Autopsy
4.17.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
class | BackgroundOpenFileSystemsTask |
class | CancelButtonListener |
interface | CaseAction |
enum | CaseLockType |
enum | CaseType |
enum | Events |
class | SleuthkitEventListener |
class | TaskThreadFactory |
Public Member Functions | |
Image | addImage (String imgPath, long imgId, String timeZone) throws CaseActionException |
void | addReport (String localPath, String srcModuleName, String reportName) throws TskCoreException |
Report | addReport (String localPath, String srcModuleName, String reportName, Content parent) throws TskCoreException |
void | closeCase () throws CaseActionException |
SleuthkitCase | createPortableCase (String caseName, File portableCaseFolder) throws TskCoreException |
void | deleteReports (Collection<?extends Report > reports) throws TskCoreException |
void | deleteReports (Collection<?extends Report > reports, boolean deleteFromDisk) throws TskCoreException |
List< Report > | getAllReports () throws TskCoreException |
String | getCacheDirectory () |
String | getCaseDirectory () |
String | getCaseNotes () |
CaseType | getCaseType () |
String | getConfigDirectory () |
String | getCreatedDate () |
List< Content > | getDataSources () throws TskCoreException |
String | getDisplayName () |
String | getExaminer () |
String | getExaminerEmail () |
String | getExaminerPhone () |
String | getExportDirectory () |
String | getLogDirectoryPath () |
String | getModuleDirectory () |
String | getModuleOutputDirectoryRelativePath () |
String | getModulesOutputDirAbsPath () |
String | getName () |
String | getNumber () |
String | getOutputDirectory () |
String | getReportDirectory () |
Services | getServices () |
SleuthkitCase | getSleuthkitCase () |
String | getTempDirectory () |
String | getTextIndexName () |
Set< TimeZone > | getTimeZone () |
Set< TimeZone > | getTimeZones () |
boolean | hasData () |
void | notifyAddingDataSource (UUID eventId) |
void | notifyBlackBoardArtifactTagAdded (BlackboardArtifactTag newTag) |
void | notifyBlackBoardArtifactTagAdded (BlackboardArtifactTag newTag, List< BlackboardArtifactTag > removedTagList) |
void | notifyBlackBoardArtifactTagDeleted (BlackboardArtifactTag deletedTag) |
void | notifyCentralRepoCommentChanged (long contentId, String newComment) |
void | notifyContentTagAdded (ContentTag newTag) |
void | notifyContentTagAdded (ContentTag newTag, List< ContentTag > deletedTagList) |
void | notifyContentTagDeleted (ContentTag deletedTag) |
void | notifyDataSourceAdded (Content dataSource, UUID addingDataSourceEventId) |
void | notifyDataSourceNameChanged (Content dataSource, String newName) |
void | notifyFailedAddingDataSource (UUID addingDataSourceEventId) |
void | notifyTagDefinitionChanged (String changedTagName) |
Static Public Member Functions | |
static void | addEventSubscriber (Set< String > eventNames, PropertyChangeListener subscriber) |
static void | addEventSubscriber (String eventName, PropertyChangeListener subscriber) |
static void | addEventTypeSubscriber (Set< Events > eventTypes, PropertyChangeListener subscriber) |
static void | addPropertyChangeListener (PropertyChangeListener listener) |
static void | closeCurrentCase () throws CaseActionException |
static String | convertTimeZone (String timeZoneId) |
static void | create (String caseDir, String caseDisplayName, String caseNumber, String examiner) throws CaseActionException |
static void | create (String caseDir, String caseDisplayName, String caseNumber, String examiner, CaseType caseType) throws CaseActionException |
static void | createAsCurrentCase (String caseDir, String caseDisplayName, String caseNumber, String examiner, CaseType caseType) throws CaseActionException, CaseActionCancelledException |
static void | createAsCurrentCase (CaseType caseType, String caseDir, CaseDetails caseDetails) throws CaseActionException, CaseActionCancelledException |
static void | createCaseDirectory (String caseDirPath, CaseType caseType) throws CaseActionException |
static void | deleteCase (CaseMetadata metadata) throws CaseActionException |
static void | deleteCurrentCase () throws CaseActionException |
static boolean | deleteMultiUserCase (CaseNodeData caseNodeData, CaseMetadata metadata, ProgressIndicator progressIndicator, Logger logger) throws InterruptedException |
static boolean | existsCurrentCase () |
static String | getAppName () |
static String | getAutopsyVersion () |
static Case | getCurrentCase () |
static Case | getCurrentCaseThrows () throws NoCurrentCaseException |
static String | getModulesOutputDirRelPath () |
static PropertyChangeSupport | getPropertyChangeSupport () |
static void | invokeStartupDialog () |
static boolean | isCaseOpen () |
static boolean | isValidName (String caseName) |
static void | open (String caseMetadataFilePath) throws CaseActionException |
static void | openAsCurrentCase (String caseMetadataFilePath) throws CaseActionException |
static boolean | pathExists (String filePath) |
static void | removeEventSubscriber (String eventName, PropertyChangeListener subscriber) |
static void | removeEventSubscriber (Set< String > eventNames, PropertyChangeListener subscriber) |
static void | removeEventTypeSubscriber (Set< Events > eventTypes, PropertyChangeListener subscriber) |
static void | removePropertyChangeListener (PropertyChangeListener listener) |
Private Member Functions | |
Case (CaseType caseType, String caseDir, CaseDetails caseDetails) | |
Case (CaseMetadata caseMetaData) | |
void | acquireCaseLock (CaseLockType lockType) throws CaseActionException |
void | close (ProgressIndicator progressIndicator) |
void | closeAppServiceCaseResources () |
Void | create (ProgressIndicator progressIndicator, Object additionalParams) throws CaseActionException |
void | createCaseDatabase (ProgressIndicator progressIndicator) throws CaseActionException |
void | createCaseDirectoryIfDoesNotExist (ProgressIndicator progressIndicator) throws CaseActionException |
void | createCaseNodeData (ProgressIndicator progressIndicator) throws CaseActionException |
void | deleteTempfilesFromCaseDirectory (ProgressIndicator progressIndicator) |
void | doCloseCaseAction () throws CaseActionException |
void | doOpenCaseAction (String progressIndicatorTitle, CaseAction< ProgressIndicator, Object, Void > caseAction, CaseLockType caseLockType, boolean allowCancellation, Object additionalParams) throws CaseActionException |
String | getOrCreateSubdirectory (String subDirectoryName) |
Void | open (ProgressIndicator progressIndicator, Object additionalParams) throws CaseActionException |
void | openAppServiceCaseResources (ProgressIndicator progressIndicator, boolean isNewCase) throws CaseActionException |
void | openCaseDataBase (ProgressIndicator progressIndicator) throws CaseActionException |
void | openCaseLevelServices (ProgressIndicator progressIndicator) |
void | openCommunicationChannels (ProgressIndicator progressIndicator) throws CaseActionException |
void | openFileSystemsInBackground () |
void | releaseCaseLock () |
void | saveCaseMetadataToFile (ProgressIndicator progressIndicator) throws CaseActionException |
void | switchLoggingToCaseLogsDirectory (ProgressIndicator progressIndicator) |
void | updateCaseNodeData (ProgressIndicator progressIndicator) throws CaseActionException |
Static Private Member Functions | |
static CoordinationService.Lock | acquireCaseResourcesLock (String caseDir) throws CaseActionException |
static void | checkForCancellation () throws CaseActionCancelledException |
static void | deleteCaseDirectory (CaseMetadata metadata, ProgressIndicator progressIndicator) throws CaseActionException |
static void | deleteFromRecentCases (CaseMetadata metadata, ProgressIndicator progressIndicator) |
static void | deleteMultiUserCase (CaseMetadata metadata, ProgressIndicator progressIndicator) throws CaseActionException, InterruptedException |
static void | deleteMultiUserCaseDatabase (CaseNodeData caseNodeData, CaseMetadata metadata, ProgressIndicator progressIndicator, Logger logger) throws UserPreferencesException, ClassNotFoundException, SQLException, InterruptedException |
static void | deleteMultiUserCaseDirectory (CaseNodeData caseNodeData, CaseMetadata metadata, ProgressIndicator progressIndicator, Logger logger) throws CaseActionException, InterruptedException |
static void | deleteMultiUserCaseTextIndex (CaseNodeData caseNodeData, CaseMetadata metadata, ProgressIndicator progressIndicator, Logger logger) throws KeywordSearchServiceException, InterruptedException |
static void | deleteSingleUserCase (CaseMetadata metadata, ProgressIndicator progressIndicator) throws CaseActionException |
static void | deleteTextIndex (CaseMetadata metadata, ProgressIndicator progressIndicator) throws KeywordSearchServiceException |
static String | displayNameToUniqueName (String caseDisplayName) |
static String | getNameForTitle () |
static boolean | isNoNodeException (CoordinationServiceException ex) |
static void | openAsCurrentCase (Case newCurrentCase, boolean isNewCase) throws CaseActionException, CaseActionCancelledException |
static void | setDeletedItemFlag (CaseNodeData caseNodeData, CaseNodeData.DeletedFlags flag) throws InterruptedException |
static void | updateGUIForCaseClosed () |
static void | updateGUIForCaseOpened (Case newCurrentCase) |
Private Attributes | |
volatile ExecutorService | caseActionExecutor |
SleuthkitCase | caseDb |
CoordinationService.Lock | caseLock |
Services | caseServices |
CollaborationMonitor | collaborationMonitor |
final CaseMetadata | metadata |
final SleuthkitEventListener | sleuthkitEventListener |
Static Private Attributes | |
static Future<?> | backgroundOpenFileSystemsFuture = null |
static final String | CACHE_FOLDER = "Cache" |
static final String | CASE_ACTION_THREAD_NAME = "%s-case-action" |
static final int | CASE_LOCK_TIMEOUT_MINS = 1 |
static final int | CASE_RESOURCES_LOCK_TIMEOUT_HOURS = 1 |
static final String | CASE_RESOURCES_THREAD_NAME = "%s-manage-case-resources" |
static final String | CASE_TEMP_DIR = Case.class.getSimpleName() |
static final Object | caseActionSerializationLock = new Object() |
static final String | CONFIG_FOLDER = "Config" |
static volatile Case | currentCase |
static final String | EVENT_CHANNEL_NAME = "%s-Case-Events" |
static final AutopsyEventPublisher | eventPublisher = new AutopsyEventPublisher() |
static final String | EXPORT_FOLDER = "Export" |
static final String | LOG_FOLDER = "Log" |
static final Logger | logger = Logger.getLogger(Case.class.getName()) |
static volatile Frame | mainFrame |
static final String | MODULE_FOLDER = "ModuleOutput" |
static final String | NO_NODE_ERROR_MSG_FRAGMENT = "KeeperErrorCode = NoNode" |
static final ExecutorService | openFileSystemsExecutor = Executors.newSingleThreadExecutor(new ThreadFactoryBuilder().setNameFormat("case-open-file-systems-%d").build()) |
static final String | REPORTS_FOLDER = "Reports" |
static final String | SINGLE_USER_CASE_DB_NAME = "autopsy.db" |
An Autopsy case. Currently, only one case at a time may be open.
