Autopsy
4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits ChangeEvent.
Public Member Functions | |
ModuleDataEvent (String moduleName, ARTIFACT_TYPE artifactType) | |
ModuleDataEvent (String moduleName, BlackboardArtifact.Type blackboardArtifactType) | |
ModuleDataEvent (String moduleName, BlackboardArtifact.Type blackboardArtifactType, Collection< BlackboardArtifact > artifacts) | |
ModuleDataEvent (String moduleName, ARTIFACT_TYPE artifactType, Collection< BlackboardArtifact > artifacts) | |
Collection< BlackboardArtifact > | getArtifacts () |
ARTIFACT_TYPE | getArtifactType () |
BlackboardArtifact.Type | getBlackboardArtifactType () |
String | getModuleName () |
Private Attributes | |
Collection< BlackboardArtifact > | artifacts |
BlackboardArtifact.Type | blackboardArtifactType |
String | moduleName |
Event data that are fired off by ingest modules when they have posted new data of specific type to the blackboard. The name of property change fired is then IngestManager.IngestModuleEvent.DATA.toString()
In its most generic form, it only gives notice about a type of artifact and it can also give notice about specific IDs that can be retrieved.
The object wraps a collection of blackboard artifacts and their associated attributes that are to be reported as the new data to listeners. Passing the data as part of the event reduces memory footprint and decreases number of garbage collections of the blackboard artifacts and attributes objects (the objects are expected to be reused by the data event listeners).
If a module does not pass the data as part of ModuleDataEvent (ModuleDataEvent.getArtifacts() returns null) - it is an indication that the module has new data but it does not implement new data tracking. The listener can then perform a blackboard query to get the latest data of interest (e.g. by artifact type).
By design, only a single type of artifacts can be contained in a single data event.
Definition at line 49 of file ModuleDataEvent.java.
org.sleuthkit.autopsy.ingest.ModuleDataEvent.ModuleDataEvent | ( | String | moduleName, |
ARTIFACT_TYPE | artifactType | ||
) |
moduleName | Module name |
artifactType | Type of artifact that was posted to blackboard |
Definition at line 59 of file ModuleDataEvent.java.
References org.sleuthkit.autopsy.ingest.ModuleDataEvent.blackboardArtifactType, and org.sleuthkit.autopsy.ingest.ModuleDataEvent.moduleName.
org.sleuthkit.autopsy.ingest.ModuleDataEvent.ModuleDataEvent | ( | String | moduleName, |
BlackboardArtifact.Type | blackboardArtifactType | ||
) |
moduleName | Module Name |
blackboardArtifactType | Type of the blackboard artifact posted to the blackboard |
Definition at line 70 of file ModuleDataEvent.java.
References org.sleuthkit.autopsy.ingest.ModuleDataEvent.blackboardArtifactType, and org.sleuthkit.autopsy.ingest.ModuleDataEvent.moduleName.
org.sleuthkit.autopsy.ingest.ModuleDataEvent.ModuleDataEvent | ( | String | moduleName, |
BlackboardArtifact.Type | blackboardArtifactType, | ||
Collection< BlackboardArtifact > | artifacts | ||
) |
moduleName | Module name |
blackboardArtifactType | Type of artifact posted to the blackboard |
artifacts | List of specific artifact ID values that were added to blackboard |
Definition at line 82 of file ModuleDataEvent.java.
References org.sleuthkit.autopsy.ingest.ModuleDataEvent.artifacts, org.sleuthkit.autopsy.ingest.ModuleDataEvent.blackboardArtifactType, and org.sleuthkit.autopsy.ingest.ModuleDataEvent.moduleName.
org.sleuthkit.autopsy.ingest.ModuleDataEvent.ModuleDataEvent | ( | String | moduleName, |
ARTIFACT_TYPE | artifactType, | ||
Collection< BlackboardArtifact > | artifacts | ||
) |
moduleName | Module name |
artifactType | Type of artifact that was posted to blackboard |
artifacts | List of specific artifact values that were added to blackboard |
Definition at line 93 of file ModuleDataEvent.java.
References org.sleuthkit.autopsy.ingest.ModuleDataEvent.artifacts, and org.sleuthkit.autopsy.ingest.ModuleDataEvent.moduleName.
Collection<BlackboardArtifact> org.sleuthkit.autopsy.ingest.ModuleDataEvent.getArtifacts | ( | ) |
get new artifact IDs associated with the event
Definition at line 113 of file ModuleDataEvent.java.
References org.sleuthkit.autopsy.ingest.ModuleDataEvent.artifacts.
Referenced by org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.BlackboardPostEvent().
ARTIFACT_TYPE org.sleuthkit.autopsy.ingest.ModuleDataEvent.getArtifactType | ( | ) |
get artifact type of the new artifacts associated with the event
IllegalArgumentException | if the type is user defined |
Definition at line 124 of file ModuleDataEvent.java.
References org.sleuthkit.autopsy.ingest.ModuleDataEvent.blackboardArtifactType.
BlackboardArtifact.Type org.sleuthkit.autopsy.ingest.ModuleDataEvent.getBlackboardArtifactType | ( | ) |
Gets the blackboard artifact type of the new artifacts associated with the event
Definition at line 104 of file ModuleDataEvent.java.
References org.sleuthkit.autopsy.ingest.ModuleDataEvent.blackboardArtifactType.
Referenced by org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.BlackboardPostEvent().
String org.sleuthkit.autopsy.ingest.ModuleDataEvent.getModuleName | ( | ) |
get module name that created the artifacts and fired the event
Definition at line 133 of file ModuleDataEvent.java.
References org.sleuthkit.autopsy.ingest.ModuleDataEvent.moduleName.
Referenced by org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.BlackboardPostEvent().
|
private |
Definition at line 53 of file ModuleDataEvent.java.
Referenced by org.sleuthkit.autopsy.ingest.ModuleDataEvent.getArtifacts(), and org.sleuthkit.autopsy.ingest.ModuleDataEvent.ModuleDataEvent().
|
private |
|
private |
Definition at line 51 of file ModuleDataEvent.java.
Referenced by org.sleuthkit.autopsy.ingest.ModuleDataEvent.getModuleName(), and org.sleuthkit.autopsy.ingest.ModuleDataEvent.ModuleDataEvent().
Copyright © 2012-2016 Basis Technology. Generated on: Tue Oct 25 2016
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.