Autopsy
4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
class | Searcher |
class | SearchJobInfo |
class | UpdateTimerTask |
Public Member Functions | |
synchronized void | addKeywordListsToAllJobs (List< String > keywordListNames) |
void | endJob (long jobId) |
synchronized void | startJob (long jobId, long dataSourceId, List< String > keywordListNames) |
void | stopJob (long jobId) |
Static Public Member Functions | |
static synchronized SearchRunner | getInstance () |
Private Member Functions | |
void | commit () |
void | doFinalSearch (SearchJobInfo job) |
Private Attributes | |
Ingester | ingester = null |
Map< Long, SearchJobInfo > | jobs = new HashMap<>() |
IngestServices | services = IngestServices.getInstance() |
Timer | updateTimer |
volatile boolean | updateTimerRunning = false |
Static Private Attributes | |
static SearchRunner | instance = null |
static final Logger | logger = Logger.getLogger(SearchRunner.class.getName()) |
Singleton keyword search manager: Launches search threads for each job and performs commits, both on timed intervals.
Definition at line 50 of file SearchRunner.java.
synchronized void org.sleuthkit.autopsy.keywordsearch.SearchRunner.addKeywordListsToAllJobs | ( | List< String > | keywordListNames | ) |
Add these lists to all of the jobs. Used when user wants to search for a list while ingest has already started.
keywordListNames |
Definition at line 167 of file SearchRunner.java.
|
private |
Commits index and notifies listeners of index update
Definition at line 179 of file SearchRunner.java.
References org.sleuthkit.autopsy.keywordsearch.KeywordSearch.fireNumIndexedFilesChange(), org.sleuthkit.autopsy.keywordsearch.KeywordSearch.getServer(), and org.sleuthkit.autopsy.keywordsearch.Server.queryNumIndexedFiles().
Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.endJob(), org.sleuthkit.autopsy.keywordsearch.SearchRunner.UpdateTimerTask.run(), and org.sleuthkit.autopsy.keywordsearch.SearchRunner.stopJob().
|
private |
A final search waits for any still-running workers, and then executes a new one and waits until that is done.
job |
Definition at line 197 of file SearchRunner.java.
References org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.getJobId(), org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.getKeywordListNames(), org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.setCurrentSearcher(), and org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.waitForCurrentWorker().
Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.endJob().
void org.sleuthkit.autopsy.keywordsearch.SearchRunner.endJob | ( | long | jobId | ) |
Perform normal finishing of searching for this job, including one last commit and search. Blocks until the final search is complete.
jobId |
Definition at line 112 of file SearchRunner.java.
References org.sleuthkit.autopsy.keywordsearch.SearchRunner.commit(), org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.decrementModuleReferenceCount(), and org.sleuthkit.autopsy.keywordsearch.SearchRunner.doFinalSearch().
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.shutDown().
|
static |
Definition at line 71 of file SearchRunner.java.
References org.sleuthkit.autopsy.keywordsearch.SearchRunner.instance.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.process(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.shutDown(), and org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.stop().
synchronized void org.sleuthkit.autopsy.keywordsearch.SearchRunner.startJob | ( | long | jobId, |
long | dataSourceId, | ||
List< String > | keywordListNames | ||
) |
Add a new job. Searches will be periodically performed after this is called.
jobId | Job ID that this is associated with |
dataSourceId | Data source that is being indexed and that searches should be restricted to. |
keywordListNames | List of keyword lists that will be searched. List contents will be refreshed each search. |
Definition at line 88 of file SearchRunner.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.process().
void org.sleuthkit.autopsy.keywordsearch.SearchRunner.stopJob | ( | long | jobId | ) |
Immediate stop and removal of job from SearchRunner. Cancels the associated search worker if it's still running.
jobId |
Definition at line 140 of file SearchRunner.java.
References org.sleuthkit.autopsy.keywordsearch.SearchRunner.commit(), and org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.getCurrentSearcher().
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.stop().
|
private |
Definition at line 55 of file SearchRunner.java.
|
staticprivate |
Definition at line 53 of file SearchRunner.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.getInstance().
|
private |
Definition at line 60 of file SearchRunner.java.
|
staticprivate |
Definition at line 52 of file SearchRunner.java.
|
private |
Definition at line 54 of file SearchRunner.java.
|
private |
Definition at line 57 of file SearchRunner.java.
|
private |
Definition at line 56 of file SearchRunner.java.
Copyright © 2012-2016 Basis Technology. Generated on: Tue Oct 25 2016
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.