|
private |
Constructs a Case object for a new Autopsy case.
caseType | The type of case (single-user or multi-user). |
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDetails | Contains details of the case, such as examiner, display name, etc |
Definition at line 1785 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.displayNameToUniqueName(), and org.sleuthkit.autopsy.casemodule.CaseDetails.getCaseDisplayName().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
private |
|
private |
Acquires a case (case directory) lock for the current case.
CaseActionException | If the lock cannot be acquired. |
Definition at line 2834 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseLock, org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), org.sleuthkit.autopsy.casemodule.Case.CaseLockType.SHARED, org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetExclusiveLock(), and org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetSharedLock().
Referenced by org.sleuthkit.autopsy.casemodule.Case.doOpenCaseAction().
|
staticprivate |
Acquires an exclusive case resources lock.
caseDir | The full path of the case directory. |
CaseActionException | with a user-friendly message if the lock cannot be acquired due to an exception. |
Definition at line 1042 of file Case.java.
References org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.casemodule.multiusercases.CoordinationServiceUtils.getCaseResourcesNodePath(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), and org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetExclusiveLock().
Referenced by org.sleuthkit.autopsy.casemodule.Case.doCloseCaseAction(), and org.sleuthkit.autopsy.casemodule.Case.doOpenCaseAction().
|
static |
Adds a subscriber to specific case events.
eventNames | The events the subscriber is interested in. |
subscriber | The subscriber (PropertyChangeListener) to add. |
Definition at line 481 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().
Referenced by org.sleuthkit.autopsy.casemodule.Case.addPropertyChangeListener().
|
static |
Adds a subscriber to specific case events.
eventName | The event the subscriber is interested in. |
subscriber | The subscriber (PropertyChangeListener) to add. |
Definition at line 506 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().
|
static |
Adds a subscriber to specific case events.
eventTypes | The events the subscriber is interested in. |
subscriber | The subscriber (PropertyChangeListener) to add. |
Definition at line 491 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().
Referenced by org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.addNotify(), org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.addNotify(), org.sleuthkit.autopsy.datamodel.ExtractedContent.TypeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.addNotify(), org.sleuthkit.autopsy.communications.FiltersPanel.addNotify(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.addNotify(), org.sleuthkit.autopsy.communications.VisualizationPanel.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ViewModeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.addNotify(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode(), org.sleuthkit.autopsy.communications.ContactCache.ContactCache(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.customizeComponents(), org.sleuthkit.autopsy.datasourcesummary.ui.DataSourceSummaryTabbedPane.DataSourceSummaryTabbedPane(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.FileTypesByExtObservable(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.GlobalSettingsPanel(), org.sleuthkit.autopsy.datamodel.ImageNode.ImageNode(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.installListeners(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.onAdd(), org.sleuthkit.autopsy.datasourcesummary.uiutils.EventUpdateHandler.register(), org.sleuthkit.autopsy.report.infrastructure.ReportWizardAction.ReportWizardAction(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToCaseEvents(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.subscribeToChangeEvents(), org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.ViewPreferencesPanel(), and org.sleuthkit.autopsy.datamodel.VolumeNode.VolumeNode().
Image org.sleuthkit.autopsy.casemodule.Case.addImage | ( | String | imgPath, |
long | imgId, | ||
String | timeZone | ||
) | throws CaseActionException |
Adds an image to the current case after it has been added to the DB. Sends out event and reopens windows if needed.
imgPath | The path of the image file. |
imgId | The ID of the image. |
timeZone | The time zone of the image. |
Definition at line 3614 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceAdded().
|
static |
Adds a subscriber to all case events. To subscribe to only specific events, use one of the overloads of addEventSubscriber.
listener | The subscriber (PropertyChangeListener) to add. |
Definition at line 454 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.addEventSubscriber().
Referenced by org.sleuthkit.autopsy.communications.OpenCommVisualizationToolAction.OpenCommVisualizationToolAction(), and org.sleuthkit.autopsy.geolocation.OpenGeolocationAction.OpenGeolocationAction().
void org.sleuthkit.autopsy.casemodule.Case.addReport | ( | String | localPath, |
String | srcModuleName, | ||
String | reportName | ||
) | throws TskCoreException |
Adds a report to the case.
localPath | The path of the report file, must be in the case directory or one of its subdirectories. |
srcModuleName | The name of the module that created the report. |
reportName | The report name, may be empty. |
TskCoreException | if there is a problem adding the report to the case database. |
Definition at line 1654 of file Case.java.
Referenced by org.sleuthkit.autopsy.modules.leappanalyzers.ALeappAnalyzerIngestModule.addILeappReportToReports(), org.sleuthkit.autopsy.modules.leappanalyzers.ILeappAnalyzerIngestModule.addILeappReportToReports(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.createReport(), org.sleuthkit.autopsy.report.modules.stix.STIXReportModule.generateReport(), org.sleuthkit.autopsy.report.modules.caseuco.CaseUcoReportModule.generateReport(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport(), org.sleuthkit.autopsy.communications.VisualizationPanel.handleSnapshotEvent(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeIndex().
Report org.sleuthkit.autopsy.casemodule.Case.addReport | ( | String | localPath, |
String | srcModuleName, | ||
String | reportName, | ||
Content | parent | ||
) | throws TskCoreException |
Adds a report to the case.
localPath | The path of the report file, must be in the case directory or one of its subdirectories. |
srcModuleName | The name of the module that created the report. |
reportName | The report name, may be empty. |
parent | The Content used to create the report, if available. |
TskCoreException | if there is a problem adding the report to the case database. |
Definition at line 1672 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
|
staticprivate |
Checks current thread for an interrupt. Usage: checking for user cancellation of a case creation/opening operation, as reflected in the exception message.
CaseActionCancelledException | If the current thread is interrupted, assumes interrupt was due to a user action. |
Definition at line 2256 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), org.sleuthkit.autopsy.casemodule.Case.open(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), and org.sleuthkit.autopsy.casemodule.Case.openCommunicationChannels().
|
private |
Closes the case.
progressIndicator | A progress indicator. |
Delete files from temp directory if any exist.
Definition at line 2729 of file Case.java.
References org.sleuthkit.autopsy.ingest.IngestManager.cancelAllIngestJobs(), org.sleuthkit.autopsy.ingest.IngestJob.CancellationReason.CASE_CLOSED, org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.closeRemoteEventChannel(), org.sleuthkit.autopsy.casemodule.Case.deleteTempfilesFromCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.ingest.IngestManager.getInstance(), org.sleuthkit.autopsy.coreutils.PlatformUtil.getLogDirectory(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), and org.sleuthkit.autopsy.coreutils.Logger.setLogDirectory().
Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), org.sleuthkit.autopsy.casemodule.Case.doCloseCaseAction(), org.sleuthkit.autopsy.casemodule.Case.open(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.refresh().
|
private |
Allows any registered application-level services to close any resources specific to this case.
Definition at line 2780 of file Case.java.
References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.Case.logger, org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.coreutils.ThreadUtils.shutDownTaskExecutor(), and org.sleuthkit.autopsy.progress.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.casemodule.Case.close().
void org.sleuthkit.autopsy.casemodule.Case.closeCase | ( | ) | throws CaseActionException |
Closes this Autopsy case.
CaseActionException | if there is a problem closing the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 3485 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase().
|
static |
Closes the current case.
CaseActionException | If there is a problem closing the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 714 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseActionSerializationLock, org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, org.sleuthkit.autopsy.casemodule.Case.currentCase, org.sleuthkit.autopsy.casemodule.Case.doCloseCaseAction(), org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getDisplayName(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.publishLocally(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseClosed().
Referenced by org.sleuthkit.autopsy.actions.ExitAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.CaseCloseAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.Case.closeCase(), org.sleuthkit.autopsy.core.Installer.closing(), org.sleuthkit.autopsy.casemodule.Case.deleteCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.run(), and org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.stop().
|
static |
Converts a Java timezone id to a coded string with only alphanumeric characters. Example: "America/New_York" is converted to "EST5EDT" by this method.
timeZoneId | The time zone id. |
Definition at line 3513 of file Case.java.
