AddManualEvent.java

Go to the documentation of this file.

/*
 * Autopsy Forensic Browser
 *
 * Copyright 2019 Basis Technology Corp.
 * Contact: carrier <at> sleuthkit <dot> org
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.sleuthkit.autopsy.timeline.actions;
 
import java.awt.Dialog;
import java.time.Instant;
import java.time.LocalDateTime;
import java.time.ZoneId;
import java.util.Arrays;
import java.util.List;
import java.util.Objects;
import java.util.logging.Level;
import javafx.application.Platform;
import javafx.embed.swing.JFXPanel;
import javafx.fxml.FXML;
import javafx.scene.Scene;
import javafx.scene.control.Alert;
import javafx.scene.control.ButtonBase;
import javafx.scene.control.ButtonType;
import javafx.scene.control.ChoiceBox;
import javafx.scene.control.ComboBox;
import javafx.scene.control.DialogPane;
import javafx.scene.control.TextField;
import javafx.scene.image.Image;
import javafx.scene.image.ImageView;
import javafx.util.StringConverter;
import javax.swing.JDialog;
import javax.swing.SwingUtilities;
import jfxtras.scene.control.LocalDateTimeTextField;
import org.apache.commons.lang3.StringUtils;
import org.controlsfx.control.action.Action;
import org.controlsfx.control.textfield.TextFields;
import org.controlsfx.tools.ValueExtractor;
import org.controlsfx.validation.ValidationSupport;
import org.controlsfx.validation.Validator;
import org.openide.util.NbBundle;
import org.sleuthkit.autopsy.coreutils.Logger;
import org.sleuthkit.autopsy.coreutils.MessageNotifyUtil;
import org.sleuthkit.autopsy.coreutils.TimeZoneUtils;
import org.sleuthkit.autopsy.timeline.FXMLConstructor;
import org.sleuthkit.autopsy.timeline.TimeLineController;
import org.sleuthkit.datamodel.Blackboard;
import org.sleuthkit.datamodel.BlackboardArtifact;
import static org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_TL_EVENT;
import org.sleuthkit.datamodel.BlackboardAttribute;
import static org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME;
import static org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DESCRIPTION;
import static org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE.TSK_TL_EVENT_TYPE;
import org.sleuthkit.datamodel.DataSource;
import org.sleuthkit.datamodel.SleuthkitCase;
import org.sleuthkit.datamodel.TskCoreException;
import org.sleuthkit.datamodel.TimelineEventType;

@NbBundle.Messages({
    "AddManualEvent.text=Add Event",
    "AddManualEvent.longText=Manually add an event to the timeline."})
public class AddManualEvent extends Action {
 
    private final static Logger logger = Logger.getLogger(AddManualEvent.class.getName());
    private static final String MANUAL_CREATION = "Manual Creation"; //NON-NLS
    private static final Image ADD_EVENT_IMAGE = new Image("/org/sleuthkit/autopsy/timeline/images/add.png", 16, 16, true, true, true); // NON-NLS

    static {
        ValueExtractor.addObservableValueExtractor(LocalDateTimeTextField.class::isInstance,
                control -> ((LocalDateTimeTextField) control).localDateTimeProperty());
    }

    public AddManualEvent(TimeLineController controller) {
        this(controller, null);
    }

    public AddManualEvent(TimeLineController controller, Long epochMillis) {
        super(Bundle.AddManualEvent_text());
        setGraphic(new ImageView(ADD_EVENT_IMAGE));
        setLongText(Bundle.AddManualEvent_longText());
 
        setEventHandler(actionEvent -> SwingUtilities.invokeLater(() -> {
            JEventCreationDialog dialog = new JEventCreationDialog(controller, epochMillis, SwingUtilities.windowForComponent(controller.getTopComponent()));
            dialog.setVisible(true);
            //actual event creation happens in the ok button listener.
        }));
    }

