The Sleuth Kit Framework  4.1
Public Member Functions | Protected Member Functions | Friends | List of all members
TskBlackboardArtifact Class Reference

Class that represents a blackboard artifact object. More...

#include <TskBlackboardArtifact.h>

Public Member Functions

void addAttribute (TskBlackboardAttribute &attr)
 Add an attribute to this artifact. More...
 
uint64_t getArtifactID () const
 Get the artifact id for this artifact. More...
 
int getArtifactTypeID () const
 Get the artifact type id for this artifact. More...
 
string getArtifactTypeName () const
 Get the artifact type name for this artifact. More...
 
vector< TskBlackboardAttributegetAttributes () const
 Get all attributes associated with this artifact. More...
 
string getDisplayName () const
 Get the display name for this artifact. More...
 
uint64_t getObjectID () const
 Get the object id for this artifact. More...
 
 ~TskBlackboardArtifact ()
 Default destructor.
 

Protected Member Functions

 TskBlackboardArtifact (const uint64_t artifactID, const uint64_t objID, const int artifactTypeID)
 Constructor. More...
 

Friends

class TskBlackboard
 
class TskFile
 
class TskImgDB
 

Detailed Description

Class that represents a blackboard artifact object.

Constructor & Destructor Documentation

TskBlackboardArtifact::TskBlackboardArtifact ( const uint64_t  artifactID,
const uint64_t  objID,
const int  artifactTypeID 
)
protected

Constructor.

Parameters
artifactIDartifact id
objIDobject id
artifactTypeIDarifact type id

Member Function Documentation

void TskBlackboardArtifact::addAttribute ( TskBlackboardAttribute attr)

Add an attribute to this artifact.

Parameters
attrattribute to be added
attrattribute to be added
Exceptions
errorif the given attribute has a bad type

References TskBlackboardAttribute::setArtifactID(), and TskBlackboardAttribute::setObjectID().

Referenced by TskFile::addGenInfoAttribute().

uint64_t TskBlackboardArtifact::getArtifactID ( ) const

Get the artifact id for this artifact.

Get the artifact id.

Returns
artifact id
int TskBlackboardArtifact::getArtifactTypeID ( ) const

Get the artifact type id for this artifact.

Get the artifact type id.

Returns
artifact type id
string TskBlackboardArtifact::getArtifactTypeName ( ) const

Get the artifact type name for this artifact.

Get the artifact type name.

Returns
artifact type name
vector< TskBlackboardAttribute > TskBlackboardArtifact::getAttributes ( ) const

Get all attributes associated with this artifact.

Returns
a vector of attributes
string TskBlackboardArtifact::getDisplayName ( ) const

Get the display name for this artifact.

Get the display name.

Returns
display name
uint64_t TskBlackboardArtifact::getObjectID ( ) const

Get the object id for this artifact.

Get the object id.

Returns
object id

The documentation for this class was generated from the following files:

Copyright © 2011-2013 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.