References org.sleuthkit.autopsy.coreutils.TimeZoneUtils.convertToAlphaNumericFormat().
|
private |
A case action (interface CaseAction<T, V, R>) that creates the case directory and case database and opens the application services for this case.
progressIndicator | A progress indicator. |
additionalParams | An Object that holds any additional parameters for a case action. For this action, this is null. |
CaseActionException | If there is a problem completing the action. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 1937 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.checkForCancellation(), org.sleuthkit.autopsy.casemodule.Case.close(), org.sleuthkit.autopsy.casemodule.Case.createCaseDatabase(), org.sleuthkit.autopsy.casemodule.Case.createCaseDirectoryIfDoesNotExist(), org.sleuthkit.autopsy.casemodule.Case.createCaseNodeData(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), org.sleuthkit.autopsy.casemodule.Case.openCaseLevelServices(), org.sleuthkit.autopsy.casemodule.Case.openCommunicationChannels(), org.sleuthkit.autopsy.casemodule.Case.saveCaseMetadataToFile(), and org.sleuthkit.autopsy.casemodule.Case.switchLoggingToCaseLogsDirectory().
Referenced by org.sleuthkit.autopsy.report.modules.caseuco.CaseUcoReportModule.generateReport().
|
static |
Creates a new, single-user Autopsy case.
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDisplayName | The display name of case, which may be changed later by the user. |
caseNumber | The case number, can be the empty string. |
examiner | The examiner to associate with the case, can be the empty string. |
CaseActionException | if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 3430 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE.
|
static |
Creates a new Autopsy case and makes it the current case.
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDisplayName | The display name of case, which may be changed later by the user. |
caseNumber | The case number, can be the empty string. |
examiner | The examiner to associate with the case, can be the empty string. |
caseType | The type of case (single-user or multi-user). |
CaseActionException | if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 3455 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase().
|
static |
Creates a new case and makes it the current case.
IMPORTANT: This method should not be called in the event dispatch thread (EDT).
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDisplayName | The display name of case, which may be changed later by the user. |
caseNumber | The case number, can be the empty string. |
examiner | The examiner to associate with the case, can be the empty string. |
caseType | The type of case (single-user or multi-user). |
CaseActionException | If there is a problem creating the case. |
CaseActionCancelledException | If creating the case is cancelled. |
Definition at line 581 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), and org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.openCase().
|
static |
Creates a new case and makes it the current case.
IMPORTANT: This method should not be called in the event dispatch thread (EDT).
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseType | The type of case (single-user or multi-user). |
caseDetails | Contains the modifiable details of the case such as the case display name, the case number, and the examiner related data. |
CaseActionException | If there is a problem creating the case. |
CaseActionCancelledException | If creating the case is cancelled. |
Definition at line 608 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.Case(), org.sleuthkit.autopsy.casemodule.CaseDetails.getCaseDisplayName(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
private |
Creates the node data for the case directory lock coordination service node, the case directory, the case database and the case metadata file.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2412 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.casemodule.Case.SINGLE_USER_CASE_DB_NAME.
Referenced by org.sleuthkit.autopsy.casemodule.Case.create().
|
static |
Creates a case directory and its subdirectories.
caseDirPath | Path to the case directory (typically base + case name). |
caseType | The type of case, single-user or multi-user. |
CaseActionException | throw if could not create the case dir |
Definition at line 950 of file Case.java.
References org.sleuthkit.autopsy.coreutils.NetworkUtils.getLocalHostName(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.
Referenced by org.sleuthkit.autopsy.casemodule.Case.createCaseDirectoryIfDoesNotExist(), and org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.openCase().
|
private |
Creates the case directory, if it does not already exist.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2275 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.createCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.create().
|
private |
Creates the node data for the case directory lock coordination service node.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2340 of file Case.java.
References org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.createCaseNodeData(), org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.create().
SleuthkitCase org.sleuthkit.autopsy.casemodule.Case.createPortableCase | ( | String | caseName, |
File | portableCaseFolder | ||
) | throws TskCoreException |
Create an empty portable case from the current case
TskCoreException |
Definition at line 2220 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getCaseNotes(), org.sleuthkit.autopsy.casemodule.Case.getExaminer(), org.sleuthkit.autopsy.casemodule.Case.getExaminerEmail(), org.sleuthkit.autopsy.casemodule.Case.getExaminerPhone(), org.sleuthkit.autopsy.casemodule.Case.getNumber(), org.sleuthkit.autopsy.casemodule.Case.metadata, org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.casemodule.Case.SINGLE_USER_CASE_DB_NAME.
Referenced by org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.createCase().
|
static |
Deletes a case. The case to be deleted must not be the "current case." Deleting the current case must be done by calling Case.deleteCurrentCase.
metadata | The case metadata. |
CaseActionException | If there were one or more errors deleting the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 812 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseActionSerializationLock, org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase(), org.sleuthkit.autopsy.casemodule.Case.deleteSingleUserCase(), org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.progress.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteCurrentCase().
|
staticprivate |
Attempts to delete the case directory for a case.
metadata | The case metadata. |
progressIndicator | A progress indicator. |
CaseActionException | If there is an error deleting the case directory. |
Definition at line 3180 of file Case.java.
References org.sleuthkit.autopsy.coreutils.FileUtil.deleteDir(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDirectory(), and org.sleuthkit.autopsy.casemodule.Case.deleteSingleUserCase().
|
static |
Deletes the current case.
CaseActionException | If there is a problem deleting the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 745 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseActionSerializationLock, org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.deleteCase().
|
staticprivate |
Attempts to remove a case from the recent cases menu if the main application window is present.
metadata | The case metadata. |
progressIndicator | A progress indicator. |
Definition at line 3197 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), and org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI.
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase(), and org.sleuthkit.autopsy.casemodule.Case.deleteSingleUserCase().
|
staticprivate |
Deletes a multi-user case. This method does so after acquiring the case directory coordination service lock and is intended to be used for deleting simple multi-user cases without auto ingest input. Note that the case directory coordination service node for the case is only deleted if no errors occurred.
metadata | The case metadata. |
progressIndicator | A progress indicator. |
CaseActionException | If there were one or more errors deleting the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
InterruptedException | If the thread this code is running in is interrupted while blocked, i.e., if cancellation of the operation is detected during a wait. |
Definition at line 2952 of file Case.java.
References org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.coordinationservice.CoordinationService.deleteNode(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CoordinationServiceUtils.getCaseDirectoryNodePath(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName(), org.sleuthkit.autopsy.casemodule.multiusercases.CoordinationServiceUtils.getCaseResourcesNodePath(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDirectory(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), org.sleuthkit.autopsy.casemodule.Case.isNoNodeException(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.readCaseNodeData(), and org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetExclusiveLock().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteCase().
|
static |
IMPORTANT: This is a "beta" method and is subject to change or removal without notice!
Deletes a mulit-user case by attempting to delete the case database, the text index, the case directory, and the case resources coordination service node for a case, and removes the case from the recent cases menu of the main application window. Callers of this method MUST acquire and release the case directory lock for the case and are responsible for deleting the corresponding coordination service nodes, if desired.
caseNodeData | The coordination service node data for the case. |
metadata | The case metadata. |
progressIndicator | A progress indicator. |
logger | A logger. |
InterruptedException | If the thread this code is running in is interrupted while blocked, i.e., if cancellation of the operation is detected during a wait. |
Definition at line 3039 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.deleteFromRecentCases(), org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDatabase(), org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseTextIndex(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), and org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName().
|
staticprivate |
Attempts to delete the case database for a multi-user case.
caseNodeData | The coordination service node data for the case. |
metadata | The case metadata. |
progressIndicator | A progress indicator. |
logger | A logger. |
UserPreferencesException | if there is an error getting the database server connection info. |
ClassNotFoundException | if there is an error gettting the required JDBC driver. |
SQLException | if there is an error executing the SQL to drop the database from the database server. |
InterruptedException | If interrupted while blocked waiting for coordination service data to be written to the coordination service node database. |
Definition at line 3082 of file Case.java.
References org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.DeletedFlags.CASE_DB, org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDatabaseName(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDisplayName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.isDeletedFlagSet(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), and org.sleuthkit.autopsy.casemodule.Case.setDeletedItemFlag().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase().
|
staticprivate |
Attempts to delete the case directory for a multi-user case.
caseNodeData | The coordination service node data for the case. |
metadata | The case metadata. |
progressIndicator | A progress indicator. |
logger | A logger. |
CaseActionException | if there is an error deleting the case directory. |
InterruptedException | If interrupted while blocked waiting for coordination service data to be written to the coordination service node database. |
Definition at line 3160 of file Case.java.
References org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.DeletedFlags.CASE_DIR, org.sleuthkit.autopsy.casemodule.Case.deleteCaseDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDisplayName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.isDeletedFlagSet(), and org.sleuthkit.autopsy.casemodule.Case.setDeletedItemFlag().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase().
|
staticprivate |
Attempts to delete the text index for a multi-user case.
caseNodeData | The coordination service node data for the case. |
metadata | The case metadata. |
progressIndicator | A progress indicator. |
logger | A logger. |
KeywordSearchServiceException | If there is an error deleting the text index. |
InterruptedException | If interrupted while blocked waiting for coordination service data to be written to the coordination service node database. |
Definition at line 3117 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.deleteTextIndex(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDisplayName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.isDeletedFlagSet(), org.sleuthkit.autopsy.casemodule.Case.setDeletedItemFlag(), and org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.DeletedFlags.TEXT_INDEX.
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase().
void org.sleuthkit.autopsy.casemodule.Case.deleteReports | ( | Collection<?extends Report > | reports | ) | throws TskCoreException |
Deletes one or more reports from the case database. Does not delete the report files.
reports | The report(s) to be deleted from the case. |
TskCoreException | if there is an error deleting the report(s). |
Definition at line 1709 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish(), and org.sleuthkit.autopsy.casemodule.Case.Events.REPORT_DELETED.
