org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE Enum Reference

Inherits org.sleuthkit.datamodel.SleuthkitVisitableItem.

Public Member Functions
public< T > T	accept (SleuthkitItemVisitor< T > v)
String	getDisplayName ()
String	getLabel ()
int	getTypeID ()

Static Public Member Functions
static ARTIFACT_TYPE	fromID (int ID)
static ARTIFACT_TYPE	fromLabel (String label)

Public Attributes
	TSK_ACCOUNT
	TSK_BLUETOOTH_PAIRING
	A bluetooth pairing entry. More...
	TSK_CALENDAR_ENTRY
	A Calendar entry from a phone, PIM or a Calendar application. More...
	TSK_CALLLOG
	A Phone call log extracted from a phones or softphone application. More...
	TSK_CONTACT
	A Contact extracted from a phone, or from an Addressbook/Email/Messaging Application. More...
	TSK_DEVICE_ATTACHED
	attached devices More...
	TSK_EMAIL_MSG
	email message More...
	TSK_ENCRYPTION_DETECTED
	Encrypted File. More...
	TSK_EXT_MISMATCH_DETECTED
	Extension Mismatch. More...
	TSK_EXTRACTED_TEXT
	text extracted from file More...
	TSK_FACE_DETECTED
	TSK_GEN_INFO
	Default type. More...
	TSK_GPS_BOOKMARK
	TSK_GPS_LAST_KNOWN_LOCATION
	TSK_GPS_ROUTE
	TSK_GPS_SEARCH
	TSK_GPS_TRACKPOINT
	trackpoint (geo location data) More...
	TSK_HASHSET_HIT
	hashset hits More...
	TSK_INSTALLED_PROG
	installed programs More...
	TSK_INTERESTING_ARTIFACT_HIT
	TSK_INTERESTING_FILE_HIT
	an interesting/notable file hit More...
	TSK_KEYWORD_HIT
	keyword search hits More...
	TSK_MESSAGE
	An SMS/MMS message extracted from phone, or from another messaging application, like IM. More...
	TSK_METADATA_EXIF
	EXIF Metadata. More...
	TSK_OS_ACCOUNT
	An operating system user account. More...
	TSK_OS_INFO
	Information pertaining to an operating system. More...
	TSK_PROG_RUN
	Application run information. More...
	TSK_RECENT_OBJECT
	recent objects More...
	TSK_REMOTE_DRIVE
	TSK_SERVICE_ACCOUNT
	An application/service/web user account. More...
	TSK_SPEED_DIAL_ENTRY
	A speed dial entry from a phone. More...
	TSK_TAG_ARTIFACT
	tagged results/artifacts More...
	TSK_TAG_FILE
	tagged files More...
	TSK_TOOL_OUTPUT
	Output from an external tool or module that (raw text) More...
	TSK_WEB_BOOKMARK
	web bookmarks More...
	TSK_WEB_COOKIE
	web cookies More...
	TSK_WEB_DOWNLOAD
	web downloads More...
	TSK_WEB_HISTORY
	web history More...
	TSK_WEB_SEARCH_QUERY
	web search engine query extracted from web history More...

Private Member Functions
	ARTIFACT_TYPE (int typeID, String label, String displayName)

Private Attributes
final String	displayName
final String	label
final int	typeID

Detailed Description

Enum for artifact types. Refer to http://wiki.sleuthkit.org/index.php?title=Artifact_Examples for details on which attributes should be used for each artifact.

Definition at line 140 of file BlackboardArtifact.java.

Constructor & Destructor Documentation

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.ARTIFACT_TYPE ( int  typeID, String  label, String  displayName  )

private

Definition at line 234 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.displayName.

Member Function Documentation

public<T> T org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.accept

(

SleuthkitItemVisitor< T >

v

)

visitor pattern support

Parameters

v

visitor

Returns

visitor return value

Implements org.sleuthkit.datamodel.SleuthkitVisitableItem.

Definition at line 301 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.SleuthkitItemVisitor< T >.visit().

static ARTIFACT_TYPE org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.fromID ( int  ID )

static

Gets the artifact type enum value that corresponds to the given id

Parameters

ID

the id

Returns

the corresponding enum

Definition at line 282 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTypesInUse().

static ARTIFACT_TYPE org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.fromLabel ( String  label )

static

Gets the artifact type enum value that corresponds to the given typeName

Parameters

label

typeName string

Returns

the corresponding enum

Definition at line 266 of file BlackboardArtifact.java.

String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getDisplayName

(

)

Gets display name of the artifact

Returns

display name string

Definition at line 296 of file BlackboardArtifact.java.

