Skip to content
Snippets Groups Projects
Unverified Commit e4e4cfab authored by Richard Cordovano's avatar Richard Cordovano Committed by GitHub
Browse files

Merge pull request #2146 from APriestman/7259_reorganizeSchemaDocs

7259 Reorganizing schema docs.
parents 5ae8d2b7 ae090889
No related branches found
No related tags found
No related merge requests found
...@@ -765,8 +765,9 @@ INPUT = main.dox \ ...@@ -765,8 +765,9 @@ INPUT = main.dox \
artifact_catalog.dox \ artifact_catalog.dox \
insert_and_update_database.dox \ insert_and_update_database.dox \
communications.dox \ communications.dox \
db_schema_8_6.dox \ schema/schema_list.dox \
../src schema/db_schema_8_6.dox \
../src
# This tag can be used to specify the character encoding of the source files # This tag can be used to specify the character encoding of the source files
# that doxygen parses. Internally doxygen uses the UTF-8 encoding. Doxygen uses # that doxygen parses. Internally doxygen uses the UTF-8 encoding. Doxygen uses
......
...@@ -46,6 +46,7 @@ The Sleuth Kit has its own database schema that is shared with Autopsy and other ...@@ -46,6 +46,7 @@ The Sleuth Kit has its own database schema that is shared with Autopsy and other
- Database Schema Documentation: - Database Schema Documentation:
- \subpage db_schema_8_6_page - \subpage db_schema_8_6_page
- \subpage db_schema_page "Older schemas"
- Refer to \subpage query_database_page if you are going to use one of the SleuthkitCase methods that requires you to specify a query. - Refer to \subpage query_database_page if you are going to use one of the SleuthkitCase methods that requires you to specify a query.
- Refer to \subpage insert_and_update_database_page if you are a Sleuth Kit developer and want to avoid database issues. - Refer to \subpage insert_and_update_database_page if you are a Sleuth Kit developer and want to avoid database issues.
......
...@@ -18,6 +18,12 @@ Some general notes on this schema: ...@@ -18,6 +18,12 @@ Some general notes on this schema:
- The Blackboard is used to store artifacts, which contain attributes (name/value pairs). Artifacts are used to store data types that do not have more formal tables. Module writers can make whatever artifact types they want. See \ref mod_bbpage for more details. - The Blackboard is used to store artifacts, which contain attributes (name/value pairs). Artifacts are used to store data types that do not have more formal tables. Module writers can make whatever artifact types they want. See \ref mod_bbpage for more details.
- The Sleuth Kit will make virtual files to span the unallocated space. They will have a naming format of 'Unalloc_[PARENT-OBJECT-ID]_[BYTE-START]_[BYTE-END]'. - The Sleuth Kit will make virtual files to span the unallocated space. They will have a naming format of 'Unalloc_[PARENT-OBJECT-ID]_[BYTE-START]_[BYTE-END]'.
# Schema Information
- <b>Autopsy versions: </b> Autopsy 4.18
- <b>Changes from version 8.5:</b>
- New column for SHA-256 hash in tsk_files
# General Information Tables # General Information Tables
## tsk_db_info ## tsk_db_info
......
/*! \page db_schema_page TSK & Autopsy Database Schemas
This page contians links to the documention for selected versions of the TSK & Autopsy database schema.
- Current Schema
- \subpage db_schema_8_6_page
- Older Schemas
- <a href="https://wiki.sleuthkit.org/index.php?title=Database_v7.2_Schema">Schema version 7.2</a>
- <a href="https://wiki.sleuthkit.org/index.php?title=SQLite_Database_v6_Schema">Schema version 6</a>
- <a href="https://wiki.sleuthkit.org/index.php?title=SQLite_Database_v3_Schema">Schema version 3</a>
- <a href="https://wiki.sleuthkit.org/index.php?title=SQLite_Database_v2_Schema">Schema version 2</a>
*/
\ No newline at end of file
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment