From e10450ff088598966b718171999dcd921a582700 Mon Sep 17 00:00:00 2001
From: Eugene Livis <elivis@basistech.com>
Date: Wed, 28 Jul 2021 13:04:33 -0400
Subject: [PATCH] Added TSK_PREVIOUSLY_UNSEEN artifact type
---
.../sleuthkit/datamodel/BlackboardArtifact.java | 16 ++++++++++++++--
.../org/sleuthkit/datamodel/Bundle.properties | 1 +
.../sleuthkit/datamodel/Bundle.properties-MERGED | 1 +
3 files changed, 16 insertions(+), 2 deletions(-)
diff --git a/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java b/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java
index 9c5ae438e..2acdf0c7f 100644
--- a/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java
+++ b/bindings/java/src/org/sleuthkit/datamodel/BlackboardArtifact.java
@@ -1292,6 +1292,11 @@ public static final class Type implements Serializable {
*/
public static final Type TSK_PREVIOUSLY_SEEN = new BlackboardArtifact.Type(69, "TSK_PREVIOUSLY_SEEN", bundle.getString("BlackboardArtifact.tskPreviouslySeen.text"), Category.ANALYSIS_RESULT);
+ /**
+ * Indicates that the file or artifacts was previously unseen in another Autopsy case.
+ */
+ public static final Type TSK_PREVIOUSLY_UNSEEN = new BlackboardArtifact.Type(70, "TSK_PREVIOUSLY_UNSEEN", bundle.getString("BlackboardArtifact.tskPreviouslyUnseen.text"), Category.ANALYSIS_RESULT);
+
// NOTE: When adding a new standard BlackboardArtifact.Type, add the instance and then add to the STANDARD_TYPES map.
/**
* All standard artifact types with ids mapped to the type.
@@ -1358,7 +1363,8 @@ public static final class Type implements Serializable {
TSK_YARA_HIT,
TSK_GPS_AREA,
TSK_WEB_CATEGORIZATION,
- TSK_PREVIOUSLY_SEEN
+ TSK_PREVIOUSLY_SEEN,
+ TSK_PREVIOUSLY_UNSEEN
).collect(Collectors.toMap(type -> type.getTypeID(), type -> type)));
private final String typeName;
@@ -1859,7 +1865,13 @@ public enum ARTIFACT_TYPE implements SleuthkitVisitableItem {
* Indicates that the file or artifacts was previously seen in another Autopsy case.
*/
TSK_PREVIOUSLY_SEEN(69, "TSK_PREVIOUSLY_SEEN",
- bundle.getString("BlackboardArtifact.tskPreviouslySeen.text"), Category.ANALYSIS_RESULT),;
+ bundle.getString("BlackboardArtifact.tskPreviouslySeen.text"), Category.ANALYSIS_RESULT),
+
+ /**
+ * Indicates that the file or artifacts was previously unseen in another Autopsy case.
+ */
+ TSK_PREVIOUSLY_UNSEEN(70, "TSK_PREVIOUSLY_UNSEEN",
+ bundle.getString("BlackboardArtifact.tskPreviouslyUnseen.text"), Category.ANALYSIS_RESULT);
/*
* To developers: For each new artifact, ensure that: - The enum value
diff --git a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties
index de5eec20f..7a72e2577 100644
--- a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties
+++ b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties
@@ -65,6 +65,7 @@ BlackboardArtifact.shortDescriptionDate.text=at {0}
BlackboardArtifact.tskAssociatedObject.text=Associated Object
BlackboardArtifact.tskWebCategorization.text=Web Categories
BlackboardArtifact.tskPreviouslySeen.text=Previously Seen
+BlackboardArtifact.tskPreviouslyUnseen.text=Previously Unseen
BlackboardArtifact.tskYaraHit.text=YARA Hit
BlackboardArtifact.tskGPSArea.text=GPS Area
BlackboardAttribute.tskAccountType.text=Account Type
diff --git a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED
index de5eec20f..7a72e2577 100644
--- a/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED
+++ b/bindings/java/src/org/sleuthkit/datamodel/Bundle.properties-MERGED
@@ -65,6 +65,7 @@ BlackboardArtifact.shortDescriptionDate.text=at {0}
BlackboardArtifact.tskAssociatedObject.text=Associated Object
BlackboardArtifact.tskWebCategorization.text=Web Categories
BlackboardArtifact.tskPreviouslySeen.text=Previously Seen
+BlackboardArtifact.tskPreviouslyUnseen.text=Previously Unseen
BlackboardArtifact.tskYaraHit.text=YARA Hit
BlackboardArtifact.tskGPSArea.text=GPS Area
BlackboardAttribute.tskAccountType.text=Account Type
--
GitLab