I am currently developing a data source-level ingest module to extract the most significant artifacts produced by the usage of the Windows Store application Facebook Messenger (Beta).
However, I am having some trouble integrating with the Communications UI.
Looking up the proprieties of any message within the Communications UI, I would expect to see something resembling the following screen capture:
Facebook account identifiers are phone numbers instead of account identifiers, and there is a duplicate propriety “ThreadID” with value “”.
Steps to reproduce the behavior:
Create a CommunicationArtifactsHelper with account types Account.Type.FACEBOOK
Create a TSK_MESSAGE artifact along any account instances and relationships by calling CommunicationArtifactsHelper.addMessage()
I have also tried to create the accounts, artifacts, and relationships (i.e. messages) separately but still had no success; in such cases the proprieties “From” and “To” show up empty.
Am I following the correct procedures?
I so, is this behavior intended? If not, should I open a GitHub issue?