Autopsy
4.4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
Public Member Functions | |
void | addArtifact (CorrelationAttribute eamArtifact) throws EamDbException |
void | addReferenceInstance (EamGlobalFileInstance eamGlobalFileInstance, CorrelationAttribute.Type correlationType) throws EamDbException |
void | bulkInsertArtifacts () throws EamDbException |
void | bulkInsertCases (List< CorrelationCase > cases) throws EamDbException |
void | bulkInsertReferenceTypeEntries (Set< EamGlobalFileInstance > globalInstances, CorrelationAttribute.Type contentType) throws EamDbException |
List< CorrelationAttributeInstance > | getArtifactInstancesByPath (CorrelationAttribute.Type aType, String filePath) throws EamDbException |
List< CorrelationAttributeInstance > | getArtifactInstancesByTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException |
List< CorrelationAttributeInstance > | getArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException |
List< String > | getBadTags () |
CorrelationCase | getCaseByUUID (String caseUUID) throws EamDbException |
List< CorrelationCase > | getCases () throws EamDbException |
CorrelationAttribute.Type | getCorrelationTypeById (int typeId) throws EamDbException |
Long | getCountArtifactInstancesByCaseDataSource (String caseUUID, String dataSourceID) throws EamDbException |
Long | getCountArtifactInstancesByTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException |
Long | getCountArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException |
Long | getCountUniqueCaseDataSourceTuplesHavingTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException |
Long | getCountUniqueDataSources () throws EamDbException |
CorrelationDataSource | getDataSourceDetails (String dataSourceDeviceId) throws EamDbException |
List< CorrelationDataSource > | getDataSources () throws EamDbException |
String | getDbInfo (String name) throws EamDbException |
List< CorrelationAttribute.Type > | getDefinedCorrelationTypes () throws EamDbException |
List< CorrelationAttribute.Type > | getEnabledCorrelationTypes () throws EamDbException |
int | getFrequencyPercentage (CorrelationAttribute corAttr) throws EamDbException |
List< String > | getListCasesHavingArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException |
EamOrganization | getOrganizationByID (int orgID) throws EamDbException |
List< EamOrganization > | getOrganizations () throws EamDbException |
List< EamGlobalFileInstance > | getReferenceInstancesByTypeValue (CorrelationAttribute.Type aType, String aValue) throws EamDbException |
EamGlobalSet | getReferenceSetByID (int referenceSetID) throws EamDbException |
List< CorrelationAttribute.Type > | getSupportedCorrelationTypes () throws EamDbException |
boolean | isArtifactlKnownBadByReference (CorrelationAttribute.Type aType, String value) throws EamDbException |
void | newCase (CorrelationCase eamCase) throws EamDbException |
CorrelationCase | newCase (Case autopsyCase) throws EamDbException |
int | newCorrelationType (CorrelationAttribute.Type newType) throws EamDbException |
void | newDataSource (CorrelationDataSource eamDataSource) throws EamDbException |
void | newDbInfo (String name, String value) throws EamDbException |
void | newOrganization (EamOrganization eamOrg) throws EamDbException |
int | newReferencelSet (EamGlobalSet eamGlobalSet) throws EamDbException |
void | prepareBulkArtifact (CorrelationAttribute eamArtifact) throws EamDbException |
void | reset () throws EamDbException |
void | saveSettings () |
void | setArtifactInstanceKnownStatus (CorrelationAttribute eamArtifact, TskData.FileKnown knownStatus) throws EamDbException |
void | setBadTags (List< String > badTags) |
void | shutdownConnections () throws EamDbException |
void | updateCase (CorrelationCase eamCase) throws EamDbException |
void | updateCorrelationType (CorrelationAttribute.Type aType) throws EamDbException |
void | updateDbInfo (String name, String value) throws EamDbException |
void | updateSettings () |
Static Public Member Functions | |
static synchronized PostgresEamDb | getInstance () throws EamDbException |
static boolean | isEnabled () |
Static Public Attributes | |
static final int | SCHEMA_VERSION = 1 |
Protected Member Functions | |
Connection | connect () throws EamDbException |
String | getConflictClause () |
Protected Attributes | |
int | bulkArtifactsThreshold |
final List< CorrelationAttribute.Type > | DEFAULT_CORRELATION_TYPES |
Private Member Functions | |
PostgresEamDb () throws EamDbException | |
void | setupConnectionPool () throws EamDbException |
Private Attributes | |
BasicDataSource | connectionPool = null |
final PostgresEamDbSettings | dbSettings |
Static Private Attributes | |
static final String | CONFLICT_CLAUSE = "ON CONFLICT DO NOTHING" |
static final int | CONN_POOL_SIZE = 10 |
static PostgresEamDb | instance |
static final Logger | LOGGER = Logger.getLogger(PostgresEamDb.class.getName()) |
Central Repository database implementation using Postgres as a backend
Definition at line 33 of file PostgresEamDb.java.
|
private |
EamDbException | if the AbstractSqlEamDb class has one or more default correlation type(s) having an invalid db table name. |
Definition at line 66 of file PostgresEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifactsThreshold, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getBulkThreshold().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getInstance().
