From c1c11c4c375d0f81fe6bf44d465b0497e87992b6 Mon Sep 17 00:00:00 2001 From: apriestman <apriestman@basistech.com> Date: Thu, 16 Sep 2021 14:59:58 -0400 Subject: [PATCH] Restore persona artifact --- .../sleuthkit/datamodel/BlackboardArtifact.java | 17 +++++++++++++++-- .../org/sleuthkit/datamodel/Bundle.properties | 1 + .../datamodel/Bundle.properties-MERGED | 1 + 3 files changed, 17 insertions(+), 2 deletions(-) diff --git a/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java b/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java index 45d8dd41e..b427c441e 100644 --- a/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java +++ b/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java @@ -1294,6 +1294,12 @@ public static final class Type implements Serializable { */ public static final Type TSK_PREVIOUSLY_NOTABLE = new BlackboardArtifact.Type(71, "TSK_PREVIOUSLY_NOTABLE", bundle.getString("BlackboardArtifact.tskPreviouslyNotable.text"), Category.ANALYSIS_RESULT); + /** + * *TEMPORARY* Indicates that the artifact is associated with a persona. + */ + public static final Type TSK_MATCHING_PERSONA = new BlackboardArtifact.Type(72, "TSK_MATCHING_PERSONA", bundle.getString("BlackboardArtifact.tskMatchingPersona.text"), Category.ANALYSIS_RESULT); + + // NOTE: When adding a new standard BlackboardArtifact.Type, add the instance and then add to the STANDARD_TYPES map. /** * All standard artifact types with ids mapped to the type. @@ -1362,7 +1368,8 @@ public static final class Type implements Serializable { TSK_WEB_CATEGORIZATION, TSK_PREVIOUSLY_SEEN, TSK_PREVIOUSLY_UNSEEN, - TSK_PREVIOUSLY_NOTABLE + TSK_PREVIOUSLY_NOTABLE, + TSK_MATCHING_PERSONA ).collect(Collectors.toMap(type -> type.getTypeID(), type -> type))); private final String typeName; @@ -1873,7 +1880,13 @@ public enum ARTIFACT_TYPE implements SleuthkitVisitableItem { * Indicates that the file or artifact was previously tagged as "Notable" in another Autopsy case. */ TSK_PREVIOUSLY_NOTABLE(71, "TSK_PREVIOUSLY_NOTABLE", - bundle.getString("BlackboardArtifact.tskPreviouslyNotable.text"), Category.ANALYSIS_RESULT); + bundle.getString("BlackboardArtifact.tskPreviouslyNotable.text"), Category.ANALYSIS_RESULT), + + /** + * *TEMPORARY* Indicates that the artifact is associated with a persona. + */ + TSK_MATCHING_PERSONA(72, "TSK_MATCHING_PERSONA", + bundle.getString("BlackboardArtifact.tskMatchingPersona.text"), Category.ANALYSIS_RESULT); /* diff --git a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties index c5f163fef..53b5520f0 100644 --- a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties +++ b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties @@ -67,6 +67,7 @@ BlackboardArtifact.tskWebCategorization.text=Web Categories BlackboardArtifact.tskPreviouslySeen.text=Previously Seen BlackboardArtifact.tskPreviouslyUnseen.text=Previously Unseen BlackboardArtifact.tskPreviouslyNotable.text=Previously Notable +BlackboardArtifact.tskMatchingPersona.text=Matching Persona BlackboardArtifact.tskYaraHit.text=YARA Hit BlackboardArtifact.tskGPSArea.text=GPS Area BlackboardAttribute.tskAccountType.text=Account Type diff --git a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED index c5f163fef..53b5520f0 100644 --- a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED +++ b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED @@ -67,6 +67,7 @@ BlackboardArtifact.tskWebCategorization.text=Web Categories BlackboardArtifact.tskPreviouslySeen.text=Previously Seen BlackboardArtifact.tskPreviouslyUnseen.text=Previously Unseen BlackboardArtifact.tskPreviouslyNotable.text=Previously Notable +BlackboardArtifact.tskMatchingPersona.text=Matching Persona BlackboardArtifact.tskYaraHit.text=YARA Hit BlackboardArtifact.tskGPSArea.text=GPS Area BlackboardAttribute.tskAccountType.text=Account Type -- GitLab