Difference between revisions of "Blackboard"
From SleuthKitWiki
(Created page with "The blackboard is a storage concept that is used in both the Sleuth Kit Framework and Autopsy 3. It allows modules to communicate and post their results. As an example,...") |
|||
| Line 1: | Line 1: | ||
| − | The blackboard is a storage concept that is used in both the [[ | + | The blackboard is a storage concept that is used in both the [[TSK Framework]] and [[Autopsy 3]]. It allows modules to communicate and post their results. |
| − | As an example, if a module finds a web browser bookmark, it would make a "TSK_WEB_BOOKMARK" artifact on the blackboard. The artifact would have attributes to define the URL, dates, etc. that are associated with the bookmark. Later modules, the user interface, or reporting infrastructure could then query the blackboard for all bookmarks and they would be able to see this result. | + | As an example, if a module finds a web browser bookmark, it would make a "TSK_WEB_BOOKMARK" artifact on the blackboard. The artifact would have attributes to define the URL, dates, etc. that are associated with the bookmark. Later modules, the user interface, or reporting infrastructure could then query the blackboard for all bookmarks and they would be able to see this result. See the [[Artifact Examples]] page for more examples. |
Revision as of 19:46, 4 June 2012
The blackboard is a storage concept that is used in both the TSK Framework and Autopsy 3. It allows modules to communicate and post their results.
As an example, if a module finds a web browser bookmark, it would make a "TSK_WEB_BOOKMARK" artifact on the blackboard. The artifact would have attributes to define the URL, dates, etc. that are associated with the bookmark. Later modules, the user interface, or reporting infrastructure could then query the blackboard for all bookmarks and they would be able to see this result. See the Artifact Examples page for more examples.
