Autopsy
4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Private Member Functions | |
boolean | extractStringsAndIndex (AbstractFile aFile) |
boolean | extractTextAndIndex (AbstractFile aFile, String detectedFormat) throws IngesterException |
void | indexFile (AbstractFile aFile, boolean indexContent) |
boolean | isTextExtractSupported (AbstractFile aFile, String detectedFormat) |
Private Attributes | |
final Logger | logger = Logger.getLogger(Indexer.class.getName()) |
File indexer, processes and indexes known/allocated files, unknown/unallocated files and directories accordingly
Definition at line 400 of file KeywordSearchIngestModule.java.
|
private |
Extract strings using heuristics from the file and add to index.
aFile | file to extract strings from, divide into chunks and index |
Definition at line 446 of file KeywordSearchIngestModule.java.
References org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.context, org.sleuthkit.autopsy.ingest.IngestJobContext.fileIngestIsCancelled(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.IngestStatus.SKIPPED_ERROR_INDEXING, org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.IngestStatus.SKIPPED_ERROR_TEXTEXTRACT, and org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.IngestStatus.STRINGS_INGESTED.
|
private |
Extract text with Tika or other text extraction modules (by streaming) from the file Divide the file into chunks and index the chunks
aFile | file to extract strings from, divide into chunks and index |
detectedFormat | mime-type detected, or null if none detected |
IngesterException | exception thrown if indexing failed |
Definition at line 417 of file KeywordSearchIngestModule.java.
|
private |
Adds the file to the index. Detects file type, calls extractors, etc.
aFile | File to analyze |
indexContent | False if only metadata should be text_ingested. True if content and metadata should be index. |
Definition at line 493 of file KeywordSearchIngestModule.java.
References org.sleuthkit.autopsy.ingest.IngestJobContext.fileIngestIsCancelled(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeDetector.getFileType(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.IngestStatus.METADATA_INGESTED, org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.IngestStatus.SKIPPED_ERROR_INDEXING, org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.IngestStatus.SKIPPED_ERROR_TEXTEXTRACT, and org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.IngestStatus.TEXT_INGESTED.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.process().
|
private |
Check with every extractor if it supports the file with the detected format
aFile | file to check for |
detectedFormat | mime-type with detected format (such as text/plain) or null if not detected |
Definition at line 476 of file KeywordSearchIngestModule.java.
|
private |
Definition at line 402 of file KeywordSearchIngestModule.java.
Copyright © 2012-2016 Basis Technology. Generated on: Tue Oct 25 2016
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.