Difference between revisions of "Blackboard"
From SleuthKitWiki
(Created page with "The blackboard is a storage concept that is used in both the Sleuth Kit Framework and Autopsy 3. It allows modules to communicate and post their results. As an example,...") |
(Added links.) |
||
| (One intermediate revision by one user not shown) | |||
| Line 1: | Line 1: | ||
| − | The blackboard is a storage concept that is used in both the [[ | + | The blackboard is a storage concept that is used in both the [[TSK Framework]] and [[Autopsy 3]]. It allows modules to communicate and post their results. |
| − | As an example, if a module finds a web browser bookmark, it would make a "TSK_WEB_BOOKMARK" artifact on the blackboard. The artifact would have attributes to define the URL, dates, etc. that are associated with the bookmark. Later modules, the user interface, or reporting infrastructure could then query the blackboard for all bookmarks and they would be able to see this result. | + | As an example, if a module finds a web browser bookmark, it would make a "TSK_WEB_BOOKMARK" artifact on the blackboard. The artifact would have attributes to define the URL, dates, etc. that are associated with the bookmark. Later modules, the user interface, or reporting infrastructure could then query the blackboard for all bookmarks and they would be able to see this result. |
| + | |||
| + | See the [http://sleuthkit.org/sleuthkit/docs/framework-docs/mod_bbpage.html Blackboard Page] in the Framework guide for more details and the [[Artifact Examples]] page for more examples. | ||
Latest revision as of 12:53, 27 September 2012
The blackboard is a storage concept that is used in both the TSK Framework and Autopsy 3. It allows modules to communicate and post their results.
As an example, if a module finds a web browser bookmark, it would make a "TSK_WEB_BOOKMARK" artifact on the blackboard. The artifact would have attributes to define the URL, dates, etc. that are associated with the bookmark. Later modules, the user interface, or reporting infrastructure could then query the blackboard for all bookmarks and they would be able to see this result.
See the Blackboard Page in the Framework guide for more details and the Artifact Examples page for more examples.