References org.sleuthkit.datamodel.BlackboardArtifact.displayName.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getLabel

(

)

Gets the typeName string for the artifact type enum

Returns

typeName string

Definition at line 245 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

int org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.getTypeID

(

)

Gets the type id for the artifact type enum

Returns

type id

Definition at line 254 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.getBlackboardArtifactTypesInUse(), and org.sleuthkit.datamodel.BlackboardArtifact.Type.Type().

Member Data Documentation

final String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.displayName

private

Definition at line 232 of file BlackboardArtifact.java.

final String org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.label

private

Definition at line 230 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ACCOUNT

Initial value:

=(39, "TSK_ACCOUNT", 
                                bundle.getString("BlackboardArtifact.tskAccount.text"))

Definition at line 224 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_PAIRING

Initial value:

=(28, "TSK_BLUETOOTH_PAIRING", 
                                bundle.getString("BlackboardArtifact.tskBluetoothPairing.text"))

A bluetooth pairing entry.

Definition at line 202 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALENDAR_ENTRY

Initial value:

=(26, "TSK_CALENDAR_ENTRY", 
                                bundle.getString("BlackboardArtifact.tskCalendarEntry.text"))

A Calendar entry from a phone, PIM or a Calendar application.

Definition at line 198 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALLLOG

Initial value:

=(25, "TSK_CALLLOG", 
                                bundle.getString("BlackboardArtifact.tskCalllog.text"))

A Phone call log extracted from a phones or softphone application.

Definition at line 196 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CONTACT

Initial value:

=(23, "TSK_CONTACT", 
                                bundle.getString("BlackboardArtifact.tskContact.text"))

A Contact extracted from a phone, or from an Addressbook/Email/Messaging Application.

Definition at line 192 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_ATTACHED

Initial value:

=(11, "TSK_DEVICE_ATTACHED", 
                                bundle.getString("BlackboardArtifact.tskDeviceAttached.text"))

attached devices

Definition at line 162 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EMAIL_MSG

Initial value:

=(13, "TSK_EMAIL_MSG", 
                                bundle.getString("BlackboardArtifact.tskEmailMsg.text"))

email message

Definition at line 166 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_DETECTED

Initial value:

=(33, "TSK_ENCRYPTION_DETECTED", 
                                bundle.getString("BlackboardArtifact.tskEncryptionDetected.text"))

Encrypted File.

Definition at line 212 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EXT_MISMATCH_DETECTED

Initial value:

=(34, "TSK_EXT_MISMATCH_DETECTED", 
                                bundle.getString("BlackboardArtifact.tskExtMismatchDetected.text"))

Extension Mismatch.

Definition at line 214 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EXTRACTED_TEXT

Initial value:

=(14, "TSK_EXTRACTED_TEXT", 
                                bundle.getString("BlackboardArtifact.tskExtractedText.text"))

text extracted from file

Definition at line 168 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_FACE_DETECTED

Initial value:

=(38, "TSK_FACE_DETECTED", 
                                bundle.getString("BlackboardArtifact.tskFaceDetected.text"))

Definition at line 222 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GEN_INFO

Initial value:

=(1, "TSK_GEN_INFO", 
                                bundle.getString("BlackboardArtifact.tskGenInfo.text"))

Default type.

Definition at line 142 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.AbstractContent.getArtifacts(), org.sleuthkit.datamodel.AbstractContent.getGenInfoArtifact(), and org.sleuthkit.datamodel.AbstractContent.newArtifact().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_BOOKMARK

Initial value:

=(29, "TSK_GPS_BOOKMARK", 
                                bundle.getString("BlackboardArtifact.tskGpsBookmark.text"))

Definition at line 204 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_LAST_KNOWN_LOCATION

Initial value:

=(30, "TSK_GPS_LAST_KNOWN_LOCATION", 
                                bundle.getString("BlackboardArtifact.tskGpsLastKnownLocation.text"))

Definition at line 206 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_ROUTE

Initial value:

=(36, "TSK_GPS_ROUTE", 
                                bundle.getString("BlackboardArtifact.tskGpsRoute.text"))

Definition at line 218 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_SEARCH

Initial value:

=(31, "TSK_GPS_SEARCH", 
                                bundle.getString("BlackboardArtifact.tskGpsSearch.text"))

Definition at line 208 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_TRACKPOINT

Initial value:

=(7, "TSK_GPS_TRACKPOINT", 
                                bundle.getString("BlackboardArtifact.tskGpsTrackpoint.text"))

trackpoint (geo location data)

Definition at line 154 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_HASHSET_HIT

Initial value:

=(10, "TSK_HASHSET_HIT", 
                                bundle.getString("BlackboardArtifact.tskHashsetHit.text"))

hashset hits

Definition at line 160 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.AbstractContent.getHashSetNames().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INSTALLED_PROG

Initial value:

=(8, "TSK_INSTALLED_PROG", 
                                bundle.getString("BlackboardArtifact.tskInstalledProg.text"))

installed programs

Definition at line 156 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_ARTIFACT_HIT