|
inherited |
Inserts new Artifact(s) into the database. Should add associated Case and Data Source first.
eamArtifact | The artifact to add |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 553 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().
|
inherited |
Add a new reference instance
eamGlobalFileInstance | The reference instance to add |
correlationType | Correlation Type that this Reference Instance is |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1501 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getComment(), org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getGlobalSetID(), org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getKnownStatus(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getMD5Hash().
|
inherited |
Executes a bulk insert of the eamArtifacts added from the prepareBulkArtifact() method
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 902 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifacts, org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getConflictClause(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.prepareBulkArtifact().
|
inherited |
Executes a bulk insert of the cases
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 967 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getConflictClause().
|
inherited |
Insert the bulk collection of Reference Type Instances
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1529 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getConflictClause().
|
protected |
Lazily setup Singleton connection on first request.
EamDbException |
Definition at line 167 of file PostgresEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.isEnabled(), and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.setupConnectionPool().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.reset().
|
inherited |
Retrieves eamArtifact instances from the database that are associated with the aType and filePath
aType | EamArtifact.Type to search for |
filePath | File path to search for |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 656 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamArtifactInstanceFromResultSet().
|
inherited |
Retrieves eamArtifact instances from the database that are associated with the eamArtifactType and eamArtifactValue of the given eamArtifact.
eamArtifact | The type/value to look up (artifact with 0 instances) |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 604 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamArtifactInstanceFromResultSet().
|
inherited |
Gets list of matching eamArtifact instances that have knownStatus = "Bad".
aType | EamArtifact.Type to search for |
value | Value to search for |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1140 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamArtifactInstanceFromResultSet().
List<String> org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getBadTags | ( | ) |
Get the list of tags recognized as "Bad"
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 191 of file PostgresEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getBadTags().
|
inherited |
Retrieves Case details based on Case UUID
caseUUID | unique identifier for a case |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 352 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamCaseFromResultSet().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().
|
inherited |
Retrieves cases that are in DB.
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 391 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamCaseFromResultSet().
|
protected |
Definition at line 186 of file PostgresEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.CONFLICT_CLAUSE.
|
inherited |
Get the EamArtifact.Type that has the given Type.Id.
typeId | Type.Id of Correlation Type to get |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1806 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().
|
inherited |
Retrieves number of eamArtifact instances in the database that are associated with the caseDisplayName and dataSource of the given eamArtifact instance.
caseUUID | Case ID to search for |
dataSourceID | Data source ID to search for |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 828 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes().
|
inherited |
Retrieves number of artifact instances in the database that are associated with the ArtifactType and artifactValue of the given artifact.
eamArtifact | Artifact with artifactType and artifactValue to search for |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 707 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().
|
inherited |
Count matching eamArtifacts instances that have knownStatus = "Bad".
aType | EamArtifact.Type to search for |
value | Value to search for |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1190 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().
|
inherited |
Retrieves number of unique caseDisplayName / dataSource tuples in the database that are associated with the artifactType and artifactValue of the given artifact.
eamArtifact | Artifact with artifactType and artifactValue to search for |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 757 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getFrequencyPercentage().
|
inherited |
Retrieves number of data sources in the database.
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 791 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getFrequencyPercentage().
|
inherited |
Updates a Data Source in the database
eamDataSource | the data source to update Retrieves Data Source details based on data source device ID |
dataSourceDeviceId | the data source device ID number |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 485 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamDataSourceFromResultSet().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().
|
inherited |
Return a list of data sources in the DB
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 518 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamDataSourceFromResultSet().
|
inherited |
Get the value for the given name from the name/value db_info table.
name | Name to search for |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 141 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().
|
inherited |
Get the list of EamArtifact.Type's that are defined in the DB and can be used to correlate artifacts.
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1669 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByCaseDataSource().
|
inherited |
Get the list of enabled EamArtifact.Type's that will be used to correlate artifacts.
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1704 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().
|
inherited |
Calculate the percentage of data sources that have this attribute value.
corAttr | Attribute type and value to get data about |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 739 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueDataSources().
|
static |
Get the singleton instance of PostgresEamDb
EamDbException | if one or more default correlation type(s) have an invalid db table name. |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 53 of file PostgresEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.instance, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.PostgresEamDb().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getInstance().
|
inherited |
Gets list of distinct case display names, where each case has 1+ Artifact Instance matching eamArtifact with knownStatus = "Bad".
aType | EamArtifact.Type to search for |
value | Value to search for |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1234 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().
|
inherited |
Get an organization having the given ID
orgID | The id to look up |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1387 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamOrganizationFromResultSet().
|
inherited |
Get all organizations
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1352 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamOrganizationFromResultSet().
|
inherited |
Get all reference entries having a given correlation type and value
aType | Type to use for matching |
aValue | Value to use for matching |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1576 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalFileInstanceFromResultSet().
|
inherited |
Get a reference set by ID
referenceSetID | The ID to look up |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1468 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalSetFromResultSet().
|
inherited |
Get the list of supported EamArtifact.Type's that can be used to correlate artifacts.
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1739 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().
|
inherited |
Is the artifact known as bad according to the reference entries?
aType | EamArtifact.Type to search for |
value | Value to search for |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1282 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.FILES_TYPE_ID.
|
staticinherited |
Is the database enabled?
Definition at line 93 of file EamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.DISABLED, org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.getSelectedPlatform(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.useCentralRepo().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.connect(), org.sleuthkit.autopsy.centralrepository.optionspanel.ImportHashDatabaseDialog.ImportHashDatabaseWorker.ImportHashDatabaseWorker(), org.sleuthkit.autopsy.centralrepository.actions.EamEditCaseInfoAction.isEnabled(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.isSupported(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.propertyChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.IngestModuleEventListener.propertyChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.KnownStatusChangeRunner.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.NewArtifactsRunner.run(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.setNode(), and org.sleuthkit.autopsy.centralrepository.actions.EamCaseEditDetailsDialog.updateDb().
|
inherited |
Creates new Case in the database
Expects the Organization for this case to already exist in the database.
eamCase | The case to add |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 201 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().
|
inherited |
Creates new Case in the database from the given case
case | The case to add |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 262 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamOrganization.getDefault(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase().
|
inherited |
Add a new EamArtifact.Type to the db.
newType | New type to add. |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1612 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().
|
inherited |
Creates new Data Source in the database
eamDataSource | the data source to add |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 428 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().
|
inherited |
Add a new name/value pair in the db_info table.
name | Key to set |
value | Value to set |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 112 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().
|
inherited |
Add a new organization
eamOrg | The organization to add |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1322 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().
|
inherited |
Add a new Global Set
eamGlobalSet | The global set to add |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1420 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().
|
inherited |
Adds an eamArtifact to an internal list to be later added to DB. Artifact can have 1 or more Artifact Instances. Insert will be triggered by a threshold or a call to bulkInsertArtifacts().
eamArtifact | The artifact to add |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 878 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifacts, and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts().
void org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.reset | ( | ) | throws EamDbException |
Reset the database (testing method)
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 101 of file PostgresEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.DEFAULT_CORRELATION_TYPES, org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.FILES_TYPE_ID, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.insertDefaultDatabaseContent().
void org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.saveSettings | ( | ) |
Save settings
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 94 of file PostgresEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.saveSettings().
|
inherited |
Sets an eamArtifact instance to the given knownStatus. If eamArtifact exists, it is updated. If eamArtifact does not exist it is added with the given status.
eamArtifact | Artifact containing exactly one (1) ArtifactInstance. |
FileKnown | The status to change the artifact to |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1048 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCaseByUUID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationCase.getCaseUUID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationCase(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getCorrelationValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSourceDetails(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationDataSource.getDeviceID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFilePath(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getInstances(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDataSource().
void org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.setBadTags | ( | List< String > | tags | ) |
Set the tags recognized as "Bad"
tags | The tags to consider bad |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 196 of file PostgresEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.setBadTags().
|
private |
Setup a connection pool for db connections.
Definition at line 135 of file PostgresEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getDbName(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getDriver(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getHost(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getJDBCBaseURI(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getPassword(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getPort(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getUserName(), and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getValidationQuery().
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.connect().
void org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.shutdownConnections | ( | ) | throws EamDbException |
Shutdown the connection pool.
This closes the connection pool including all idle database connections. It will not close active/in-use connections. Thus, it is vital that there are no in-use connections when you call this method.
EamDbException | if there is a problem closing the connection pool. |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 72 of file PostgresEamDb.java.
|
inherited |
Updates an existing Case in the database
eamCase | The case to update |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 288 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().
|
inherited |
Update a EamArtifact.Type.
aType | EamArtifact.Type to update. |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 1772 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().
|
inherited |
Update the value for a name in the name/value db_info table.
name | Name to find |
value | Value to assign to name. |
EamDbException |
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 175 of file AbstractSqlEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().
void org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.updateSettings | ( | ) |
Update settings
When using updateSettings, if any database settings have changed, you should call shutdownConnections() before using any API methods. That will ensure that any old connections are closed and all new connections will be made using the new settings.
Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.
Definition at line 86 of file PostgresEamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifactsThreshold, org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getBulkThreshold(), and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.loadSettings().
|
protectedinherited |
Definition at line 53 of file AbstractSqlEamDb.java.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.PostgresEamDb(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.SqliteEamDb(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.updateSettings(), and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.updateSettings().
|
staticprivate |
Definition at line 37 of file PostgresEamDb.java.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getConflictClause().
|
staticprivate |
Definition at line 41 of file PostgresEamDb.java.
|
private |
Definition at line 42 of file PostgresEamDb.java.
|
private |
Definition at line 44 of file PostgresEamDb.java.
|
protectedinherited |
Definition at line 50 of file AbstractSqlEamDb.java.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.AbstractSqlEamDb(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.reset(), and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.reset().
|
staticprivate |
Definition at line 39 of file PostgresEamDb.java.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getInstance().
|
staticprivate |
Definition at line 35 of file PostgresEamDb.java.
|
staticinherited |
Definition at line 31 of file EamDb.java.
Copyright © 2012-2016 Basis Technology. Generated on: Fri Sep 29 2017
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.