Skip to content
Snippets Groups Projects
Commit ae090889 authored by apriestman's avatar apriestman
Browse files

Reorganizing schema docs.

Added info on Autopsy version and major changes.
Added page listing older schemas.
parent cc4f8b16
No related branches found
No related tags found
No related merge requests found
...@@ -765,8 +765,9 @@ INPUT = main.dox \ ...@@ -765,8 +765,9 @@ INPUT = main.dox \
artifact_catalog.dox \ artifact_catalog.dox \
insert_and_update_database.dox \ insert_and_update_database.dox \
communications.dox \ communications.dox \
db_schema_8_6.dox \ schema/schema_list.dox \
../src schema/db_schema_8_6.dox \
../src
# This tag can be used to specify the character encoding of the source files # This tag can be used to specify the character encoding of the source files
# that doxygen parses. Internally doxygen uses the UTF-8 encoding. Doxygen uses # that doxygen parses. Internally doxygen uses the UTF-8 encoding. Doxygen uses
......
...@@ -46,6 +46,7 @@ The Sleuth Kit has its own database schema that is shared with Autopsy and other ...@@ -46,6 +46,7 @@ The Sleuth Kit has its own database schema that is shared with Autopsy and other
- Database Schema Documentation: - Database Schema Documentation:
- \subpage db_schema_8_6_page - \subpage db_schema_8_6_page
- \subpage db_schema_page "Older schemas"
- Refer to \subpage query_database_page if you are going to use one of the SleuthkitCase methods that requires you to specify a query. - Refer to \subpage query_database_page if you are going to use one of the SleuthkitCase methods that requires you to specify a query.
- Refer to \subpage insert_and_update_database_page if you are a Sleuth Kit developer and want to avoid database issues. - Refer to \subpage insert_and_update_database_page if you are a Sleuth Kit developer and want to avoid database issues.
......
...@@ -18,6 +18,12 @@ Some general notes on this schema: ...@@ -18,6 +18,12 @@ Some general notes on this schema:
- The Blackboard is used to store artifacts, which contain attributes (name/value pairs). Artifacts are used to store data types that do not have more formal tables. Module writers can make whatever artifact types they want. See \ref mod_bbpage for more details. - The Blackboard is used to store artifacts, which contain attributes (name/value pairs). Artifacts are used to store data types that do not have more formal tables. Module writers can make whatever artifact types they want. See \ref mod_bbpage for more details.
- The Sleuth Kit will make virtual files to span the unallocated space. They will have a naming format of 'Unalloc_[PARENT-OBJECT-ID]_[BYTE-START]_[BYTE-END]'. - The Sleuth Kit will make virtual files to span the unallocated space. They will have a naming format of 'Unalloc_[PARENT-OBJECT-ID]_[BYTE-START]_[BYTE-END]'.
# Schema Information
- <b>Autopsy versions: </b> Autopsy 4.18
- <b>Changes from version 8.5:</b>
- New column for SHA-256 hash in tsk_files
# General Information Tables # General Information Tables
## tsk_db_info ## tsk_db_info
......
/*! \page db_schema_page TSK & Autopsy Database Schemas
This page contians links to the documention for selected versions of the TSK & Autopsy database schema.
- Current Schema
- \subpage db_schema_8_6_page
- Older Schemas
- <a href="https://wiki.sleuthkit.org/index.php?title=Database_v7.2_Schema">Schema version 7.2</a>
- <a href="https://wiki.sleuthkit.org/index.php?title=SQLite_Database_v6_Schema">Schema version 6</a>
- <a href="https://wiki.sleuthkit.org/index.php?title=SQLite_Database_v3_Schema">Schema version 3</a>
- <a href="https://wiki.sleuthkit.org/index.php?title=SQLite_Database_v2_Schema">Schema version 2</a>
*/
\ No newline at end of file
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment