Autopsy  4.7.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
CustomArtifactType.java
Go to the documentation of this file.
1 /*
2  * Autopsy Forensic Browser
3  *
4  * Copyright 2011-2018 Basis Technology Corp.
5  * Contact: carrier <at> sleuthkit <dot> org
6  *
7  * Licensed under the Apache License, Version 2.0 (the "License");
8  * you may not use this file except in compliance with the License.
9  * You may obtain a copy of the License at
10  *
11  * http://www.apache.org/licenses/LICENSE-2.0
12  *
13  * Unless required by applicable law or agreed to in writing, software
14  * distributed under the License is distributed on an "AS IS" BASIS,
15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16  * See the License for the specific language governing permissions and
17  * limitations under the License.
18  */
19 package org.sleuthkit.autopsy.test;
20 
21 import java.util.ArrayList;
22 import java.util.List;
23 import javax.xml.bind.DatatypeConverter;
27 import org.sleuthkit.datamodel.BlackboardArtifact;
28 import org.sleuthkit.datamodel.BlackboardAttribute;
29 import org.sleuthkit.datamodel.Content;
30 import org.sleuthkit.datamodel.TskCoreException;
31 
35 final class CustomArtifactType {
36 
37  private static final String MODULE_NAME = CustomArtifactsCreatorIngestModuleFactory.getModuleName();
38  private static final String ADDITIONAL_MODULE_NAME = "Another Module";
39  private static final String ARTIFACT_TYPE_NAME = "CUSTOM_ARTIFACT";
40  private static final String ARTIFACT_DISPLAY_NAME = "Custom Artifact";
41  private static final String INT_ATTR_TYPE_NAME = "CUSTOM_INT_ATTRIBUTE";
42  private static final String INT_ATTR_DISPLAY_NAME = "Custom Integer";
43  private static final String DOUBLE_ATTR_TYPE_NAME = "CUSTOM_DOUBLE_ATTRIBUTE";
44  private static final String DOUBLE_ATTR_DISPLAY_NAME = "Custom Double";
45  private static final String LONG_ATTR_TYPE_NAME = "CUSTOM_LONG_ATTRIBUTE";
46  private static final String LONG_ATTR_DISPLAY_NAME = "Custom Long";
47  private static final String DATETIME_ATTR_TYPE_NAME = "CUSTOM_DATETIME_ATTRIBUTE";
48  private static final String DATETIME_ATTR_DISPLAY_NAME = "Custom Datetime";
49  private static final String BYTES_ATTR_TYPE_NAME = "CUSTOM_BYTES_ATTRIBUTE";
50  private static final String BYTES_ATTR_DISPLAY_NAME = "Custom Bytes";
51  private static final String STRING_ATTR_TYPE_NAME = "CUSTOM_STRING_ATTRIBUTE";
52  private static final String STRING_ATTR_DISPLAY_NAME = "Custom String";
53  private static BlackboardArtifact.Type artifactType;
54  private static BlackboardAttribute.Type intAttrType;
55  private static BlackboardAttribute.Type doubleAttrType;
56  private static BlackboardAttribute.Type longAttributeType;
57  private static BlackboardAttribute.Type dateTimeAttrType;
58  private static BlackboardAttribute.Type bytesAttrType;
59  private static BlackboardAttribute.Type stringAttrType;
60 
67  static void addToCaseDatabase() throws Blackboard.BlackboardException, NoCurrentCaseException {
68  Blackboard blackboard = Case.getCurrentCaseThrows().getServices().getBlackboard();
69  artifactType = blackboard.getOrAddArtifactType(ARTIFACT_TYPE_NAME, ARTIFACT_DISPLAY_NAME);
70  intAttrType = blackboard.getOrAddAttributeType(INT_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.INTEGER, INT_ATTR_DISPLAY_NAME);
71  doubleAttrType = blackboard.getOrAddAttributeType(DOUBLE_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.DOUBLE, DOUBLE_ATTR_DISPLAY_NAME);
72  longAttributeType = blackboard.getOrAddAttributeType(LONG_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.LONG, LONG_ATTR_DISPLAY_NAME);
73  dateTimeAttrType = blackboard.getOrAddAttributeType(DATETIME_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.DATETIME, DATETIME_ATTR_DISPLAY_NAME);
74  bytesAttrType = blackboard.getOrAddAttributeType(BYTES_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.BYTE, BYTES_ATTR_DISPLAY_NAME);
75  stringAttrType = blackboard.getOrAddAttributeType(STRING_ATTR_TYPE_NAME, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE.STRING, STRING_ATTR_DISPLAY_NAME);
76  }
77 
87  static BlackboardArtifact createInstance(Content source) throws TskCoreException {
88  BlackboardArtifact artifact = source.newArtifact(artifactType.getTypeID());
89  List<BlackboardAttribute> attributes = new ArrayList<>();
90  attributes.add(new BlackboardAttribute(intAttrType, MODULE_NAME, 0));
91  attributes.add(new BlackboardAttribute(doubleAttrType, MODULE_NAME, 0.0));
92  attributes.add(new BlackboardAttribute(longAttributeType, MODULE_NAME, 0L));
93  attributes.add(new BlackboardAttribute(dateTimeAttrType, MODULE_NAME, 60L));
94  attributes.add(new BlackboardAttribute(bytesAttrType, MODULE_NAME, DatatypeConverter.parseHexBinary("ABCD")));
95  attributes.add(new BlackboardAttribute(stringAttrType, MODULE_NAME, "Zero"));
96  artifact.addAttributes(attributes);
97 
98  /*
99  * Add a second source module to the attributes. Try to do it twice. The
100  * second attempt should have no effect on the data.
101  */
102  for (BlackboardAttribute attr : attributes) {
103  attr.addSource(ADDITIONAL_MODULE_NAME);
104  attr.addSource(ADDITIONAL_MODULE_NAME);
105  }
106 
107  return artifact;
108  }
109 
113  private CustomArtifactType() {
114  }
115 
116 }

Copyright © 2012-2016 Basis Technology. Generated on: Mon Jun 18 2018
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.