Referenced by org.sleuthkit.autopsy.datamodel.Reports.ReportNode.DeleteReportAction.actionPerformed(), and org.sleuthkit.autopsy.casemodule.Case.deleteReports().
void org.sleuthkit.autopsy.casemodule.Case.deleteReports | ( | Collection<?extends Report > | reports, |
boolean | deleteFromDisk | ||
) | throws TskCoreException |
Deletes reports from the case.
reports | Collection of Report to be deleted from the case. |
deleteFromDisk | No longer supported - ignored. |
TskCoreException |
Definition at line 3647 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.deleteReports().
|
staticprivate |
Deletes a single-user case.
metadata | The case metadata. |
progressIndicator | A progress indicator. |
CaseActionException | If there were one or more errors deleting the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2900 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.deleteCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.deleteFromRecentCases(), org.sleuthkit.autopsy.casemodule.Case.deleteTextIndex(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), and org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteCase().
|
private |
Deletes any files in the temp subdirectory of the case directory.
progressIndicator | A progress indicator. |
Definition at line 2387 of file Case.java.
References org.sleuthkit.autopsy.coreutils.FileUtil.deleteDir(), org.sleuthkit.autopsy.casemodule.Case.getTempDirectory(), and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.close(), and org.sleuthkit.autopsy.casemodule.Case.open().
|
staticprivate |
Attempts to delete the text index for a case.
metadata | The case metadata. |
progressIndicator | A progress indicator. |
KeywordSearchServiceException | If there is an error deleting the text index. |
Definition at line 3137 of file Case.java.
References org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseTextIndex(), and org.sleuthkit.autopsy.casemodule.Case.deleteSingleUserCase().
|
staticprivate |
Transforms a case display name into a unique case name that can be used to identify the case even if the display name is changed.
caseDisplayName | A case display name. |
Definition at line 910 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.Case().
|
private |
Performs a case action that involves closing a case opened by calling doOpenCaseAction. If the case is a multi-user case, the coordination service case lock acquired by the call to doOpenCaseAction is released. This case lock must be released in the same thread in which it was acquired, as required by the coordination service. The single-threaded executor saved during the case opening action is therefore used to do the case closing action.
CaseActionException | If there is a problem completing the action. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2654 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.acquireCaseResourcesLock(), org.sleuthkit.autopsy.casemodule.Case.close(), org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.Case.releaseCaseLock(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.coreutils.ThreadUtils.shutDownTaskExecutor(), org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.progress.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase().
|
private |
Performs a case action that involves creating or opening a case. If the case is a multi-user case, the action is done after acquiring a coordination service case lock. This case lock must be released in the same thread in which it was acquired, as required by the coordination service. A single-threaded executor is therefore created to do the case opening action, and is saved for an eventual case closing action.
IMPORTANT: If an open case action for a multi-user case is terminated because an exception is thrown or the action is cancelled, the action is responsible for releasing the case lock while still running in the case action executor's thread. This method assumes this has been done and performs an orderly shut down of the case action executor.
progressIndicatorTitle | A title for the progress indicator for the case action. |
caseAction | The case action method. |
caseLockType | The type of case lock required for the case action. |
allowCancellation | Whether or not to allow the action to be cancelled. |
additionalParams | An Object that holds any additional parameters for a case action. |
CaseActionException | If there is a problem completing the action. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 1835 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.acquireCaseLock(), org.sleuthkit.autopsy.casemodule.Case.acquireCaseResourcesLock(), org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.actionPerformed(), org.sleuthkit.autopsy.casemodule.Case.CaseAction< T, V, R >.execute(), org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.releaseCaseLock(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.setCaseActionFuture(), org.sleuthkit.autopsy.coreutils.ThreadUtils.shutDownTaskExecutor(), org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.progress.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
static |
Check if case is currently open.
Definition at line 3552 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.isCaseOpen().
List<Report> org.sleuthkit.autopsy.casemodule.Case.getAllReports | ( | ) | throws TskCoreException |
Gets the reports that have been added to the case.
TskCoreException | if there is a problem querying the case database. |
Definition at line 1697 of file Case.java.
Referenced by org.sleuthkit.autopsy.datamodel.Reports.ReportNodeFactory.createKeys().
|
static |
Gets the application name.
Definition at line 3406 of file Case.java.
References org.sleuthkit.autopsy.core.UserPreferences.getAppName().
|
static |
Gets the Autopsy version.
Definition at line 3540 of file Case.java.
References org.sleuthkit.autopsy.coreutils.Version.getVersion().
String org.sleuthkit.autopsy.casemodule.Case.getCacheDirectory | ( | ) |
Gets the full path to the cache directory for this case, creating it if it does not exist.
Definition at line 1349 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.coreutils.ImageUtils.getCachedThumbnailLocation().
String org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory | ( | ) |
Gets the path to the top-level case directory.
Definition at line 1298 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory().
Referenced by org.sleuthkit.autopsy.keywordsearch.SolrSearchService.closeCaseResources(), org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.HEICProcessor.convertToJPEG(), org.sleuthkit.autopsy.ingest.IngestMonitor.MonitorTimerAction.findRootDirectoryForCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.getOutputDirPath(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.keywordsearch.SolrSearchService.openCaseResources(), org.sleuthkit.autopsy.casemodule.Case.releaseCaseLock(), and org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp().
String org.sleuthkit.autopsy.casemodule.Case.getCaseNotes | ( | ) |
Gets the case notes.
Definition at line 1289 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseNotes().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeSummaryCaseDetails().
CaseType org.sleuthkit.autopsy.casemodule.Case.getCaseType | ( | ) |
Gets the case type.
Definition at line 1217 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createCaseNodeData(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.currentCaseIsSingleUserCase(), org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath(), org.sleuthkit.autopsy.keywordsearch.Server.openCore(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToServiceMonitorEvents(), org.sleuthkit.autopsy.casemodule.Case.updateCaseNodeData(), and org.sleuthkit.autopsy.casemodule.ImageFilePanel.validatePanel().
String org.sleuthkit.autopsy.casemodule.Case.getConfigDirectory | ( | ) |
Gets the full path to the config directory for this case, creating it if it does not exist.
Definition at line 1389 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.casemodule.CasePreferences.loadFromStorage(), and org.sleuthkit.autopsy.casemodule.CasePreferences.saveToStorage().
String org.sleuthkit.autopsy.casemodule.Case.getCreatedDate | ( | ) |
Gets the case create date.
Definition at line 1226 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCreatedDate().
Referenced by org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCaseCreatedDate().
|
static |
Gets the current case. This method should only be called by clients that can be sure a case is currently open. Some examples of suitable clients are data source processors, ingest modules, and report modules.
Definition at line 664 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows().
Referenced by org.sleuthkit.autopsy.report.modules.html.HTMLReport.addThumbnailRows(), org.sleuthkit.autopsy.communications.ContactCache.buildMap(), org.sleuthkit.autopsy.guiutils.ContactCache.buildMap(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.canDeleteDataSources(), org.sleuthkit.autopsy.timeline.TimeLineTopComponent.componentOpened(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeSearchAction.createAndShowPanel(), org.sleuthkit.autopsy.actions.ThreadDumpAction.ThreadDumper.createFilePath(), org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.createReportDirectory(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.currentCaseIsSingleUserCase(), org.sleuthkit.autopsy.casemodule.DeleteDataSourceAction.DataSourceDeletionWorker.doInBackground(), org.sleuthkit.autopsy.geolocation.GeoFilterPanel.DataSourceUpdater.doInBackground(), org.sleuthkit.autopsy.contentviewers.artifactviewers.ContactArtifactViewer.ContactPersonaSearcherTask.doInBackground(), org.sleuthkit.autopsy.commonpropertiessearch.AllInterCaseCommonAttributeSearcher.findMatchesByCase(), org.sleuthkit.autopsy.commonpropertiessearch.SingleInterCaseCommonAttributeSearcher.findMatchesByCase(), org.sleuthkit.autopsy.commonpropertiessearch.AllInterCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.commonpropertiessearch.SingleInterCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstance.generateNodes(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.getArtifactNode(), org.sleuthkit.autopsy.casemodule.services.Services.getArtifactsBlackboard(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.getAttributeNodes(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCaseCreatedDate(), org.sleuthkit.autopsy.report.infrastructure.ReportWizardDataSourceSelectionPanel.getComponent(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelationAttributesFromNode(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentCase(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentSleuthkitCaseDb(), org.sleuthkit.autopsy.casemodule.services.Blackboard.getOrAddArtifactType(), org.sleuthkit.autopsy.casemodule.services.Blackboard.getOrAddAttributeType(), org.sleuthkit.autopsy.discovery.ui.ArtifactsListPanel.DomainArtifactTableModel.getStringForColumn(), org.sleuthkit.autopsy.casemodule.services.Blackboard.indexArtifact(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.openCase(), org.sleuthkit.autopsy.geolocation.AbstractWaypointFetcher.process(), org.sleuthkit.autopsy.modules.dataSourceIntegrity.DataSourceIntegrityIngestModule.process(), org.sleuthkit.autopsy.modules.leappanalyzers.ILeappAnalyzerIngestModule.process(), org.sleuthkit.autopsy.modules.leappanalyzers.ALeappAnalyzerIngestModule.process(), org.sleuthkit.autopsy.modules.plaso.PlasoIngestModule.process(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.process(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.processLeappFiles(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.processReadLine(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.processWithIngestStream(), org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.run(), org.sleuthkit.autopsy.logicalimager.dsp.LogicalImagerDSProcessor.run(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.run(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.runWithIngestStream(), org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp(), and org.sleuthkit.autopsy.casemodule.ImageFilePanel.validatePanel().
|
static |
Gets the current case, if there is one, or throws an exception if there is no current case. This method should only be called by methods known to run in threads where it is possible that another thread has closed the current case. The exception provides some protection from the consequences of the race condition between the calling thread and a case closing thread, but it is not fool-proof. Background threads calling this method should put all operations in an exception firewall with a try and catch-all block to handle the possibility of bad timing.
