diff --git a/bindings/java/doxygen/artifact_catalog.dox b/bindings/java/doxygen/artifact_catalog.dox index b208a111faf2695caa614a3bf3375fa4835c3fef..97d5b3d2cf2813975b7638240c97b22d8d466446 100644 --- a/bindings/java/doxygen/artifact_catalog.dox +++ b/bindings/java/doxygen/artifact_catalog.dox @@ -281,10 +281,7 @@ The last known location of a GPS connected device. This may be from a perspectiv A GPS route. ### REQUIRED ATTRIBUTES -- TSK_GEO_LATITUDE_START (The latitude value of the starting point) -- TSK_GEO_LATITUDE_END (The latitude value of the ending point) -- TSK_GEO_LONGITUDE_START (The longitude value of the ending point) -- TSK_GEO_LONGITUDE_END (The longitude value of the ending point) +- TSK_GEO_WAYPOINTS (JSON list of waypoints. Use org.sleuthkit.datamodel.blackboardutils.attributes.TskGeoWaypointsUtil to create/process) ### OPTIONAL ATTRIBUTES - TSK_DATETIME (Timestamp of the GPS route, in seconds since 1970-01-01T00:00:00Z) @@ -311,18 +308,15 @@ A GPS location that was known to have been searched by the device or user. --- -## TSK_GPS_TRACKPOINT -A GPS trackpoint found in an application, file or database. +## TSK_GPS_TRACK +A Global Positioning System (GPS) track artifact records the track, or path, of a GPS-enabled dvice as a connected series of track points. A track point is a location in a geographic coordinate system with latitude, longitude and altitude (elevation) axes. ### REQUIRED ATTRIBUTES -- TSK_GEO_LATITUDE (The GPS latitude value that was tracked) -- TSK_GEO_LONGITUDE (The GPS longitude value that was tracked) +- TSK_GEO_TRACKPOINTS (JSON list of trackpoints. Use org.sleuthkit.datamodel.blackboardutils.attributes.TskGeoTrackpointsUtil to create/process) ### OPTIONAL ATTRIBUTES -- TSK_DATETIME (Timestamp of the GPS trackpoint, in seconds since 1970-01-01T00:00:00Z) -- TSK_GEO_ALTITUDE (Altitude of the latitude and longitude values) -- TSK_NAME (The name of the trackpoint. Ex: Boston) -- TSK_PROG_NAME (Name of application containing the GPS trackpoint) +- TSK_NAME (The name of the trackpoint set. Ex: Boston) +- TSK_PROG_NAME (Name of application containing the GPS trackpoint set) @@ -406,6 +400,7 @@ A message that is found in some content. - TSK_MESSAGE_TYPE (E.g., WhatsApp Message, Skype Message, etc.) ### OPTIONAL ATTRIBUTES +- TSK_ATTACHMENTS (Attachments - use the org.sleuthkit.datamodel.blackboardutils.CommunicationArtifactsHelper class to add an attachment) - TSK_DATETIME (Timestamp the message was sent or received, in seconds since 1970-01-01T00:00:00Z) - TSK_DIRECTION (Direction of the message, e.g., incoming or outgoing) - TSK_EMAIL_FROM (Email address of the sender) diff --git a/bindings/java/doxygen/blackboard.dox b/bindings/java/doxygen/blackboard.dox index 752fe96054a74df34353d6ebeba7f6e4024cb771..d1a3f13714609543053407fceab7635ba8f53128 100644 --- a/bindings/java/doxygen/blackboard.dox +++ b/bindings/java/doxygen/blackboard.dox @@ -35,7 +35,7 @@ With either of these approaches, the artifact is created in the database immedia If you want to create an attribute in the TSK_GEN_INFO artifact, use org.sleuthkit.datamodel.Content.getGenInfoArtifact() to ensure that you do not create a second TSK_GEN_INFO artifact for the file and to ensure that you used the cached version (which will be faster for you). -Next, you need to make attributes and add them to the artifact. Attributes are created by making a new instance of org.sleuthkit.datamodel.BlackboardAttribute using one of the various constructors. After you create one with the correct type and value, you add it to the artifact using org.sleuthkit.datamodel.BlackboardArtifact.addAttribute() (or org.sleuthkit.datamodel.BlackboardArtifact.addAttributes() if you have several to add - it’s faster). Note that you should not manually add attributes of type JSON for standard attribute types such as TSK_ATTACHMENTS or TSK_GEO_TRACKPOINTS. Instead, you should use the helper classes in org.sleuthkit.datamodel.blackboardutils.attributes to create your artifacts. +Next, you need to make attributes and add them to the artifact. Attributes are created by making a new instance of org.sleuthkit.datamodel.BlackboardAttribute using one of the various constructors. After you create one with the correct type and value, you add it to the artifact using org.sleuthkit.datamodel.BlackboardArtifact.addAttribute() (or org.sleuthkit.datamodel.BlackboardArtifact.addAttributes() if you have several to add - it’s faster). Note that you should not manually add attributes of type JSON for standard attribute types such as TSK_ATTACHMENTS or TSK_GEO_TRACKPOINTS. Instead, you should use the helper classes in org.sleuthkit.datamodel.blackboardutils.attributes or org.sleuthkit.datamodel.blackboardutils to create your artifacts. \subsubsection jni_bb_artifact2 Creating Multiple Artifacts or Multiple Attributes