Autopsy
4.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.
Public Member Functions | |
ReadOnlyBooleanProperty | cancellableProperty () |
synchronized boolean | isCancelRequested () |
boolean | requestCancel () |
Protected Member Functions | |
Void | call () throws Exception |
void | done () |
void | updateMessage (String message) |
void | updateProgress (double workDone, double max) |
void | updateProgress (long workDone, long max) |
void | updateTitle (String title) |
Private Member Functions | |
void | insertArtifactDerivedEvents (EventDB.EventTransaction trans) |
void | insertArtifactTags (int currentWorkTotal, List< BlackboardArtifactTag > artifactTags, EventDB.EventTransaction trans) |
void | insertContentTags (int currentWorkTotal, List< ContentTag > contentTags, EventDB.EventTransaction trans) |
void | insertEventForArtifact (final ArtifactEventType type, BlackboardArtifact bbart, EventDB.EventTransaction trans) throws TskCoreException |
void | insertEventsForFile (AbstractFile f, EventDB.EventTransaction trans) throws TskCoreException |
void | insertMACTimeEvents (final int numFiles, List< Long > fileIDs, EventDB.EventTransaction trans) |
void | populateEventType (final ArtifactEventType type, EventDB.EventTransaction trans) |
Private Attributes | |
final ReadOnlyBooleanWrapper | cancellable = new ReadOnlyBooleanWrapper(true) |
final DBPopulationMode | dbPopulationMode |
ProgressHandle | progressHandle |
final SleuthkitCase | skCase |
final TagsManager | tagsManager |
//TODO: I don't like the coupling to ProgressHandle in this task, but the alternatives I can think of seem even worse. -jm
Definition at line 387 of file EventsRepository.java.
|
protected |
Definition at line 468 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationMode.FULL, org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllBlackboardArtifactTags(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllContentTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactDerivedEvents(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertContentTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertMACTimeEvents(), org.sleuthkit.autopsy.timeline.db.EventsRepository.invalidateCaches(), org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.isCancelRequested(), org.sleuthkit.autopsy.timeline.db.EventsRepository.populateFilterData(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationMode.TAGS_ONLY.
ReadOnlyBooleanProperty org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.cancellableProperty | ( | ) |
Definition at line 398 of file EventsRepository.java.
|
protected |
Definition at line 624 of file EventsRepository.java.
|
private |
Definition at line 543 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.allTypes, org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.isCancelRequested(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.populateEventType().
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call().
|
private |
Definition at line 521 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.isCancelRequested(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateProgress().
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call().
|
private |
Definition at line 532 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.isCancelRequested(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateProgress().
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call().
|
private |
Definition at line 665 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.buildEventDescription(), and org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact().
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.populateEventType().
|
private |
Definition at line 581 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.FILE_ACCESSED, org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.FILE_CHANGED, org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.FILE_CREATED, org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.FILE_MODIFIED, and org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent().
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertMACTimeEvents().
|
private |
Definition at line 558 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertEventsForFile(), org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.isCancelRequested(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateMessage(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateProgress().
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call().
|
inherited |
Definition at line 22 of file CancellationProgressTask.java.
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactDerivedEvents(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertContentTags(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertMACTimeEvents().
|
private |
populate all the events of one subtype
subType | the subtype to populate |
trans | the db transaction to use |
skCase | a reference to the sleuthkit case |
Definition at line 645 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getArtifactType(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getDisplayName(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertEventForArtifact(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateProgress().
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactDerivedEvents().
boolean org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.requestCancel | ( | ) |
Definition at line 403 of file EventsRepository.java.
|
protected |
Definition at line 415 of file EventsRepository.java.
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertMACTimeEvents().
|
protected |
Definition at line 421 of file EventsRepository.java.
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertContentTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertMACTimeEvents(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.populateEventType().
|
protected |
Definition at line 429 of file EventsRepository.java.
|
protected |
Definition at line 409 of file EventsRepository.java.
|
private |
Definition at line 389 of file EventsRepository.java.
|
private |
Definition at line 391 of file EventsRepository.java.
|
private |
Definition at line 395 of file EventsRepository.java.
|
private |
Definition at line 392 of file EventsRepository.java.
|
private |
Definition at line 393 of file EventsRepository.java.
Copyright © 2012-2015 Basis Technology. Generated on: Wed Apr 6 2016
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.