NoCurrentCaseException | if there is no current case. |
Definition at line 689 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.currentCase.
Referenced by org.sleuthkit.autopsy.actions.AddBookmarkTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteBlackboardArtifactTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteContentTagAction.actionPerformed(), org.sleuthkit.autopsy.centralrepository.AddEditCentralRepoCommentAction.actionPerformed(), org.sleuthkit.autopsy.directorytree.ExternalViewerAction.actionPerformed(), org.sleuthkit.autopsy.directorytree.ViewContextAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.Reports.ReportNode.DeleteReportAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag(), org.sleuthkit.autopsy.communications.VisualizationPanel.addNotify(), org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.addTag(), org.sleuthkit.autopsy.actions.AddContentTagAction.addTag(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty(), org.sleuthkit.autopsy.datamodel.AttachmentNode.AttachmentNode(), org.sleuthkit.autopsy.corecomponents.DataContentTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.canProcess(), org.sleuthkit.autopsy.casemodule.events.CommentChangedEvent.CommentChangedEvent(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), org.sleuthkit.autopsy.datamodel.AbstractContentNode< Pool >.contentHasVisibleContentChildren(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.HEICProcessor.convertToJPEG(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.copyFileToTempDirectory(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdIngestModule.createInterestingFileHit(), org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Reports.ReportNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.AttachmentNode.createLookup(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.Indexer.createMetadataArtifact(), org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesFilesTableModel.createNodeKey(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.createReport(), org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.createReportDirectory(), org.sleuthkit.autopsy.datamodel.VirtualDirectoryNode.createSheet(), org.sleuthkit.autopsy.datamodel.ImageNode.createSheet(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag(), org.sleuthkit.autopsy.actions.DeleteFileBlackboardArtifactTagAction.deleteTag(), org.sleuthkit.autopsy.actions.DeleteFileContentTagAction.deleteTag(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.deleteTag(), org.sleuthkit.autopsy.actions.GetTagNameDialog.display(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.display(), org.sleuthkit.autopsy.modules.embeddedfileextractor.ExtractArchiveWithPasswordAction.ExtractAndIngestWorker.doInBackground(), org.sleuthkit.autopsy.corecomponents.DataContentViewerHex.BackgroundFileCopyTask.doInBackground(), org.sleuthkit.autopsy.directorytree.actionhelpers.ExtractActionHelper.extractFile(), org.sleuthkit.autopsy.directorytree.actionhelpers.ExtractActionHelper.extractFiles(), org.sleuthkit.autopsy.casemodule.LocalFilesDSProcessor.extractLogicalEvidenceFileContents(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.HEICProcessor.extractToDisk(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.FileTypesByExtObservable(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeCaseSearchResults.filterMetadata(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteDB(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.ingest.IngestMonitor.MonitorTimerAction.findRootDirectoryForCurrentCase(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationDataSource.fromTSKDataSource(), org.sleuthkit.autopsy.report.modules.stix.STIXReportModule.generateReport(), org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.report.modules.caseuco.CaseUcoReportModule.generateReport(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateReport(), org.sleuthkit.autopsy.datamodel.utils.DataSourceLoader.getAllDataSources(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getAllInterestingItemsSets(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAllTagsFromDatabase(), org.sleuthkit.autopsy.coreutils.ImageUtils.getCachedThumbnailLocation(), org.sleuthkit.autopsy.ingest.IngestServices.getCase(), org.sleuthkit.autopsy.ingest.IngestServices.getCaseDatabase(), org.sleuthkit.autopsy.discovery.search.ResultFile.getContentTagsFromDatabase(), org.sleuthkit.autopsy.timeline.TimeLineModule.getController(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.getCorrAttrForFile(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.getCorrAttrSourceArtifact(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.casemodule.events.DataSourceNameChangedEvent.getDataSource(), org.sleuthkit.autopsy.ingest.events.DataSourceAnalysisEvent.getDataSource(), org.sleuthkit.autopsy.filesearch.DataSourcePanel.getDataSourceArray(), org.sleuthkit.autopsy.datasourcesummary.datamodel.CaseDataSourcesSummary.getDataSourceTypes(), org.sleuthkit.autopsy.tags.TagUtils.getDecoratedTagDisplayName(), org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.getFiles(), org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.getFileSetHits(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.HEICProcessor.getModuleOutputFolder(), org.sleuthkit.autopsy.timeline.events.TimelineEventAddedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.ReportAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getNotableTagDisplayNames(), org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue(), org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.getOldValue(), org.sleuthkit.autopsy.report.infrastructure.TableReportGenerator.ArtifactData.getOrderedRowDataAsStrings(), org.sleuthkit.autopsy.keywordsearch.ExtractedTextViewer.getRawArtifactText(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getRelativeFilePath(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getStandardTagNames(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.getTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getTagDisplayNames(), org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.getTags(), org.sleuthkit.autopsy.modules.yara.YaraIngestModule.getTempDirectory(), org.sleuthkit.autopsy.datasourcesummary.datamodel.CaseDataSourcesSummary.getValuesMap(), org.sleuthkit.autopsy.coreutils.VideoUtils.getVideoFileInTempDir(), org.sleuthkit.autopsy.communications.VisualizationPanel.handleSnapshotEvent(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.handleTagChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.handleTagChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.handleTagDeleted(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.handleTagDeleted(), org.sleuthkit.autopsy.ingest.IngestJobSettingsPanel.IngestJobSettingsPanel(), org.sleuthkit.autopsy.ingest.RunIngestAction.isEnabled(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.isRefreshRequired(), org.sleuthkit.autopsy.datamodel.ExtractedContent.TypeFactory.isRefreshRequired(), org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory.isRefreshRequired(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.LeappFileProcessor(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttr(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrFromFile(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.makeKeys(), org.sleuthkit.autopsy.actions.GetTagNameDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction(), org.sleuthkit.autopsy.healthmonitor.HealthMonitor.performDatabaseQuery(), org.sleuthkit.autopsy.contentviewers.contextviewer.ContextViewer.populatePanels(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.populateTable(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.EXIFProcessor.process(), org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule.process(), org.sleuthkit.autopsy.modules.yara.YaraIngestModule.process(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule.process(), org.sleuthkit.autopsy.datasourceprocessors.xry.XRYDataSourceProcessor.process(), org.sleuthkit.autopsy.filesearch.DateSearchFilter.CasePropertyChangeListener.propertyChange(), org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.rebuildTree(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), org.sleuthkit.autopsy.report.modules.html.HTMLReport.refresh(), org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.refreshMimeTypes(), org.sleuthkit.autopsy.actions.ReplaceContentTagAction.replaceTag(), org.sleuthkit.autopsy.actions.ReplaceBlackboardArtifactTagAction.replaceTag(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.run(), org.sleuthkit.autopsy.datasourceprocessors.xry.XRYDataSourceProcessor.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.AnalysisCompleteTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceAddedTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceNameChangedTask.run(), org.sleuthkit.autopsy.directorytree.ExportCSVAction.saveNodesToCSV(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.saveTag(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.saveToCSV(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.showTimeline(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.startUp(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToServiceMonitorEvents(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.tooManyFiles(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagTypeNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagTypeNode.updateDisplayName(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.updateOnCaseSelection(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.updateTag(), org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeIndex(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeSummary().
List<Content> org.sleuthkit.autopsy.casemodule.Case.getDataSources | ( | ) | throws TskCoreException |
Gets the data sources for the case.
org.sleuthkit.datamodel.TskCoreException | if there is a problem querying the case database. |
Definition at line 1428 of file Case.java.
Referenced by org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeSearchAction.createAndShowPanel(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport(), org.sleuthkit.autopsy.report.infrastructure.ReportWizardDataSourceSelectionPanel.getComponent(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.makeKeys(), org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeSummaryCaseDetails(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeSummaryImageInfo().
String org.sleuthkit.autopsy.casemodule.Case.getDisplayName | ( | ) |
Gets the case name that can be changed by the user.
Definition at line 1244 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName().
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.createReportDirectory(), org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.createReportDirectory(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeCaseSearchResults.filterMetadata(), org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstance.generateNodes(), org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateReport(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getRelativeFilePath(), org.sleuthkit.autopsy.communications.VisualizationPanel.handleSnapshotEvent(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.populateTable(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport(), org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened(), org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeIndex(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeSummaryCaseDetails().
String org.sleuthkit.autopsy.casemodule.Case.getExaminer | ( | ) |
Gets the examiner name.
Definition at line 1262 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminer().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeSummaryCaseDetails().
String org.sleuthkit.autopsy.casemodule.Case.getExaminerEmail | ( | ) |
Gets the examiner email address.
Definition at line 1280 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminerEmail().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase().
String org.sleuthkit.autopsy.casemodule.Case.getExaminerPhone | ( | ) |
Gets the examiner phone number.
Definition at line 1271 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminerPhone().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase().
String org.sleuthkit.autopsy.casemodule.Case.getExportDirectory | ( | ) |
Gets the full path to the export directory for this case, creating it if it does not exist.
Definition at line 1359 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.directorytree.actionhelpers.ExtractActionHelper.getExportDirectory(), org.sleuthkit.autopsy.directorytree.ExportCSVAction.getExportDirectory(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.saveToCSV(), org.sleuthkit.autopsy.directorytree.actionhelpers.ExtractActionHelper.updateExportDirectory(), and org.sleuthkit.autopsy.directorytree.ExportCSVAction.updateExportDirectory().
