Autopsy
4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
class | Core |
enum | CORE_EVT_STATES |
class | InputStreamPrinterThread |
enum | Schema |
class | ServerAction |
class | SolrServerNoPortException |
Public Member Functions | |
void | addServerActionListener (PropertyChangeListener l) |
void | finalize () throws java.lang.Throwable |
String | getSolrContent (final Content content) throws NoOpenCoreException |
String | getSolrContent (final Content content, int chunkID) throws NoOpenCoreException |
String | getSolrContent (final long objectID) throws NoOpenCoreException |
String | getSolrContent (final long objectID, final int chunkID) throws NoOpenCoreException |
QueryResponse | query (SolrQuery sq) throws KeywordSearchModuleException, NoOpenCoreException |
QueryResponse | query (SolrQuery sq, SolrRequest.METHOD method) throws KeywordSearchModuleException, NoOpenCoreException |
boolean | queryIsIndexed (long contentID) throws KeywordSearchModuleException, NoOpenCoreException |
int | queryNumFileChunks (long fileID) throws KeywordSearchModuleException, NoOpenCoreException |
int | queryNumIndexedChunks () throws KeywordSearchModuleException, NoOpenCoreException |
int | queryNumIndexedDocuments () throws KeywordSearchModuleException, NoOpenCoreException |
int | queryNumIndexedFiles () throws KeywordSearchModuleException, NoOpenCoreException |
TermsResponse | queryTerms (SolrQuery sq) throws KeywordSearchModuleException, NoOpenCoreException |
Static Public Member Functions | |
static String | getChunkIdString (long parentID, int childID) |
static Ingester | getIngester () |
Static Public Attributes | |
static final String | CHUNK_ID_SEPARATOR = "_" |
static final String | CORE_EVT = "CORE_EVT" |
static final Charset | DEFAULT_INDEXED_TEXT_CHARSET = Charset.forName("UTF-8") |
default Charset to index text as More... | |
static final String | HL_ANALYZE_CHARS_UNLIMITED = "500000" |
static final char | ID_CHUNK_SEP = '_' |
static final long | MAX_CONTENT_SIZE = 1L * 1024 * 1024 * 1024 |
Private Member Functions | |
boolean | coreIndexFolderExists (String coreName) throws SolrServerException, IOException |
boolean | coreIsLoaded (String coreName) throws SolrServerException, IOException |
void | initSettings () |
Core | openCore (Case theCase) throws KeywordSearchModuleException |
Core | openCore (String coreName, File dataDir, CaseType caseType) throws KeywordSearchModuleException |
Private Attributes | |
Core | currentCore |
final ReentrantReadWriteLock | currentCoreLock |
HttpSolrServer | currentSolrServer |
int | currentSolrServerPort = 0 |
int | currentSolrStopPort = 0 |
Process | curSolrProcess = null |
InputStreamPrinterThread | errorRedirectThread |
String | javaPath = "java" |
final HttpSolrServer | localSolrServer |
final ServerAction | serverAction |
final File | solrFolder |
UNCPathUtilities | uncPathUtilities = null |
Static Private Attributes | |
static final String | CORE_PROPERTIES = "core.properties" |
static final boolean | DEBUG = false |
static final String | DEFAULT_CORE_NAME = "coreCase" |
static final String | KEY = "jjk#09s" |
static final Logger | logger = Logger.getLogger(Server.class.getName()) |
static final int | MAX_SOLR_MEM_MB = 512 |
static final String | SOLR = "solr" |
Handles management of a either a local or centralized Solr server and its cores.
Definition at line 74 of file Server.java.
void org.sleuthkit.autopsy.keywordsearch.Server.addServerActionListener | ( | PropertyChangeListener | l | ) |
Definition at line 251 of file Server.java.
|
private |
Determines whether or not the index files folder for a Solr core exists.
coreName | the name of the core. |
SolrServerException | |
IOException |
Definition at line 1170 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.Server.openCore().
|
private |
Determines whether or not a particular Solr core exists and is loaded.
coreName | The name of the core. |
SolrServerException | If there is a problem communicating with the Solr server. |
IOException | If there is a problem communicating with the Solr server. |
Definition at line 1155 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.Server.openCore().
void org.sleuthkit.autopsy.keywordsearch.Server.finalize | ( | ) | throws java.lang.Throwable |
Definition at line 246 of file Server.java.
|
static |
Given file parent id and child chunk ID, return the ID string of the chunk as stored in Solr, e.g. FILEID_CHUNKID
parentID | the parent file id (id of the source content) |
childID | the child chunk id |
Definition at line 1061 of file Server.java.
References org.sleuthkit.autopsy.keywordsearch.Server.CHUNK_ID_SEPARATOR.
|
static |
Method to return ingester instance
Definition at line 1048 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp().
String org.sleuthkit.autopsy.keywordsearch.Server.getSolrContent | ( | final Content | content | ) | throws NoOpenCoreException |
Get the text contents of the given file as stored in SOLR.
content | to get the text for |
NoOpenCoreException |
Definition at line 964 of file Server.java.
String org.sleuthkit.autopsy.keywordsearch.Server.getSolrContent | ( | final Content | content, |
int | chunkID | ||
) | throws NoOpenCoreException |
Get the text contents of a single chunk for the given file as stored in SOLR.
content | to get the text for |
chunkID | chunk number to query (starting at 1), or 0 if there is no chunks for that content |
NoOpenCoreException |
Definition at line 988 of file Server.java.
