OtherOccurrenceNodeInstanceData.java

Go to the documentation of this file.

/*
 * Central Repository
 *
 * Copyright 2018 Basis Technology Corp.
 * Contact: carrier <at> sleuthkit <dot> org
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.sleuthkit.autopsy.centralrepository.contentviewer;

import org.sleuthkit.autopsy.casemodule.Case;
import org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance;
import org.sleuthkit.autopsy.centralrepository.datamodel.EamDbException;
import org.sleuthkit.datamodel.AbstractFile;
import org.sleuthkit.datamodel.DataSource;
import org.sleuthkit.datamodel.TskCoreException;
import org.sleuthkit.datamodel.TskData;
import org.sleuthkit.datamodel.TskDataException;

class OtherOccurrenceNodeInstanceData implements OtherOccurrenceNodeData {
    
    // For now hard code the string for the central repo files type, since 
    // getting it dynamically can fail.
    private static final String FILE_TYPE_STR = "Files";
    
    private final String caseName;
    private String deviceID;
    private String dataSourceName;
    private final String filePath;
    private final String typeStr;
    private final String value;
    private TskData.FileKnown known;
    private String comment;
    
    private AbstractFile originalAbstractFile = null;
    private CorrelationAttributeInstance originalCorrelationInstance = null;
    
    OtherOccurrenceNodeInstanceData(CorrelationAttributeInstance instance, CorrelationAttributeInstance.Type type, String value) {
        caseName = instance.getCorrelationCase().getDisplayName();
        deviceID = instance.getCorrelationDataSource().getDeviceID();
        dataSourceName = instance.getCorrelationDataSource().getName();
        filePath = instance.getFilePath();
        this.typeStr = type.getDisplayName();
        this.value = value;
        known = instance.getKnownStatus();
        comment = instance.getComment();
        
        originalCorrelationInstance = instance;
    }
    
    OtherOccurrenceNodeInstanceData(AbstractFile newFile, Case autopsyCase) throws EamDbException {
        caseName = autopsyCase.getDisplayName();
        try {
            DataSource dataSource = autopsyCase.getSleuthkitCase().getDataSource(newFile.getDataSource().getId());
            deviceID = dataSource.getDeviceId();
            dataSourceName = dataSource.getName();
        } catch (TskDataException | TskCoreException ex) {
            throw new EamDbException("Error loading data source for abstract file ID " + newFile.getId(), ex);
        }
        
        filePath = newFile.getParentPath() + newFile.getName();
        typeStr = FILE_TYPE_STR;
        value = newFile.getMd5Hash();
        known = newFile.getKnown();
        comment = "";
        
        originalAbstractFile = newFile;
    }
    
    boolean isFileType() {
        return FILE_TYPE_STR.equals(typeStr);
    }
    
    void updateKnown(TskData.FileKnown newKnownStatus) {
        known = newKnownStatus;
    }
    
    void updateComment(String newComment) {
        comment = newComment;
    }
    
    boolean isCentralRepoNode() {
        return (originalCorrelationInstance != null);
    }    
 
    String getCaseName() {
        return caseName;
    }
    
    String getDeviceID() {
        return deviceID;
    }
    
    String getDataSourceName() {
        return dataSourceName;
    }
    
    String getFilePath() {
        return filePath;
    }
    
    String getType() {
        return typeStr;
    }
    
    String getValue() {
        return value;
    }
    
    TskData.FileKnown getKnown() {
        return known;
    }
    
    String getComment() {
        return comment;
    }
    
    AbstractFile getAbstractFile() throws EamDbException {
        if (originalAbstractFile == null) {
            throw new EamDbException("AbstractFile is null");
        }
        return originalAbstractFile;
    }
    
    CorrelationAttributeInstance getCorrelationAttributeInstance() throws EamDbException {
        if (originalCorrelationInstance == null) {
            throw new EamDbException("CorrelationAttributeInstance is null");
        }
        return originalCorrelationInstance;
    }
}