From 8f7f283194eea10a49e9a94a5d4dc6585a3ae2d1 Mon Sep 17 00:00:00 2001 From: apriestman <apriestman@basistech.com> Date: Wed, 29 Sep 2021 10:46:05 -0400 Subject: [PATCH] Updated artifact catalog --- bindings/java/doxygen/artifact_catalog.dox | 29 ++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/bindings/java/doxygen/artifact_catalog.dox b/bindings/java/doxygen/artifact_catalog.dox index de1464f07..95c019c82 100644 --- a/bindings/java/doxygen/artifact_catalog.dox +++ b/bindings/java/doxygen/artifact_catalog.dox @@ -121,6 +121,35 @@ Indicates that an object was detected in a media file. Typically used by compute - TSK_DESCRIPTION (Additional comments about the object or observer, e.g., what detected the object) +--- +## TSK_PREVIOUSLY_NOTABLE +Indicates that the file or artifact was previously tagged as "Notable" in another Autopsy case. + +### REQUIRED ATTRIBUTES +- TSK_CORRELATION_TYPE (The correlation type that was previously tagged as notable) +- TSK_CORRELATION_VALUE (The correlation value that was previously tagged as notable) +- TSK_OTHER_CASES (The list of cases containing this file or artifact at the time the artifact is created) + + +--- +## TSK_PREVIOUSLY_SEEN +Indicates that the file or artifact was previously seen in another Autopsy case. + +### REQUIRED ATTRIBUTES +- TSK_CORRELATION_TYPE (The correlation type that was previously seen) +- TSK_CORRELATION_VALUE (The correlation value that was previously seen) +- TSK_OTHER_CASES (The list of cases containing this file or artifact at the time the artifact is created) + + +--- +## TSK_PREVIOUSLY_UNSEEN +Indicates that the file or artifact was previously unseen in another Autopsy case. + +### REQUIRED ATTRIBUTES +- TSK_CORRELATION_TYPE (The correlation type that was previously seen) +- TSK_CORRELATION_VALUE (The correlation value that was previously seen) + + --- ## TSK_USER_CONTENT_SUSPECTED An indication that some media file content was generated by the user. -- GitLab