I am trying to process files that have been tagged in the UI.
tags = tagManager.getTagNamesInUse() for tag in tags: self.log(Level.INFO, 'Name => %s :: %s' % (tag.getDisplayName()))
getNamesInUse returns a org.sleuthkit.datamodel.TagName but then it gets a bit confusing I can get an idea on what tags there are in a case using getDisplayName() but I cannot work out from the documentation how to attribute that to a file and then process that file using FileManager()
I can see that I can call getContentTag which I have tried
_content = tagManager.getContentTagsByTagName(tag) self.log(Level.INFO, 'TAG_DETAIL => %s' % _content)
And that returns a contentTag but I am unsure what this is. The docs state I can call getContent but is this calling the file or is this another pointer?