    @NbBundle.Messages({
        "AddManualEvent.createArtifactFailed=Failed to create artifact for event.",
        "AddManualEvent.postArtifactFailed=Failed to post artifact to blackboard."})
    private void addEvent(TimeLineController controller, ManualEventInfo eventInfo) throws IllegalArgumentException {
        SleuthkitCase sleuthkitCase = controller.getEventsModel().getSleuthkitCase();
 
        try {
            //Use the current examiners name plus a fixed string as the source / module name.
            String source = MANUAL_CREATION + ": " + sleuthkitCase.getCurrentExaminer().getLoginName();
            List<BlackboardAttribute> attributes = Arrays.asList(
                    new BlackboardAttribute(
                            TSK_TL_EVENT_TYPE, source,
                            TimelineEventType.USER_CREATED.getTypeID()),
                    new BlackboardAttribute(
                            TSK_DESCRIPTION, source,
                            eventInfo.description),
                    new BlackboardAttribute(
                            TSK_DATETIME, source,
                            eventInfo.time)
            );
            
            BlackboardArtifact artifact = eventInfo.datasource.newDataArtifact(new BlackboardArtifact.Type(TSK_TL_EVENT), attributes, null);
            
            try {
                sleuthkitCase.getBlackboard().postArtifact(artifact, source, null);
            } catch (Blackboard.BlackboardException ex) {
                logger.log(Level.SEVERE, "Error posting artifact to the blackboard.", ex); //NON-NLS
                new Alert(Alert.AlertType.ERROR, Bundle.AddManualEvent_postArtifactFailed(), ButtonType.OK).showAndWait();
            }
        } catch (TskCoreException ex) {
            logger.log(Level.SEVERE, "Error creatig new artifact.", ex); //NON-NLS
            new Alert(Alert.AlertType.ERROR, Bundle.AddManualEvent_createArtifactFailed(), ButtonType.OK).showAndWait();
        }
    }

    private final class JEventCreationDialog extends JDialog {
 
        private final JFXPanel jfxPanel = new JFXPanel();
 
        private JEventCreationDialog(TimeLineController controller, Long epochMillis, java.awt.Window owner) {
            super(owner, Bundle.AddManualEvent_text(), Dialog.ModalityType.DOCUMENT_MODAL);
            setIconImages(owner.getIconImages());
            setResizable(false);
            add(jfxPanel);
 
            // make and configure the JavaFX components. 
            Platform.runLater(() -> {
                // Custom DialogPane defined below. 
                EventCreationDialogPane customPane = new EventCreationDialogPane(controller, epochMillis);
                //cancel button just closes the dialog
                ((ButtonBase) customPane.lookupButton(ButtonType.CANCEL)).setOnAction(event -> dispose());
                //configure ok button to pull ManualEventInfo object and add it to case.
                ((ButtonBase) customPane.lookupButton(ButtonType.OK)).setOnAction(event -> {
                    ManualEventInfo manualEventInfo = customPane.getManualEventInfo();
                    if (manualEventInfo != null) {
                        addEvent(controller, manualEventInfo);
                    }
                    dispose(); //close and dispose the dialog.
                });
 
                jfxPanel.setScene(new Scene(customPane));
                customPane.installValidation();
                SwingUtilities.invokeLater(() -> {
                    //size and position dialog on EDT
                    pack();
                    setLocationRelativeTo(owner);
                });
            });
        }

        private class EventCreationDialogPane extends DialogPane {
 
            @FXML
            private ChoiceBox<DataSource> dataSourceChooser;
            @FXML
            private TextField descriptionTextField;
            @FXML
            private ComboBox<String> timeZoneChooser;
            @FXML
            private LocalDateTimeTextField timePicker;
 
            private final List<String> timeZoneList = TimeZoneUtils.createTimeZoneList();
            private final ValidationSupport validationSupport = new ValidationSupport();
            private final TimeLineController controller;
 
            @SuppressWarnings("this-escape")
            private EventCreationDialogPane(TimeLineController controller, Long epochMillis) {
                this.controller = controller;
                FXMLConstructor.construct(this, "EventCreationDialog.fxml"); //NON-NLS
                if (epochMillis == null) {
                    timePicker.setLocalDateTime(LocalDateTime.now());
                } else {
                    timePicker.setLocalDateTime(LocalDateTime.ofInstant(Instant.ofEpochMilli(epochMillis), TimeLineController.getTimeZoneID()));
                }
            }
 
            @FXML
            @NbBundle.Messages({"# {0} - datasource name", "# {1} - datasource id",
                "AddManualEvent.EventCreationDialogPane.dataSourceStringConverter.template={0} (ID: {1})",
                "AddManualEvent.EventCreationDialogPane.initialize.dataSourcesError=Error getting datasources in case."})
            private void initialize() {
                assert descriptionTextField != null : "fx:id=\"descriptionTextField\" was not injected: check your FXML file 'EventCreationDialog.fxml'.";//NON-NLS
 
                timeZoneChooser.getItems().setAll(timeZoneList);
                timeZoneChooser.getSelectionModel().select(TimeZoneUtils.createTimeZoneString(TimeLineController.getTimeZone()));
                TextFields.bindAutoCompletion(timeZoneChooser.getEditor(), timeZoneList);
 
                dataSourceChooser.setConverter(new StringConverter<DataSource>() {
                    @Override
                    public String toString(DataSource dataSource) {
                        return Bundle.AddManualEvent_EventCreationDialogPane_dataSourceStringConverter_template(dataSource.getName(), dataSource.getId());
                    }
 
                    @Override
                    public DataSource fromString(String string) {
                        throw new UnsupportedOperationException(); // This method should never get called.
                    }
                });
                try {
                    dataSourceChooser.getItems().setAll(controller.getAutopsyCase().getSleuthkitCase().getDataSources());
                    dataSourceChooser.getSelectionModel().select(0);
                } catch (TskCoreException ex) {
                    logger.log(Level.SEVERE, "Error getting datasources in case.", ex);//NON-NLS
                    SwingUtilities.invokeLater(() -> MessageNotifyUtil.Message.error(Bundle.AddManualEvent_EventCreationDialogPane_initialize_dataSourcesError()));
                }
            }

            @NbBundle.Messages({
                "AddManualEvent.validation.description=Description is required.",
                "AddManualEvent.validation.datetime=Invalid datetime",
                "AddManualEvent.validation.timezone=Invalid time zone",})
            private void installValidation() {
                validationSupport.registerValidator(descriptionTextField, false,
                        Validator.createEmptyValidator(Bundle.AddManualEvent_validation_description()));
                validationSupport.registerValidator(timePicker, false,
                        Validator.createPredicateValidator(Objects::nonNull, Bundle.AddManualEvent_validation_description()));
                validationSupport.registerValidator(timeZoneChooser, false,
                        Validator.createPredicateValidator((String zone) -> timeZoneList.contains(zone.trim()), Bundle.AddManualEvent_validation_timezone()));
 
                validationSupport.initInitialDecoration();
 
                //The ok button is only enabled if all fields are validated.
                lookupButton(ButtonType.OK).disableProperty().bind(validationSupport.invalidProperty());
            }

            private ManualEventInfo getManualEventInfo() {
                //Trim off the offset part of the string from the chooser, to get something that ZoneId can parse.
                String zone = StringUtils.substringAfter(timeZoneChooser.getValue(), ")").trim(); //NON-NLS
                long toEpochSecond = timePicker.getLocalDateTime().atZone(ZoneId.of(zone)).toEpochSecond();
                return new ManualEventInfo(dataSourceChooser.getValue(), descriptionTextField.getText(), toEpochSecond);
            }
        }
    }

    private static class ManualEventInfo {
 
        private final DataSource datasource;
        private final String description;
        private final long time;
 
        private ManualEventInfo(DataSource datasource, String description, long time) {
            this.datasource = datasource;
            this.description = description;
            this.time = time;
        }
    }
}