From 0ecd5b74ba9e4136e8e9ea524294eb77069c37df Mon Sep 17 00:00:00 2001 From: Kelly Kelly <kelly@basistech.com> Date: Tue, 6 Jul 2021 14:11:06 -0400 Subject: [PATCH] Modified the artifact catalog --- bindings/java/doxygen/artifact_catalog.dox | 37 ++++++++++++++-------- 1 file changed, 23 insertions(+), 14 deletions(-) diff --git a/bindings/java/doxygen/artifact_catalog.dox b/bindings/java/doxygen/artifact_catalog.dox index ef8144a00..41a666328 100644 --- a/bindings/java/doxygen/artifact_catalog.dox +++ b/bindings/java/doxygen/artifact_catalog.dox @@ -151,6 +151,29 @@ Indicates that the some content of the file was a hit for a YARA rule match. - TSK_RULE (The rule that was a hit for this file) - TSK_SET_NAME (Name of the rule set containing the matching rule YARA rule) +--- +## TSK_METADATA_EXIF +EXIF metadata found in an image or audio file. + +### REQUIRED ATTRIBUTES +- At least one of: +- TSK_DATETIME_CREATED (Creation date of the file, in seconds since 1970-01-01T00:00:00Z) +- TSK_DEVICE_MAKE (Device make, generally the manufacturer, e.g., Apple) +- TSK_DEVICE_MODEL (Device model, generally the product, e.g., iPhone) +- TSK_GEO_ALTITUDE (The camera's altitude when the image/audio was taken) +- TSK_GEO_LATITUDE (The camera's latitude when the image/audio was taken) +- TSK_GEO_LONGITUDE (The camera's longitude when the image/audio was taken)## TSK_METADATA_EXIF +EXIF metadata found in an image or audio file. + +### REQUIRED ATTRIBUTES +- At least one of: +- TSK_DATETIME_CREATED (Creation date of the file, in seconds since 1970-01-01T00:00:00Z) +- TSK_DEVICE_MAKE (Device make, generally the manufacturer, e.g., Apple) +- TSK_DEVICE_MODEL (Device model, generally the product, e.g., iPhone) +- TSK_GEO_ALTITUDE (The camera's altitude when the image/audio was taken) +- TSK_GEO_LATITUDE (The camera's latitude when the image/audio was taken) +- TSK_GEO_LONGITUDE (The camera's longitude when the image/audio was taken) + <br><br> \section art_catalog_data Data Artifact Types @@ -502,20 +525,6 @@ None - TSK_USER_ID (Last author of the document) - TSK_VERSION (Version number of the program used to create the document) ---- -## TSK_METADATA_EXIF -EXIF metadata found in an image or audio file. - -### REQUIRED ATTRIBUTES -- At least one of: -- TSK_DATETIME_CREATED (Creation date of the file, in seconds since 1970-01-01T00:00:00Z) -- TSK_DEVICE_MAKE (Device make, generally the manufacturer, e.g., Apple) -- TSK_DEVICE_MODEL (Device model, generally the product, e.g., iPhone) -- TSK_GEO_ALTITUDE (The camera's altitude when the image/audio was taken) -- TSK_GEO_LATITUDE (The camera's latitude when the image/audio was taken) -- TSK_GEO_LONGITUDE (The camera's longitude when the image/audio was taken) - - --- ## TSK_OS_INFO Details about an operating system recovered from the data source. -- GitLab