Autopsy  4.14.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Private Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree Class Reference

Classes

class  UnpackedNode
 

Private Member Functions

UnpackedNode addNode (UnpackedNode parent, List< String > tokenPath, List< byte[]> tokenPathBytes)
 
void getAllFileObjectsRec (List< AbstractFile > list, UnpackedNode parent)
 
void updateOrAddFileToCaseRec (UnpackedNode node, FileManager fileManager, HashMap< String, ZipFileStatusWrapper > statusMap, String archiveFilePath) throws TskCoreException
 

Private Attributes

int nodesProcessed = 0
 

Detailed Description

Representation of the files in the archive. Used to track of local tree file hierarchy, archive depth, and files created to easily and reliably get parent AbstractFile for unpacked file. So that we don't have to depend on type of traversal of unpacked files handed to us by 7zip unpacker.

Definition at line 1123 of file SevenZipExtractor.java.

Member Function Documentation

UnpackedNode org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.addNode ( UnpackedNode  parent,
List< String >  tokenPath,
List< byte[]>  tokenPathBytes 
)
private

recursive method that traverses the path

Parameters
parent
tokenPath
tokenPathBytes
Returns

Definition at line 1199 of file SevenZipExtractor.java.

void org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.getAllFileObjectsRec ( List< AbstractFile >  list,
UnpackedNode  parent 
)
private

Definition at line 1252 of file SevenZipExtractor.java.

void org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.updateOrAddFileToCaseRec ( UnpackedNode  node,
FileManager  fileManager,
HashMap< String, ZipFileStatusWrapper statusMap,
String  archiveFilePath 
) throws TskCoreException
private

Add derived files to the case if they do not exist, update the derived file data if the new file contains more information than the existing one, and do nothing if the existing information is complete.

Parameters
node- the UnpackedNode for the file which is being added or updated
fileManager- the file manager to perform the adding or updating
statusMap- the map of existing files and their status
archiveFilePath- the archive file path for the unpacked node
Exceptions
TskCoreException

Definition at line 1284 of file SevenZipExtractor.java.

References org.sleuthkit.autopsy.casemodule.services.FileManager.addDerivedFile(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatus.EXISTS, org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatusWrapper.getFile(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatusWrapper.getStatus(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatusWrapper.setStatus(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatus.SKIP, org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatus.UPDATE, and org.sleuthkit.autopsy.casemodule.services.FileManager.updateDerivedFile().

Member Data Documentation

int org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.nodesProcessed = 0
private

Definition at line 1126 of file SevenZipExtractor.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2020 Basis Technology. Generated on: Wed Apr 8 2020
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.