Blackboard

From SleuthKitWiki
Revision as of 20:44, 4 June 2012 by Carrier (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

The blackboard is a storage concept that is used in both the Sleuth Kit Framework and Autopsy 3. It allows modules to communicate and post their results.

As an example, if a module finds a web browser bookmark, it would make a "TSK_WEB_BOOKMARK" artifact on the blackboard. The artifact would have attributes to define the URL, dates, etc. that are associated with the bookmark. Later modules, the user interface, or reporting infrastructure could then query the blackboard for all bookmarks and they would be able to see this result.