Re: [sleuthkit-users] Naming Help Needed
Brought to you by:
carrier
From: Derrick K. <dk...@gm...> - 2017-06-21 15:46:19
|
I'd go with property on q1 as well. I've seen "metadata" abused for things like q2 and in some cases it actually isn't a bad choice. However, we are so used to metadata being data that is internal to a single file though that it may be confusing to use it for data that is related to an artifact. Derrick On Jun 21, 2017 09:09, "Keith Wall" <kwa...@gm...> wrote: > I would go with property/properties for both. Artifacts of an artifact is > confusing. I don't like feature or indicator. > > "Details" might not be a bad term as well. These are the fine details > pertaining to an artifact. > > -keith > > On Wed, Jun 21, 2017 at 8:32 AM, Brian Carrier <ca...@sl...> > wrote: > >> We're about to release the first version of a new database that Autopsy >> can use to support various analytical features and we're having trouble >> with terms and naming. So, we are seeking some more opinions. >> >> Question 1) A file has additional data, such as its path and MD5 values. >> What do you call those? We've used the terms feature, indicator, artifact, >> property, etc. Which makes the most sense to you? >> >> Question 2) A web bookmark has additional data, such as dates and URL. >> What do you call those? Same as in Q1? >> >> To give some more context, we are about to release a new database that >> can be used to correlate data between cases (or between devices in the same >> case). But, we need a name to describe what we are storing, which includes: >> - MD5 hash of files >> - path of files >> - Email addresses >> - Domain names >> - Phone numbers >> >> For a while, we were referring to these as artifacts, but that got too >> confusing because we already have a notion of artifacts in Autopsy, which >> are "bigger" things like web bookmarks and keyword hits. >> >> thanks, >> brian >> >> ------------------------------------------------------------ >> ------------------ >> Check out the vibrant tech community on one of the world's most >> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >> _______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org >> >> > > ------------------------------------------------------------ > ------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > |