Blackboard

From SleuthKitWiki
Jump to: navigation, search

The blackboard is a storage concept that is used in both the TSK Framework and Autopsy 3. It allows modules to communicate and post their results.

As an example, if a module finds a web browser bookmark, it would make a "TSK_WEB_BOOKMARK" artifact on the blackboard. The artifact would have attributes to define the URL, dates, etc. that are associated with the bookmark. Later modules, the user interface, or reporting infrastructure could then query the blackboard for all bookmarks and they would be able to see this result.

See the Blackboard Page in the Framework guide for more details and the Artifact Examples page for more examples.