskCoreException

Get count of all artifacts associated with this content that have the given type name

Parameters

artifactTypeName name of the type to look up

Returns: count of blackboard artifacts matching the type

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 477 of file BlackboardArtifact.java.

long org.sleuthkit.datamodel.BlackboardArtifact.getArtifactsCount ( int artifactTypeID ) throws TskCoreException

Get count of all artifacts associated with this content that have the given type id

Parameters

artifactTypeID type id to look up

Returns: count of blackboard artifacts matching the type

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 493 of file BlackboardArtifact.java.

long org.sleuthkit.datamodel.BlackboardArtifact.getArtifactsCount ( BlackboardArtifact.ARTIFACT_TYPE type ) throws TskCoreException

Get count of all artifacts associated with this content that have the given type

Parameters

type	type to look up

Returns: count of blackboard artifacts matching the type

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 509 of file BlackboardArtifact.java.

int org.sleuthkit.datamodel.BlackboardArtifact.getArtifactTypeID ( )

Gets the artifact type id for this artifact.

Returns: The artifact type id.

Definition at line 167 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeId.

String org.sleuthkit.datamodel.BlackboardArtifact.getArtifactTypeName ( )

Gets the artifact type name for this artifact.

Returns: The artifact type name.

Definition at line 176 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.artifactTypeName.

BlackboardAttribute org.sleuthkit.datamodel.BlackboardArtifact.getAttribute ( BlackboardAttribute.Type attributeType ) throws TskCoreException

Gets the attribute of this artifact that matches a given type.

IMPORTANT NOTE: No more than one attribute of a given type should be added to an artifact.

Parameters

attributeType The attribute type.

Returns: The first attribute of the given type, or null if there are no attributes of that type.

Exceptions

TskCoreException If an error occurs and the attribute is not fetched.

Definition at line 327 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.getAttributes().

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.getShortDescription().

List<BlackboardAttribute> org.sleuthkit.datamodel.BlackboardArtifact.getAttributes ( ) throws TskCoreException

Gets the attributes of this artifact.

Returns: The attributes.

Exceptions

TskCoreException If an error occurs and the attributes cannot be fetched.

Definition at line 300 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.attrsCache, org.sleuthkit.datamodel.SleuthkitCase.getBlackboardAttributes(), and org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase().

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.getAttribute(), org.sleuthkit.datamodel.AbstractContent.getGenInfoAttributes(), and org.sleuthkit.datamodel.BlackboardArtifact.loadArtifactContent().

List<BlackboardAttribute> org.sleuthkit.datamodel.BlackboardArtifact.getAttributes ( final BlackboardAttribute.ATTRIBUTE_TYPE attributeType ) throws TskCoreException

Gets all attributes associated with this artifact that are of the given attribute type.

Parameters

attributeType the type of attributes to get

Returns: a list of attributes of the given type

Exceptions

TskCoreException if a critical error occurs and the attributes are not fetched

Deprecated:: An artifact should not have multiple attributes of the same type. Use getAttribute(BlackboardAttribute.Type) instead.

Definition at line 1322 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitCase.getBlackboardAttributes(), and org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase().

List<Content> org.sleuthkit.datamodel.BlackboardArtifact.getChildren ( ) throws TskCoreException

Get all children of this artifact, if any.

Returns: A list of the children.

Exceptions

TskCoreException if there was an error querying the case database.

Implements org.sleuthkit.datamodel.Content.

Definition at line 1397 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase().

int org.sleuthkit.datamodel.BlackboardArtifact.getChildrenCount ( ) throws TskCoreException

Returns count of children objects. Note, this should be more efficient than getting children and counting them.

Returns: children count

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 1361 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.childrenCount, and org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase().

List<Long> org.sleuthkit.datamodel.BlackboardArtifact.getChildrenIds ( ) throws TskCoreException

Gets the object ids of children of this artifact, if any

Returns: A list of the object ids of children.

Exceptions

TskCoreException if there was an error querying the case database.