String org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath | ( | ) |
Gets the full path to the log directory for this case, creating it if it does not exist.
Definition at line 1369 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.actions.ThreadDumpAction.ThreadDumper.createFilePath(), and org.sleuthkit.autopsy.casemodule.Case.switchLoggingToCaseLogsDirectory().
String org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory | ( | ) |
Gets the full path to the module output directory for this case, creating it if it does not exist.
Definition at line 1399 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.modules.embeddedfileextractor.ExtractArchiveWithPasswordAction.ExtractAndIngestWorker.doInBackground(), org.sleuthkit.autopsy.casemodule.LocalFilesDSProcessor.extractLogicalEvidenceFileContents(), org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.HEICProcessor.getModuleOutputFolder(), org.sleuthkit.autopsy.casemodule.Case.getModulesOutputDirAbsPath(), org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.getRAOutputPath(), org.sleuthkit.autopsy.modules.plaso.PlasoIngestModule.process(), org.sleuthkit.autopsy.modules.leappanalyzers.ALeappAnalyzerIngestModule.processALeappFile(), org.sleuthkit.autopsy.modules.leappanalyzers.ALeappAnalyzerIngestModule.processALeappFs(), org.sleuthkit.autopsy.modules.leappanalyzers.ILeappAnalyzerIngestModule.processILeappFile(), org.sleuthkit.autopsy.modules.leappanalyzers.ILeappAnalyzerIngestModule.processILeappFs(), org.sleuthkit.autopsy.logicalimager.dsp.LogicalImagerDSProcessor.run(), and org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp().
String org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath | ( | ) |
Gets the path of the module output directory for this case, relative to the case directory, creating it if it does not exist.
Definition at line 1410 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.
Referenced by org.sleuthkit.autopsy.modules.embeddedfileextractor.ExtractArchiveWithPasswordAction.ExtractAndIngestWorker.doInBackground(), and org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp().
String org.sleuthkit.autopsy.casemodule.Case.getModulesOutputDirAbsPath | ( | ) |
Get module output directory path where modules should save their permanent data.
Definition at line 3595 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory().
|
static |
Get relative (with respect to case dir) module output directory path where modules should save their permanent data. The directory is a subdirectory of this case dir.
String org.sleuthkit.autopsy.casemodule.Case.getName | ( | ) |
Gets the unique and immutable case name.
Definition at line 1235 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName().
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.events.CommentChangedEvent.CommentChangedEvent(), org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesFilesTableModel.createNodeKey(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances(), org.sleuthkit.autopsy.casemodule.Case.getTempDirectory(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.openCase(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.populateTable(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), and org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.updateOnCaseSelection().
|
staticprivate |
Definition at line 1055 of file Case.java.
References org.sleuthkit.autopsy.core.UserPreferences.getAppName(), org.sleuthkit.autopsy.coreutils.Version.getName(), and org.sleuthkit.autopsy.coreutils.Version.getVersion().
Referenced by org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseClosed(), and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
String org.sleuthkit.autopsy.casemodule.Case.getNumber | ( | ) |
Gets the case number.
Definition at line 1253 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseNumber().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeSummaryCaseDetails().
|
private |
Gets the path to the specified subdirectory of the case directory, creating it if it does not already exist.
Definition at line 2877 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory().
Referenced by org.sleuthkit.autopsy.casemodule.Case.getCacheDirectory(), org.sleuthkit.autopsy.casemodule.Case.getConfigDirectory(), org.sleuthkit.autopsy.casemodule.Case.getExportDirectory(), org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath(), org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory(), and org.sleuthkit.autopsy.casemodule.Case.getReportDirectory().
String org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory | ( | ) |
Gets the root case output directory for this case, creating it if it does not exist. If the case is a single-user case, this is the case directory. If the case is a multi-user case, this is a subdirectory of the case directory specific to the host machine.
Definition at line 1310 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.coreutils.NetworkUtils.getLocalHostName(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory(), and org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction().
|
static |
Gets a PropertyChangeSupport object. The PropertyChangeSupport object returned is not used by instances of this class and does not have any PropertyChangeListeners.
String org.sleuthkit.autopsy.casemodule.Case.getReportDirectory | ( | ) |
Gets the full path to the reports directory for this case, creating it if it does not exist.
Definition at line 1379 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.createReport(), org.sleuthkit.autopsy.communications.VisualizationPanel.createReport(), org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.createReportDirectory(), org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.createReportDirectory(), and org.sleuthkit.autopsy.communications.VisualizationPanel.handleSnapshotEvent().
Services org.sleuthkit.autopsy.casemodule.Case.getServices | ( | ) |
Gets the case services manager.
Definition at line 1208 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseServices.
Referenced by org.sleuthkit.autopsy.actions.AddBookmarkTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteBlackboardArtifactTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteContentTagAction.actionPerformed(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.addArtifactsToPortableCase(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.addFilesToPortableCase(), org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.addTag(), org.sleuthkit.autopsy.actions.AddContentTagAction.addTag(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty(), org.sleuthkit.autopsy.report.modules.html.HTMLReport.addThumbnailRows(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagNodeFactory.createKeys(), org.sleuthkit.autopsy.actions.DeleteFileBlackboardArtifactTagAction.deleteTag(), org.sleuthkit.autopsy.actions.DeleteFileContentTagAction.deleteTag(), org.sleuthkit.autopsy.actions.GetTagNameDialog.display(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.display(), org.sleuthkit.autopsy.datasourceprocessors.xry.XRYDataSourceProcessor.XRYReportProcessorSwingWorker.doInBackground(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateCaseUcoReport(), org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateReport(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAllTagsFromDatabase(), org.sleuthkit.autopsy.discovery.search.ResultFile.getContentTagsFromDatabase(), org.sleuthkit.autopsy.tags.TagUtils.getDecoratedTagDisplayName(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getNotableTagDisplayNames(), org.sleuthkit.autopsy.report.infrastructure.TableReportGenerator.ArtifactData.getOrderedRowDataAsStrings(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getTagDisplayNames(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.handleTagChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.handleTagChange(), org.sleuthkit.autopsy.actions.GetTagNameDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.modules.dataSourceIntegrity.DataSourceIntegrityIngestModule.process(), org.sleuthkit.autopsy.modules.plaso.PlasoIngestModule.process(), org.sleuthkit.autopsy.actions.ReplaceContentTagAction.replaceTag(), org.sleuthkit.autopsy.actions.ReplaceBlackboardArtifactTagAction.replaceTag(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.startUp(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagTypeNode.updateDisplayName(), and org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagTypeNode.updateDisplayName().
SleuthkitCase org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase | ( | ) |
Gets the case database.
Definition at line 1199 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseDb.
Referenced by org.sleuthkit.autopsy.directorytree.ViewContextAction.actionPerformed(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.addEmailArtifact(), org.sleuthkit.autopsy.communications.VisualizationPanel.addNotify(), org.sleuthkit.autopsy.datamodel.AttachmentNode.AttachmentNode(), org.sleuthkit.autopsy.communications.ContactCache.buildMap(), org.sleuthkit.autopsy.guiutils.ContactCache.buildMap(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.canDeleteDataSources(), org.sleuthkit.autopsy.keywordsearch.SolrSearchService.closeCaseResources(), org.sleuthkit.autopsy.timeline.TimeLineTopComponent.componentOpened(), org.sleuthkit.autopsy.datamodel.AbstractContentNode< Pool >.contentHasVisibleContentChildren(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.HEICProcessor.convertToJPEG(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.copyArtifact(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.copyAttachments(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.copyPathID(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdIngestModule.createInterestingFileHit(), org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.createKeys(), org.sleuthkit.autopsy.datamodel.AttachmentNode.createLookup(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.Indexer.createMetadataArtifact(), org.sleuthkit.autopsy.modules.plaso.PlasoIngestModule.createPlasoArtifacts(), org.sleuthkit.autopsy.datamodel.VirtualDirectoryNode.createSheet(), org.sleuthkit.autopsy.datamodel.ImageNode.createSheet(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.deleteTag(), org.sleuthkit.autopsy.datasourceprocessors.xry.XRYDataSourceProcessor.XRYReportProcessorSwingWorker.doInBackground(), org.sleuthkit.autopsy.geolocation.GeoFilterPanel.DataSourceUpdater.doInBackground(), org.sleuthkit.autopsy.contentviewers.artifactviewers.ContactArtifactViewer.ContactPersonaSearcherTask.doInBackground(), org.sleuthkit.autopsy.timeline.EventsModel.EventsModel(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteDB(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationDataSource.fromTSKDataSource(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateCaseUcoReport(), org.sleuthkit.autopsy.report.modules.caseuco.CaseUcoReportModule.generateReport(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateReport(), org.sleuthkit.autopsy.datamodel.utils.DataSourceLoader.getAllDataSources(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getAllInterestingItemsSets(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.getArtifactNode(), org.sleuthkit.autopsy.casemodule.services.Services.getArtifactsBlackboard(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.getAttributeNodes(), org.sleuthkit.autopsy.ingest.IngestServices.getCaseDatabase(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.getCorrAttrSourceArtifact(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentSleuthkitCaseDb(), org.sleuthkit.autopsy.casemodule.events.DataSourceNameChangedEvent.getDataSource(), org.sleuthkit.autopsy.ingest.events.DataSourceAnalysisEvent.getDataSource(), org.sleuthkit.autopsy.filesearch.DataSourcePanel.getDataSourceArray(), org.sleuthkit.autopsy.datasourcesummary.datamodel.CaseDataSourcesSummary.getDataSourceTypes(), org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.getFiles(), org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.getFileSetHits(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getImageTagDataForContentTag(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getNewArtifactTypeId(), org.sleuthkit.autopsy.timeline.events.TimelineEventAddedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.ReportAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue(), org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.getOldValue(), org.sleuthkit.autopsy.casemodule.services.Blackboard.getOrAddArtifactType(), org.sleuthkit.autopsy.casemodule.services.Blackboard.getOrAddAttributeType(), org.sleuthkit.autopsy.keywordsearch.ExtractedTextViewer.getRawArtifactText(), org.sleuthkit.autopsy.timeline.EventsModel.getSleuthkitCase(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getStandardTagNames(), org.sleuthkit.autopsy.discovery.ui.ArtifactsListPanel.DomainArtifactTableModel.getStringForColumn(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.getTag(), org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.getTags(), org.sleuthkit.autopsy.datasourcesummary.datamodel.CaseDataSourcesSummary.getValuesMap(), org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagDeleted(), org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagDeleted(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.handleTagChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.handleTagDeleted(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.handleTagDeleted(), org.sleuthkit.autopsy.casemodule.services.Blackboard.indexArtifact(), org.sleuthkit.autopsy.ingest.IngestJobSettingsPanel.IngestJobSettingsPanel(), org.sleuthkit.autopsy.timeline.actions.AddManualEvent.JEventCreationDialog.EventCreationDialogPane.initialize(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.LeappFileProcessor(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttr(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.makeKeys(), org.sleuthkit.autopsy.keywordsearch.SolrSearchService.openCaseResources(), org.sleuthkit.autopsy.healthmonitor.HealthMonitor.performDatabaseQuery(), org.sleuthkit.autopsy.timeline.EventsModel.populateDataSourcesCache(), org.sleuthkit.autopsy.contentviewers.contextviewer.ContextViewer.populatePanels(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.populateTable(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.EXIFProcessor.process(), org.sleuthkit.autopsy.geolocation.AbstractWaypointFetcher.process(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.process(), org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule.process(), org.sleuthkit.autopsy.modules.dataSourceIntegrity.DataSourceIntegrityIngestModule.process(), org.sleuthkit.autopsy.modules.yara.YaraIngestModule.process(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule.process(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.process(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.processLeappFiles(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.processReadLine(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.processWithIngestStream(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.run(), org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.run(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.runWithIngestStream(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.saveHighestIds(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.saveTag(), org.sleuthkit.autopsy.timeline.ui.ViewFrame.syncViewMode(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.tooManyFiles(), org.sleuthkit.autopsy.timeline.EventsModel.updateEventsForHashSetHits(), org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.updateTag(), org.sleuthkit.autopsy.communications.snapshot.CommSnapShotReportWriter.writeSnapShotHTMLFile(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeSummary().