Initial value:

=(35, "TSK_INTERESTING_ARTIFACT_HIT", 
                                bundle.getString("BlackboardArtifact.tskInterestingArtifactHit.text"))

Definition at line 216 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT

Initial value:

=(12, "TSK_INTERESTING_FILE_HIT", 
                                bundle.getString("BlackboardArtifact.tskInterestingFileHit.text"))

an interesting/notable file hit

Definition at line 164 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT

Initial value:

=(9, "TSK_KEYWORD_HIT", 
                                bundle.getString("BlackboardArtifact.tskKeywordHits.text"))

keyword search hits

Definition at line 158 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_MESSAGE

Initial value:

=(24, "TSK_MESSAGE", 
                                bundle.getString("BlackboardArtifact.tskMessage.text"))

An SMS/MMS message extracted from phone, or from another messaging application, like IM.

Definition at line 194 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA_EXIF

Initial value:

=(16, "TSK_METADATA_EXIF", 
                                bundle.getString("BlackboardArtifact.tskMetadataExif.text"))

EXIF Metadata.

Definition at line 172 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_ACCOUNT

Initial value:

=(20, "TSK_OS_ACCOUNT", 
                                bundle.getString("BlackboardArtifact.tskOsAccount.text"))

An operating system user account.

Definition at line 184 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_INFO

Initial value:

=(19, "TSK_OS_INFO", 
                                bundle.getString("BlackboardArtifact.tskOsInfo.text"))

Information pertaining to an operating system.

Definition at line 182 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.OSUtility.getOSInfoInternal().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_PROG_RUN

Initial value:

=(32, "TSK_PROG_RUN", 
                                bundle.getString("BlackboardArtifact.tskProgRun.text"))

Application run information.

Definition at line 210 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_RECENT_OBJECT

Initial value:

=(6, "TSK_RECENT_OBJ", 
                                bundle.getString("BlackboardArtifact.tsk.recentObject.text"))

recent objects

Definition at line 152 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_REMOTE_DRIVE

Initial value:

=(37, "TSK_REMOTE_DRIVE", 
                                bundle.getString("BlackboardArtifact.tskRemoteDrive.text"))

Definition at line 220 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SERVICE_ACCOUNT

Initial value:

=(21, "TSK_SERVICE_ACCOUNT", 
                                bundle.getString("BlackboardArtifact.tskServiceAccount.text"))

An application/service/web user account.

Definition at line 186 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SPEED_DIAL_ENTRY

Initial value:

=(27, "TSK_SPEED_DIAL_ENTRY", 
                                bundle.getString("BlackboardArtifact.tskSpeedDialEntry.text"))

A speed dial entry from a phone.

Definition at line 200 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TAG_ARTIFACT

Initial value:

=(18, "TSK_TAG_ARTIFACT", 
                                bundle.getString("BlackboardArtifact.tskTagArtifact.text"))

tagged results/artifacts

Definition at line 180 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.updateFromSchema2toSchema3().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TAG_FILE

Initial value:

=(17, "TSK_TAG_FILE", 
                                bundle.getString("BlackboardArtifact.tagFile.text"))

tagged files

Definition at line 176 of file BlackboardArtifact.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.updateFromSchema2toSchema3().

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TOOL_OUTPUT

Initial value:

=(22, "TSK_TOOL_OUTPUT", 
                                bundle.getString("BlackboardArtifact.tskToolOutput.text"))

Output from an external tool or module that (raw text)

Definition at line 190 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK

Initial value:

=(2, "TSK_WEB_BOOKMARK", 
                                bundle.getString("BlackboardArtifact.tskWebBookmark.text"))

web bookmarks

Definition at line 144 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE

Initial value:

=(3, "TSK_WEB_COOKIE", 
                                bundle.getString("BlackboardArtifact.tskWebCookie.text"))

web cookies

Definition at line 146 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD

Initial value:

=(5, "TSK_WEB_DOWNLOAD", 
                                bundle.getString("BlackboardArtifact.tskWebDownload.text"))

web downloads

Definition at line 150 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY

Initial value:

=(4, "TSK_WEB_HISTORY", 
                                bundle.getString("BlackboardArtifact.tskWebHistory.text"))

web history

Definition at line 148 of file BlackboardArtifact.java.

org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_SEARCH_QUERY

Initial value:

=(15, "TSK_WEB_SEARCH_QUERY", 
                                bundle.getString("BlackboardArtifact.tskWebSearchQuery.text"))

web search engine query extracted from web history

Definition at line 170 of file BlackboardArtifact.java.

final int org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.typeID

private

Definition at line 231 of file BlackboardArtifact.java.

---

The documentation for this enum was generated from the following file:

• /home/carriersleuth/repos/sleuthkit/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java