Implements org.sleuthkit.datamodel.Content.

Definition at line 1352 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase().

Content org.sleuthkit.datamodel.BlackboardArtifact.getDataSource ( ) throws TskCoreException

Gets the root data source (image, virtual directory, etc.) of this content.

Returns: Content associated with data source or null if one can't be found

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 745 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.Content.getDataSource(), and org.sleuthkit.datamodel.BlackboardArtifact.getParent().

Referenced by org.sleuthkit.datamodel.BlackboardAttribute.getDisplayString(), and org.sleuthkit.datamodel.BlackboardArtifact.loadArtifactContent().

String org.sleuthkit.datamodel.BlackboardArtifact.getDisplayName ( )

Gets the artifact type display name for this artifact.

Returns: The artifact type display name.

Definition at line 185 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.displayName.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.getShortDescription().

BlackboardArtifact org.sleuthkit.datamodel.BlackboardArtifact.getGenInfoArtifact ( ) throws TskCoreException

Return the TSK_GEN_INFO artifact for the file so that individual attributes can be added to it. Creates one if it does not already exist.

Returns: Instance of the TSK_GEN_INFO artifact

Exceptions

TskCoreException

Implements org.sleuthkit.datamodel.Content.

Definition at line 523 of file BlackboardArtifact.java.

BlackboardArtifact org.sleuthkit.datamodel.BlackboardArtifact.getGenInfoArtifact ( boolean create ) throws TskCoreException

Return the TSK_GEN_INFO artifact for the file so that individual attributes can be added to it. If one does not create, behavior depends on the create argument.

Parameters

create If true, an artifact will be created if it does not already exist.

Returns: Instance of the TSK_GEN_INFO artifact or null if artifact does not already exist and create was set to false

Exceptions

TskCoreException

Implements org.sleuthkit.datamodel.Content.

Definition at line 542 of file BlackboardArtifact.java.

ArrayList<BlackboardAttribute> org.sleuthkit.datamodel.BlackboardArtifact.getGenInfoAttributes ( BlackboardAttribute.ATTRIBUTE_TYPE attr_type ) throws TskCoreException

Return attributes of a given type from TSK_GEN_INFO.

Parameters

attr_type Attribute type to find inside of the TSK_GEN_INFO artifact.

Returns: Attributes

Exceptions

org.sleuthkit.datamodel.TskCoreException

Implements org.sleuthkit.datamodel.Content.

Definition at line 562 of file BlackboardArtifact.java.

Set<String> org.sleuthkit.datamodel.BlackboardArtifact.getHashSetNames ( ) throws TskCoreException

Get the names of all the hashsets that this content is in.

Returns: the names of the hashsets that this content is in

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 575 of file BlackboardArtifact.java.

long org.sleuthkit.datamodel.BlackboardArtifact.getId ( )

Returns the unique object ID that was assigned to it in the database. This is a Sleuth Kit database-assigned number.

Returns: object id

Implements org.sleuthkit.datamodel.Content.

Definition at line 1339 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.artifactObjId.

String org.sleuthkit.datamodel.BlackboardArtifact.getName ( )

Get the name of this content object (does not include parent path)

Returns: the name

Implements org.sleuthkit.datamodel.Content.

Definition at line 740 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.getArtifactID().

long org.sleuthkit.datamodel.BlackboardArtifact.getObjectID ( )

Gets the object id of the source content (data source or file within a data source) of this artifact

Returns: The object id.

Definition at line 158 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.sourceObjId.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getAllBlackboardArtifactTags(), org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTagByID(), org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTagsByTagName(), and org.sleuthkit.datamodel.BlackboardArtifact.toString().

synchronized Content org.sleuthkit.datamodel.BlackboardArtifact.getParent ( ) throws TskCoreException

Returns: returns the parent of this Content object or null if there isn't one as is the case for Image.

Exceptions

TskCoreException

Implements org.sleuthkit.datamodel.Content.