String org.sleuthkit.autopsy.casemodule.Case.getTempDirectory | ( | ) |
Gets the full path to the temp directory for this case, creating it if it does not exist.
Definition at line 1330 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.CASE_TEMP_DIR, org.sleuthkit.autopsy.core.UserPreferences.getAppTempDirectory(), and org.sleuthkit.autopsy.casemodule.Case.getName().
Referenced by org.sleuthkit.autopsy.directorytree.ExternalViewerAction.actionPerformed(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.copyFileToTempDirectory(), org.sleuthkit.autopsy.casemodule.Case.deleteTempfilesFromCaseDirectory(), org.sleuthkit.autopsy.corecomponents.DataContentViewerHex.BackgroundFileCopyTask.doInBackground(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.HEICProcessor.extractToDisk(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteDB(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateCaseUcoReport(), org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.getRATempPath(), org.sleuthkit.autopsy.modules.yara.YaraIngestModule.getTempDirectory(), org.sleuthkit.autopsy.coreutils.VideoUtils.getVideoFileInTempDir(), org.sleuthkit.autopsy.modules.leappanalyzers.ILeappAnalyzerIngestModule.process(), and org.sleuthkit.autopsy.modules.leappanalyzers.ALeappAnalyzerIngestModule.process().
String org.sleuthkit.autopsy.casemodule.Case.getTextIndexName | ( | ) |
Gets the name of the legacy keyword search index for the case. Not for general use.
Definition at line 1460 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getTextIndexName().
Set<TimeZone> org.sleuthkit.autopsy.casemodule.Case.getTimeZone | ( | ) |
Gets the time zone(s) of the image data source(s) in this case.
Definition at line 3632 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getTimeZones().
Set<TimeZone> org.sleuthkit.autopsy.casemodule.Case.getTimeZones | ( | ) |
Gets the time zone(s) of the image data source(s) in this case.
Definition at line 1437 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getTimeZone().
boolean org.sleuthkit.autopsy.casemodule.Case.hasData | ( | ) |
Queries whether or not the case has data, i.e., whether or not at least one data source has been added to the case.
Definition at line 1470 of file Case.java.
Referenced by org.sleuthkit.autopsy.corecomponents.DataContentTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose(), org.sleuthkit.autopsy.ingest.RunIngestAction.isEnabled(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.rebuildTree(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.showTimeline(), and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
|
static |
Invokes the startup dialog window.
Definition at line 3495 of file Case.java.
References org.sleuthkit.autopsy.casemodule.StartupWindowProvider.getInstance(), and org.sleuthkit.autopsy.casemodule.StartupWindowProvider.open().
|
static |
Checks if a case, the current case, is open at the time it is called.
Definition at line 653 of file Case.java.
Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.addIngestJobEventsListener(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.canDeleteDataSources(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.cbUseCentralRepoActionPerformed(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeSearchAction.createAndShowPanel(), org.sleuthkit.autopsy.actions.ThreadDumpAction.ThreadDumper.createFilePath(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.currentCaseIsSingleUserCase(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.customizeComponents(), org.sleuthkit.autopsy.casemodule.DeleteDataSourceAction.DataSourceDeletionWorker.done(), org.sleuthkit.autopsy.casemodule.Case.existsCurrentCase(), org.sleuthkit.autopsy.allcasessearch.AllCasesSearchAction.isEnabled(), org.sleuthkit.autopsy.diagnostics.PerformancePanelAction.isEnabled(), org.sleuthkit.autopsy.discovery.ui.OpenDiscoveryAction.isEnabled(), org.sleuthkit.autopsy.actions.ShowIngestProgressSnapshotAction.isEnabled(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeSearchAction.isEnabled(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.isEnabled(), org.sleuthkit.autopsy.actions.OpenOutputFolderAction.isEnabled(), org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.load(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.onSettingsChange(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.IngestJobEventPropertyChangeListener.propertyChange(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), and org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.storeGroupItemsInTreeByDataSource().
|
staticprivate |
Examines a coordination service exception to try to determine if it is a "no node" exception, i.e., an operation was attempted on a node that does not exist.
ex | A coordination service exception. |
Definition at line 3215 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase().
|
static |
void org.sleuthkit.autopsy.casemodule.Case.notifyAddingDataSource | ( | UUID | eventId | ) |
Notifies case event subscribers that a data source is being added to the case.
This should not be called from the event dispatch thread (EDT)
eventId | A unique identifier for the event. This UUID must be used to call notifyFailedAddingDataSource or notifyNewDataSource after the data source is added. |
Definition at line 1497 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.runDataSourceProcessor().
void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagAdded | ( | BlackboardArtifactTag | newTag | ) |
Notifies case event subscribers that an artifact tag has been added.
This should not be called from the event dispatch thread (EDT)
newTag | new BlackboardArtifactTag added |
Definition at line 1615 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagAdded | ( | BlackboardArtifactTag | newTag, |
List< BlackboardArtifactTag > | removedTagList | ||
) |
Notifies case event subscribers that an artifact tag has been added.
This should not be called from the event dispatch thread (EDT)
newTag | The added ContentTag. |
removedTagList | List of ContentTags that were removed as a result of the addition of newTag. |
Definition at line 1628 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagDeleted | ( | BlackboardArtifactTag | deletedTag | ) |
Notifies case event subscribers that an artifact tag has been deleted.
This should not be called from the event dispatch thread (EDT)
deletedTag | BlackboardArtifactTag deleted |
Definition at line 1639 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyCentralRepoCommentChanged | ( | long | contentId, |
String | newComment | ||
) |
Notifies case event subscribers that a central repository comment has been changed.
This should not be called from the event dispatch thread (EDT)
contentId | the objectId for the Content which has had its central repo comment changed |
newComment | the new value of the comment |
Definition at line 1600 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.centralrepository.AddEditCentralRepoCommentAction.actionPerformed().
void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagAdded | ( | ContentTag | newTag | ) |
Notifies case event subscribers that a content tag has been added.
This should not be called from the event dispatch thread (EDT)
newTag | new ContentTag added |
Definition at line 1550 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagAdded | ( | ContentTag | newTag, |
List< ContentTag > | deletedTagList | ||
) |
Notifies case event subscribers that a content tag has been added.
This should not be called from the event dispatch thread (EDT)
newTag | The added ContentTag. |
deletedTagList | List of ContentTags that were removed as a result of the addition of newTag. |
Definition at line 1563 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagDeleted | ( | ContentTag | deletedTag | ) |
Notifies case event subscribers that a content tag has been deleted.
This should not be called from the event dispatch thread (EDT)
deletedTag | ContentTag deleted |
Definition at line 1574 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceAdded | ( | Content | dataSource, |
UUID | addingDataSourceEventId | ||
) |
Notifies case event subscribers that a data source has been added to the case database.
This should not be called from the event dispatch thread (EDT)
dataSource | The data source. |
addingDataSourceEventId | The unique identifier for the corresponding adding data source event (see notifyAddingDataSource). |
Definition at line 1526 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.Case.addImage(), and org.sleuthkit.autopsy.datasourceprocessors.AddDataSourceCallback.done().
void org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceNameChanged | ( | Content | dataSource, |
String | newName | ||
) |
Notifies case event subscribers that a data source has been added to the case database.
