Autopsy  4.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
TimeLineEvent.java
Go to the documentation of this file.
1 /*
2  * Autopsy Forensic Browser
3  *
4  * Copyright 2014-15 Basis Technology Corp.
5  * Contact: carrier <at> sleuthkit <dot> org
6  *
7  * Licensed under the Apache License, Version 2.0 (the "License");
8  * you may not use this file except in compliance with the License.
9  * You may obtain a copy of the License at
10  *
11  * http://www.apache.org/licenses/LICENSE-2.0
12  *
13  * Unless required by applicable law or agreed to in writing, software
14  * distributed under the License is distributed on an "AS IS" BASIS,
15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16  * See the License for the specific language governing permissions and
17  * limitations under the License.
18  */
19 package org.sleuthkit.autopsy.timeline.datamodel;
20 
21 import com.google.common.collect.ImmutableMap;
22 import javax.annotation.Nullable;
23 import javax.annotation.concurrent.Immutable;
26 import org.sleuthkit.datamodel.TskData;
27 
31 @Immutable
32 public class TimeLineEvent {
33 
34  private final long eventID;
35  private final long fileID;
36  private final Long artifactID;
37  private final long dataSourceID;
38 
39  private final long time;
40  private final EventType subType;
41  private final ImmutableMap<DescriptionLoD, String> descriptions;
42 
43  private final TskData.FileKnown known;
44  private final boolean hashHit;
45  private final boolean tagged;
46 
47  public TimeLineEvent(long eventID, long dataSourceID, long objID, @Nullable Long artifactID, long time, EventType type, String fullDescription, String medDescription, String shortDescription, TskData.FileKnown known, boolean hashHit, boolean tagged) {
48  this.eventID = eventID;
49  this.fileID = objID;
50  this.artifactID = artifactID == 0 ? null : artifactID;
51  this.time = time;
52  this.subType = type;
53  descriptions = ImmutableMap.<DescriptionLoD, String>of(DescriptionLoD.FULL, fullDescription,
54  DescriptionLoD.MEDIUM, medDescription,
55  DescriptionLoD.SHORT, shortDescription);
56 
57  this.known = known;
58  this.hashHit = hashHit;
59  this.tagged = tagged;
60  this.dataSourceID = dataSourceID;
61  }
62 
63  public boolean isTagged() {
64  return tagged;
65  }
66 
67  public boolean isHashHit() {
68  return hashHit;
69  }
70 
71  @Nullable
72  public Long getArtifactID() {
73  return artifactID;
74  }
75 
76  public long getEventID() {
77  return eventID;
78  }
79 
80  public long getFileID() {
81  return fileID;
82  }
83 
87  public long getTime() {
88  return time;
89  }
90 
91  public EventType getType() {
92  return subType;
93  }
94 
95  public String getFullDescription() {
97  }
98 
99  public String getMedDescription() {
101  }
102 
103  public String getShortDescription() {
105  }
106 
107  public TskData.FileKnown getKnown() {
108  return known;
109  }
110 
111  public String getDescription(DescriptionLoD lod) {
112  return descriptions.get(lod);
113  }
114 
115  public long getDataSourceID() {
116  return dataSourceID;
117  }
118 }
TimeLineEvent(long eventID, long dataSourceID, long objID,@Nullable Long artifactID, long time, EventType type, String fullDescription, String medDescription, String shortDescription, TskData.FileKnown known, boolean hashHit, boolean tagged)
final ImmutableMap< DescriptionLoD, String > descriptions

Copyright © 2012-2015 Basis Technology. Generated on: Wed Apr 6 2016
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.