From 889760730f39e72366f3783bee7dac4820d7eb74 Mon Sep 17 00:00:00 2001
From: Eugene Livis <elivis@basistech.com>
Date: Thu, 29 Jul 2021 10:51:50 -0400
Subject: [PATCH] Added TSK_PREVIOUSLY_NOTABLE artifact
---
.../datamodel/BlackboardArtifact.java | 28 +++++++++++++------
.../org/sleuthkit/datamodel/Bundle.properties | 1 +
.../datamodel/Bundle.properties-MERGED | 1 +
3 files changed, 21 insertions(+), 9 deletions(-)
diff --git a/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java b/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java
index 2acdf0c7f..8b738c1f5 100644
--- a/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java
+++ b/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java
@@ -1288,15 +1288,20 @@ public static final class Type implements Serializable {
public static final Type TSK_WEB_CATEGORIZATION = new BlackboardArtifact.Type(68, "TSK_WEB_CATEGORIZATION", bundle.getString("BlackboardArtifact.tskWebCategorization.text"), Category.ANALYSIS_RESULT);
/**
- * Indicates that the file or artifacts was previously seen in another Autopsy case.
+ * Indicates that the file or artifact was previously seen in another Autopsy case.
*/
public static final Type TSK_PREVIOUSLY_SEEN = new BlackboardArtifact.Type(69, "TSK_PREVIOUSLY_SEEN", bundle.getString("BlackboardArtifact.tskPreviouslySeen.text"), Category.ANALYSIS_RESULT);
/**
- * Indicates that the file or artifacts was previously unseen in another Autopsy case.
+ * Indicates that the file or artifact was previously unseen in another Autopsy case.
*/
public static final Type TSK_PREVIOUSLY_UNSEEN = new BlackboardArtifact.Type(70, "TSK_PREVIOUSLY_UNSEEN", bundle.getString("BlackboardArtifact.tskPreviouslyUnseen.text"), Category.ANALYSIS_RESULT);
+ /**
+ * Indicates that the file or artifact was previously tagged as "Notable" in another Autopsy case.
+ */
+ public static final Type TSK_PREVIOUSLY_NOTABLE = new BlackboardArtifact.Type(71, "TSK_PREVIOUSLY_NOTABLE", bundle.getString("BlackboardArtifact.tskPreviouslyNotable.text"), Category.ANALYSIS_RESULT);
+
// NOTE: When adding a new standard BlackboardArtifact.Type, add the instance and then add to the STANDARD_TYPES map.
/**
* All standard artifact types with ids mapped to the type.
@@ -1364,7 +1369,8 @@ public static final class Type implements Serializable {
TSK_GPS_AREA,
TSK_WEB_CATEGORIZATION,
TSK_PREVIOUSLY_SEEN,
- TSK_PREVIOUSLY_UNSEEN
+ TSK_PREVIOUSLY_UNSEEN,
+ TSK_PREVIOUSLY_NOTABLE
).collect(Collectors.toMap(type -> type.getTypeID(), type -> type)));
private final String typeName;
@@ -1862,17 +1868,21 @@ public enum ARTIFACT_TYPE implements SleuthkitVisitableItem {
TSK_WEB_CATEGORIZATION(68, "TSK_WEB_CATEGORIZATION",
bundle.getString("BlackboardArtifact.tskWebCategorization.text"), Category.ANALYSIS_RESULT),
/**
- * Indicates that the file or artifacts was previously seen in another Autopsy case.
+ * Indicates that the file or artifact was previously seen in another Autopsy case.
*/
TSK_PREVIOUSLY_SEEN(69, "TSK_PREVIOUSLY_SEEN",
- bundle.getString("BlackboardArtifact.tskPreviouslySeen.text"), Category.ANALYSIS_RESULT),
-
+ bundle.getString("BlackboardArtifact.tskPreviouslySeen.text"), Category.ANALYSIS_RESULT),
/**
- * Indicates that the file or artifacts was previously unseen in another Autopsy case.
+ * Indicates that the file or artifact was previously unseen in another Autopsy case.
*/
TSK_PREVIOUSLY_UNSEEN(70, "TSK_PREVIOUSLY_UNSEEN",
- bundle.getString("BlackboardArtifact.tskPreviouslyUnseen.text"), Category.ANALYSIS_RESULT);
-
+ bundle.getString("BlackboardArtifact.tskPreviouslyUnseen.text"), Category.ANALYSIS_RESULT),
+ /**
+ * Indicates that the file or artifact was previously tagged as "Notable" in another Autopsy case.
+ */
+ TSK_PREVIOUSLY_NOTABLE(71, "TSK_PREVIOUSLY_NOTABLE",
+ bundle.getString("BlackboardArtifact.tskPreviouslyNotable.text"), Category.ANALYSIS_RESULT);
+
/*
* To developers: For each new artifact, ensure that: - The enum value
* has 1-line JavaDoc description - The artifact catalog
diff --git a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties
index 7a72e2577..9cf7f46c0 100644
--- a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties
+++ b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties
@@ -66,6 +66,7 @@ BlackboardArtifact.tskAssociatedObject.text=Associated Object
BlackboardArtifact.tskWebCategorization.text=Web Categories
BlackboardArtifact.tskPreviouslySeen.text=Previously Seen
BlackboardArtifact.tskPreviouslyUnseen.text=Previously Unseen
+BlackboardArtifact.tskPreviouslyNotable.text=Previously Notable
BlackboardArtifact.tskYaraHit.text=YARA Hit
BlackboardArtifact.tskGPSArea.text=GPS Area
BlackboardAttribute.tskAccountType.text=Account Type
diff --git a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED
index 7a72e2577..9cf7f46c0 100644
--- a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED
+++ b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED
@@ -66,6 +66,7 @@ BlackboardArtifact.tskAssociatedObject.text=Associated Object
BlackboardArtifact.tskWebCategorization.text=Web Categories
BlackboardArtifact.tskPreviouslySeen.text=Previously Seen
BlackboardArtifact.tskPreviouslyUnseen.text=Previously Unseen
+BlackboardArtifact.tskPreviouslyNotable.text=Previously Notable
BlackboardArtifact.tskYaraHit.text=YARA Hit
BlackboardArtifact.tskGPSArea.text=GPS Area
BlackboardAttribute.tskAccountType.text=Account Type
--
GitLab