This should not be called from the event dispatch thread (EDT)
dataSource | The data source. |
newName | The new name for the data source |
Definition at line 1539 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
void org.sleuthkit.autopsy.casemodule.Case.notifyFailedAddingDataSource | ( | UUID | addingDataSourceEventId | ) |
Notifies case event subscribers that a data source failed to be added to the case.
This should not be called from the event dispatch thread (EDT)
addingDataSourceEventId | The unique identifier for the corresponding adding data source event (see notifyAddingDataSource). |
Definition at line 1511 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.datasourceprocessors.AddDataSourceCallback.done().
void org.sleuthkit.autopsy.casemodule.Case.notifyTagDefinitionChanged | ( | String | changedTagName | ) |
Notifies case event subscribers that a tag definition has changed.
This should not be called from the event dispatch thread (EDT)
changedTagName | the name of the tag definition which was changed |
Definition at line 1585 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish(), and org.sleuthkit.autopsy.casemodule.Case.Events.TAG_DEFINITION_CHANGED.
|
private |
A case action (interface CaseAction<T, V, R>) that opens the case database and application services for this case.
progressIndicator | A progress indicator. |
additionalParams | An Object that holds any additional parameters for a case action. For this action, this is null. |
CaseActionException | If there is a problem completing the action. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 1989 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.checkForCancellation(), org.sleuthkit.autopsy.casemodule.Case.close(), org.sleuthkit.autopsy.casemodule.Case.deleteTempfilesFromCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), org.sleuthkit.autopsy.casemodule.Case.openCaseDataBase(), org.sleuthkit.autopsy.casemodule.Case.openCaseLevelServices(), org.sleuthkit.autopsy.casemodule.Case.openCommunicationChannels(), org.sleuthkit.autopsy.casemodule.Case.openFileSystemsInBackground(), org.sleuthkit.autopsy.casemodule.Case.switchLoggingToCaseLogsDirectory(), and org.sleuthkit.autopsy.casemodule.Case.updateCaseNodeData().
Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), and org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction().
|
static |
Opens an existing Autopsy case and makes it the current case.
caseMetadataFilePath | The path of the case metadata (.aut) file. |
CaseActionException | if there is a problem opening the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 3471 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
private |
Allows any registered application-level services to open resources specific to this case.
progressIndicator | A progress indicator. |
isNewCase | True if case is new |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2515 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.checkForCancellation(), org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getDisplayName(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.casemodule.Case.logger, org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.setCaseActionFuture(), org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.setCaseContext(), org.sleuthkit.autopsy.coreutils.ThreadUtils.shutDownTaskExecutor(), and org.sleuthkit.autopsy.progress.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), and org.sleuthkit.autopsy.casemodule.Case.open().
|
static |
Opens an existing case and makes it the current case.
IMPORTANT: This method should not be called in the event dispatch thread (EDT).
caseMetadataFilePath | The path of the case metadata (.aut) file. |
CaseActionException | If there is a problem opening the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 635 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.Case(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.UserPreferences.getIsMultiUserModeEnabled(), org.sleuthkit.autopsy.casemodule.Case.metadata, and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.
Referenced by org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), org.sleuthkit.autopsy.casemodule.DeleteDataSourceAction.CaseReopeningWorker.doInBackground(), org.sleuthkit.autopsy.casemodule.UnpackagePortableCaseProgressDialog.UnpackageWorker.doInBackground(), and org.sleuthkit.autopsy.casemodule.Case.open().
|
staticprivate |
Opens a new or existing case as the current case.
newCurrentCase | The case. |
isNewCase | True for a new case, false otherwise. |
CaseActionException | If there is a problem creating the case. |
CaseActionCancelledException | If creating the case is cancelled. |
Definition at line 861 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseActionSerializationLock, org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, org.sleuthkit.autopsy.casemodule.Case.currentCase, org.sleuthkit.autopsy.casemodule.Case.doOpenCaseAction(), org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Message.error(), org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getDisplayName(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.publishLocally(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.casemodule.Case.CaseLockType.SHARED, and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
|
private |
Updates the node data for an existing case directory lock coordination service node and opens an existing case database.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2458 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDatabaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.core.UserPreferences.getIsMultiUserModeEnabled(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE.
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
private |
Opens the case-level services: the files manager, tags manager and blackboard.
progressIndicator | A progress indicator. |
Definition at line 2486 of file Case.java.
References org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), and org.sleuthkit.autopsy.casemodule.Case.open().
|
private |
If this case is a multi-user case, sets up for communication with other application nodes.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2625 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.checkForCancellation(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, org.sleuthkit.autopsy.events.AutopsyEventPublisher.openRemoteEventChannel(), and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), and org.sleuthkit.autopsy.casemodule.Case.open().
|
private |
Starts a background task that reads a sector from each file system of each image of a case to do an eager open of the filesystems in the case. If this method is called before another background file system read has finished the earlier one will be cancelled.
CaseActionCancelledException | Exception thrown if task is cancelled. |
Definition at line 2039 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.openFileSystemsExecutor.
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
static |
Check if file exists and is a normal file.
filePath | The file path. |
|
private |
Releases a case (case directory) lock for the current case.
Definition at line 2860 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseLock, and org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory().
Referenced by org.sleuthkit.autopsy.casemodule.Case.doCloseCaseAction(), and org.sleuthkit.autopsy.casemodule.Case.doOpenCaseAction().
|
static |
Removes a subscriber to specific case events.
eventName | The event the subscriber is no longer interested in. |
subscriber | The subscriber (PropertyChangeListener) to remove. |
Definition at line 516 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().
Referenced by org.sleuthkit.autopsy.casemodule.Case.removePropertyChangeListener().
|
static |
Removes a subscriber to specific case events.
eventNames | The event the subscriber is no longer interested in. |
subscriber | The subscriber (PropertyChangeListener) to remove. |
Definition at line 526 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().
|
static |
Removes a subscriber to specific case events.
eventTypes | The events the subscriber is no longer interested in. |
subscriber | The subscriber (PropertyChangeListener) to remove. |
Definition at line 536 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().
Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.DataSourceSummaryTabbedPane.close(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.onRemove(), org.sleuthkit.autopsy.datamodel.ImageNode.removeListeners(), org.sleuthkit.autopsy.datamodel.VolumeNode.removeListeners(), org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.removeListeners(), org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< SpecialDirectory >.removeListeners(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.FileSize.FileSizeRootChildren.FileSizeRootChildrenObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.DeletedContent.DeletedContentsChildren.DeletedContentsChildrenObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.removeNotify(), org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.removeNotify(), org.sleuthkit.autopsy.datamodel.ExtractedContent.TypeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ViewModeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.removeNotify(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.uninstallListeners(), org.sleuthkit.autopsy.datasourcesummary.uiutils.EventUpdateHandler.unregister(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener().
|
static |
Removes a subscriber to all case events. To remove a subscription to only specific events, use one of the overloads of removeEventSubscriber.
listener | The subscriber (PropertyChangeListener) to remove. |
Definition at line 466 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.removeEventSubscriber().
|
private |
Saves teh case metadata to a file.SHould not be called until the case directory has been created.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2316 of file Case.java.
References org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.create().
|
staticprivate |
Sets a deleted item flag in the coordination service node data for a multi-user case.
caseNodeData | The coordination service node data for the case. |
flag | The flag to set. |
InterruptedException | If interrupted while blocked waiting for coordination service data to be written to the coordination service node database. |
Definition at line 3236 of file Case.java.
References org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDisplayName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.setDeletedFlag(), and org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.writeCaseNodeData().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDatabase(), org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDirectory(), and org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseTextIndex().
|
private |
Switches from writing log messages to the application logs to the logs subdirectory of the case directory.
progressIndicator | A progress indicator. |
Definition at line 2296 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), and org.sleuthkit.autopsy.coreutils.Logger.setLogDirectory().
Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), and org.sleuthkit.autopsy.casemodule.Case.open().
|
private |
Updates the node data for the case directory lock coordination service node.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2366 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.readCaseNodeData(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.setLastAccessDate(), and org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.writeCaseNodeData().
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
staticprivate |
Definition at line 1156 of file Case.java.
References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.clear(), org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.closeCoreWindows(), org.sleuthkit.autopsy.casemodule.Case.getNameForTitle(), and org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI.
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase().
|
staticprivate |
Update the GUI to to reflect the current case.
Definition at line 1068 of file Case.java.
References org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.canAddDataSources(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.canDeleteCurrentCase(), org.sleuthkit.autopsy.coreutils.DriveUtils.driveExists(), org.sleuthkit.autopsy.casemodule.Case.getDisplayName(), org.sleuthkit.autopsy.casemodule.Case.getNameForTitle(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org.sleuthkit.autopsy.casemodule.Case.hasData(), org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.openCoreWindows(), and org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI.
Referenced by org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
staticprivate |
Definition at line 144 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getTempDirectory().
|
private |
|
staticprivate |
|
private |
Definition at line 169 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().
|
private |
Definition at line 168 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.acquireCaseLock(), and org.sleuthkit.autopsy.casemodule.Case.releaseCaseLock().
|
private |
Definition at line 172 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getServices().
|
private |
|
staticprivate |
|
staticprivate |
Definition at line 165 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
staticprivate |
Definition at line 158 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(), and org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources().
|
staticprivate |
|
private |
Definition at line 166 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
staticprivate |
|
staticprivate |
|
staticprivate |
Definition at line 163 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.openFileSystemsInBackground().
|
staticprivate |
|
staticprivate |
Definition at line 147 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.createCaseDatabase(), and org.sleuthkit.autopsy.casemodule.Case.createPortableCase().
|
private |
Copyright © 2012-2021 Basis Technology. Generated on: Tue Jan 19 2021
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.