Contains data for a blackboard entry for a given file and artifact ID. More...

#include <TskImgDB.h>

Public Member Functions
	TskBlackboardRecord (artifact_t a_artifactId, uint64_t a_fileId, string a_attribute, string a_source, string a_context)

Public Attributes
artifact_t	artifactId

string	attribute
	Name / type of the data being stored. Standard attribute names are defined in TskBlackboard.

string	context
	Optional string that provides more context about the data. For example, it may have "Last Printed" if the entry is a DATETIME entry about when a document was last printed.

uint64_t	fileId
	File that this information pertains to.

string	source
	Name of the module that added this data.

vector< unsigned char >	valueByte

double	valueDouble

int32_t	valueInt32

int64_t	valueInt64

string	valueString

TskImgDB::VALUE_TYPE	valueType
	Type of data being stored.

Detailed Description

Contains data for a blackboard entry for a given file and artifact ID.

The documentation for this struct was generated from the following file:

Public Member Functions