String org.sleuthkit.autopsy.keywordsearch.Server.getSolrContent | ( | final long | objectID | ) | throws NoOpenCoreException |
Get the text contents for the given object id.
objectID |
NoOpenCoreException |
Definition at line 1009 of file Server.java.
String org.sleuthkit.autopsy.keywordsearch.Server.getSolrContent | ( | final long | objectID, |
final int | chunkID | ||
) | throws NoOpenCoreException |
Get the text contents for the given object id and chunk id.
objectID | |
chunkID |
NoOpenCoreException |
Definition at line 1031 of file Server.java.
|
private |
|
private |
** end single-case specific methods *** Creates/opens a Solr core (index) for a case.
theCase | The case for which the core is to be created/opened. |
KeywordSearchModuleException | If an error occurs while creating/opening the core. |
Definition at line 697 of file Server.java.
References org.sleuthkit.autopsy.core.UserPreferences.getIndexingServerHost(), org.sleuthkit.autopsy.core.UserPreferences.getIndexingServerPort(), org.sleuthkit.autopsy.keywordsearch.Server.localSolrServer, and org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE.
|
private |
Creates/opens a Solr core (index) for a case.
coreName | The core name. |
dataDir | The data directory for the core. |
caseType | The type of the case (single-user or multi-user) for which the core is being created/opened. |
KeywordSearchModuleException | If an error occurs while creating/opening the core. |
Definition at line 1078 of file Server.java.
References org.sleuthkit.autopsy.keywordsearch.Server.CORE_PROPERTIES, org.sleuthkit.autopsy.keywordsearch.Server.coreIndexFolderExists(), org.sleuthkit.autopsy.keywordsearch.Server.coreIsLoaded(), org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.keywordsearch.Server.SOLR.
QueryResponse org.sleuthkit.autopsy.keywordsearch.Server.query | ( | SolrQuery | sq | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute solr query
sq | query |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 886 of file Server.java.
QueryResponse org.sleuthkit.autopsy.keywordsearch.Server.query | ( | SolrQuery | sq, |
SolrRequest.METHOD | method | ||
) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute solr query
sq | the query |
method | http method to use |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 913 of file Server.java.
boolean org.sleuthkit.autopsy.keywordsearch.Server.queryIsIndexed | ( | long | contentID | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Return true if the file is indexed (either as a whole as a chunk)
contentID |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 832 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.solrHasContent().
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumFileChunks | ( | long | fileID | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets number of indexed file chunks for a file
fileID | file id of the original file broken into chunks and indexed |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 860 of file Server.java.
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumIndexedChunks | ( | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets only number of all Solr file chunks (not logical files) indexed without actually returning the content.
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 781 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.shutDown().
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumIndexedDocuments | ( | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets only number of all Solr documents indexed (files and chunks) without actually returning the documents
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 806 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp().
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumIndexedFiles | ( | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets only number of all Solr files indexed without actually returning the files. The result does not include chunks, only number of actual files.
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 756 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.commit(), org.sleuthkit.autopsy.keywordsearch.DropdownToolbar.KeywordPropertyChangeListener.propertyChange(), and org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.shutDown().
TermsResponse org.sleuthkit.autopsy.keywordsearch.Server.queryTerms | ( | SolrQuery | sq | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute Solr terms query
sq | the query |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 939 of file Server.java.
|
static |
Definition at line 162 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.LuceneQuery.SolrDocumentComparatorIgnoresChunkId.compare(), and org.sleuthkit.autopsy.keywordsearch.Server.getChunkIdString().
|
static |
Definition at line 159 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.DropdownToolbar.KeywordPropertyChangeListener.propertyChange().
|
staticprivate |
Definition at line 179 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.Server.openCore().
|
private |
Definition at line 193 of file Server.java.
|
private |
Definition at line 194 of file Server.java.
|
private |
Definition at line 191 of file Server.java.
|
private |
Definition at line 174 of file Server.java.
|
private |
Definition at line 175 of file Server.java.
|
private |
Definition at line 166 of file Server.java.
|
staticprivate |
Definition at line 176 of file Server.java.
|
staticprivate |
Definition at line 158 of file Server.java.
|
static |
default Charset to index text as
Definition at line 164 of file Server.java.
|
private |
Definition at line 198 of file Server.java.
|
static |
Definition at line 154 of file Server.java.
|
static |
Definition at line 161 of file Server.java.
|
private |
Definition at line 163 of file Server.java.
|
staticprivate |
Definition at line 170 of file Server.java.
|
private |
Definition at line 184 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.Server.openCore().
|
staticprivate |
Definition at line 157 of file Server.java.
|
static |
Definition at line 156 of file Server.java.
|
staticprivate |
Definition at line 165 of file Server.java.
|
private |
Definition at line 197 of file Server.java.
|
staticprivate |
Definition at line 178 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.Server.openCore().
|
private |
Definition at line 196 of file Server.java.
|
private |
Definition at line 177 of file Server.java.
Copyright © 2012-2016 Basis Technology. Generated on: Tue Oct 25 2016
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.