Definition at line 379 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitCase.getContentById(), org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase(), and org.sleuthkit.datamodel.BlackboardArtifact.parent.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.getDataSource(), and org.sleuthkit.datamodel.BlackboardArtifact.getUniquePath().

ReviewStatus org.sleuthkit.datamodel.BlackboardArtifact.getReviewStatus ( )

Gets the review status of this artifact, i.e., whether it has been approved, rejected, or is still waiting for a decision from the user.

Returns: The review status.

Definition at line 270 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.reviewStatus.

String org.sleuthkit.datamodel.BlackboardArtifact.getShortDescription ( ) throws TskCoreException

Gets a short description for this artifact.

Returns: The description, may be the empty string.

Exceptions

TskCoreException if there is a problem creating the description.

Definition at line 196 of file BlackboardArtifact.java.

long org.sleuthkit.datamodel.BlackboardArtifact.getSize ( )

Get the (reported) size of the content object. Artifact content is a string dump of all its attributes.

Returns: size of the content in bytes

Implements org.sleuthkit.datamodel.Content.

Definition at line 687 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.loadArtifactContent().

SleuthkitCase org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase ( )

Gets the SleuthKit case (case database) that contains the data for this artifact.

Returns: The SleuthKit case (case database) object.

Definition at line 139 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.sleuthkitCase.

synchronized String org.sleuthkit.datamodel.BlackboardArtifact.getUniquePath ( ) throws TskCoreException

This overiding implementation returns the unique path of the parent. It does not include the Artifact name in the unique path.

Exceptions

org.sleuthkit.datamodel.TskCoreException

Implements org.sleuthkit.datamodel.Content.

Definition at line 365 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.getParent(), org.sleuthkit.datamodel.Content.getUniquePath(), and org.sleuthkit.datamodel.BlackboardArtifact.uniquePath.

boolean org.sleuthkit.datamodel.BlackboardArtifact.hasChildren ( ) throws TskCoreException

Returns true if the content object has children objects. Note, this should be more efficient than getting children and checking it empty.

Returns: true if has children, false otherwise.

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 1375 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.getSleuthkitCase().

int org.sleuthkit.datamodel.BlackboardArtifact.hashCode ( )

Gets the hash code for this artifact.

Returns: The hash code.

Definition at line 649 of file BlackboardArtifact.java.

void org.sleuthkit.datamodel.BlackboardArtifact.loadArtifactContent ( ) throws TskCoreException

private

Load and save the content for the artifact. Artifact content is a string dump of all its attributes.

Exceptions

TskCoreException if critical error occurred during read

Definition at line 760 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.getAttributes(), org.sleuthkit.datamodel.BlackboardArtifact.getDataSource(), and org.sleuthkit.datamodel.BlackboardArtifact.toString().

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.getSize(), and org.sleuthkit.datamodel.BlackboardArtifact.read().

BlackboardArtifact org.sleuthkit.datamodel.BlackboardArtifact.newArtifact ( int artifactTypeID ) throws TskCoreException

Create and add an artifact associated with this content to the blackboard

Parameters

artifactTypeID id of the artifact type (if the id doesn't already exist an exception will be thrown)

Returns: the blackboard artifact created (the artifact type id can be looked up from this)

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 592 of file BlackboardArtifact.java.

BlackboardArtifact org.sleuthkit.datamodel.BlackboardArtifact.newArtifact ( BlackboardArtifact.ARTIFACT_TYPE type ) throws TskCoreException

Create and add an artifact associated with this content to the blackboard

Parameters

type	artifact enum type

Returns: the blackboard artifact created (the artifact type id can be looked up from this)

Exceptions

TskCoreException if critical error occurred within tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 607 of file BlackboardArtifact.java.

final int org.sleuthkit.datamodel.BlackboardArtifact.read	(	byte[]	buf,
		long	offset,
		long	len
	)		throws TskCoreException

Reads content data for this artifact Artifact content is a string dump of all its attributes.

Parameters

buf	a character array of data (in bytes) to copy read data to
offset	byte offset in the content to start reading from
len	number of bytes to read into buf.