Skip to content
Snippets Groups Projects
Commit 8f7f2831 authored by apriestman's avatar apriestman
Browse files

Updated artifact catalog

parent 8e9f9a9f
Branches
Tags
No related merge requests found
......@@ -121,6 +121,35 @@ Indicates that an object was detected in a media file. Typically used by compute
- TSK_DESCRIPTION (Additional comments about the object or observer, e.g., what detected the object)
---
## TSK_PREVIOUSLY_NOTABLE
Indicates that the file or artifact was previously tagged as "Notable" in another Autopsy case.
### REQUIRED ATTRIBUTES
- TSK_CORRELATION_TYPE (The correlation type that was previously tagged as notable)
- TSK_CORRELATION_VALUE (The correlation value that was previously tagged as notable)
- TSK_OTHER_CASES (The list of cases containing this file or artifact at the time the artifact is created)
---
## TSK_PREVIOUSLY_SEEN
Indicates that the file or artifact was previously seen in another Autopsy case.
### REQUIRED ATTRIBUTES
- TSK_CORRELATION_TYPE (The correlation type that was previously seen)
- TSK_CORRELATION_VALUE (The correlation value that was previously seen)
- TSK_OTHER_CASES (The list of cases containing this file or artifact at the time the artifact is created)
---
## TSK_PREVIOUSLY_UNSEEN
Indicates that the file or artifact was previously unseen in another Autopsy case.
### REQUIRED ATTRIBUTES
- TSK_CORRELATION_TYPE (The correlation type that was previously seen)
- TSK_CORRELATION_VALUE (The correlation value that was previously seen)
---
## TSK_USER_CONTENT_SUSPECTED
An indication that some media file content was generated by the user.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment