Autopsy 4.22.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
AllIntraCaseCommonAttributeSearcher.java
Go to the documentation of this file.
1/*
2 *
3 * Autopsy Forensic Browser
4 *
5 * Copyright 2018 Basis Technology Corp.
6 * Contact: carrier <at> sleuthkit <dot> org
7 *
8 * Licensed under the Apache License, Version 2.0 (the "License");
9 * you may not use this file except in compliance with the License.
10 * You may obtain a copy of the License at
11 *
12 * http://www.apache.org/licenses/LICENSE-2.0
13 *
14 * Unless required by applicable law or agreed to in writing, software
15 * distributed under the License is distributed on an "AS IS" BASIS,
16 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17 * See the License for the specific language governing permissions and
18 * limitations under the License.
19 */
20package org.sleuthkit.autopsy.commonpropertiessearch;
21
22import java.util.Map;
23import org.openide.util.NbBundle;
24import org.sleuthkit.datamodel.TskData.FileKnown;
25
29final public class AllIntraCaseCommonAttributeSearcher extends IntraCaseCommonAttributeSearcher {
30
31 private static final String WHERE_CLAUSE = "%s md5 in (select md5 from tsk_files where (known != " + FileKnown.KNOWN.getFileKnownValue() + " OR known IS NULL)%s GROUP BY md5 HAVING COUNT(DISTINCT data_source_obj_id) > 1) order by md5"; //NON-NLS
32
44 public AllIntraCaseCommonAttributeSearcher(Map<Long, String> dataSourceIdMap, boolean filterByMediaMimeType, boolean filterByDocMimeType, int percentageThreshold) {
45 super(dataSourceIdMap, filterByMediaMimeType, filterByDocMimeType, percentageThreshold);
46
47 }
48
49 @Override
50 protected String buildSqlSelectStatement() {
51 Object[] args = new String[]{SELECT_PREFIX, determineMimeTypeFilter()};
52 return String.format(WHERE_CLAUSE, args);
53 }
54
55 @NbBundle.Messages({
56 "# {0} - build category",
57 "# {1} - threshold string",
58 "AllIntraCaseCommonAttributeSearcher.buildTabTitle.titleIntraAll=Common Properties (All Data Sources, {0}{1})"
59 })
60 @Override
61 String getTabTitle() {
62 return Bundle.AllIntraCaseCommonAttributeSearcher_buildTabTitle_titleIntraAll(this.buildCategorySelectionString(), this.getPercentThresholdString());
63 }
64}
AllIntraCaseCommonAttributeSearcher(Map< Long, String > dataSourceIdMap, boolean filterByMediaMimeType, boolean filterByDocMimeType, int percentageThreshold)

Copyright © 2012-2024 Sleuth Kit Labs. Generated on:
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.