Autopsy
4.4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
enum | Event |
enum | KnownFilesType |
Public Member Functions | |
void | addHashes (Content content) throws TskCoreException |
void | addHashes (Content content, String comment) throws TskCoreException |
void | addHashes (List< HashEntry > hashes) throws TskCoreException |
void | addPropertyChangeListener (PropertyChangeListener pcl) |
boolean | equals (Object obj) |
String | getDatabasePath () throws TskCoreException |
String | getHashSetName () |
String | getIndexPath () throws TskCoreException |
KnownFilesType | getKnownFilesType () |
boolean | getSearchDuringIngest () |
boolean | getSendIngestMessages () |
int | hashCode () |
boolean | hasIndexOnly () throws TskCoreException |
boolean | isUpdateable () throws TskCoreException |
HashHitInfo | lookupMD5 (Content content) throws TskCoreException |
boolean | lookupMD5Quick (Content content) throws TskCoreException |
void | removePropertyChangeListener (PropertyChangeListener pcl) |
Private Member Functions | |
HashDb (int handle, String hashSetName, boolean useForIngest, boolean sendHitMessages, KnownFilesType knownFilesType) | |
void | close () throws TskCoreException |
Private Attributes | |
final int | handle |
final String | hashSetName |
boolean | indexing |
final KnownFilesType | knownFilesType |
final PropertyChangeSupport | propertyChangeSupport = new PropertyChangeSupport(this) |
boolean | searchDuringIngest |
boolean | sendIngestMessages |
Static Private Attributes | |
static final long | serialVersionUID = 1L |
Instances of this class represent hash databases used to classify files as known or know bad.
Definition at line 557 of file HashDbManager.java.
|
private |
Definition at line 594 of file HashDbManager.java.
References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.handle, org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.hashSetName, and org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.knownFilesType.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.equals().
void org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.addHashes | ( | Content | content | ) | throws TskCoreException |
Adds hashes of content (if calculated) to the hash database.
content | The content for which the calculated hashes, if any, are to be added to the hash database. |
TskCoreException |
Definition at line 672 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.AddContentToHashDbAction.AddContentToHashDbMenu.addFilesToHashSet(), and org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport().
void org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.addHashes | ( | Content | content, |
String | comment | ||
) | throws TskCoreException |
Adds hashes of content (if calculated) to the hash database.
content | The content for which the calculated hashes, if any, are to be added to the hash database. |
comment | A comment to associate with the hashes, e.g., the name of the case in which the content was encountered. |
TskCoreException |
Definition at line 686 of file HashDbManager.java.
References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.handle.
void org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.addHashes | ( | List< HashEntry > | hashes | ) | throws TskCoreException |
Adds a list of hashes to the hash database at once
hashes | List of hashes |
TskCoreException |
Definition at line 704 of file HashDbManager.java.
void org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.addPropertyChangeListener | ( | PropertyChangeListener | pcl | ) |
Adds a listener for the events defined in HashDb.Event.
pcl |
Definition at line 608 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.indexButtonActionPerformed().
|
private |
Definition at line 767 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.removeHashDatabaseNoSave().
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.equals | ( | Object | obj | ) |
Definition at line 782 of file HashDbManager.java.
References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.HashDb(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.hashSetName, org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.knownFilesType, org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.searchDuringIngest, and org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.sendIngestMessages.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.indexButtonActionPerformed().
String org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getDatabasePath | ( | ) | throws TskCoreException |
Definition at line 625 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.addHashDatabase(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.removeHashDatabaseNoSave(), and org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.updateComponentsForSelection().
String org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getHashSetName | ( | ) |
Definition at line 621 of file HashDbManager.java.
References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.hashSetName.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.addHashDatabase(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.configureSettings(), org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.createDatabaseButtonActionPerformed(), org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.deleteDatabaseButtonActionPerformed(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDbIndexer.doInBackground(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDbIndexer.done(), org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.hashSetTableKeyPressed(), org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.importDatabaseButtonActionPerformed(), org.sleuthkit.autopsy.modules.hashdatabase.HashLookupModuleSettingsPanel.isHashDbIndexed(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.propertyChange(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.removeHashDatabaseNoSave(), and org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.updateComponentsForSelection().
String org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getIndexPath | ( | ) | throws TskCoreException |
Definition at line 629 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.addHashDatabase(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.propertyChange(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.removeHashDatabaseNoSave(), and org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.updateComponentsForSelection().
KnownFilesType org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getKnownFilesType | ( | ) |
Definition at line 633 of file HashDbManager.java.
References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.knownFilesType.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.addHashDatabase(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.configureSettings(), and org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.updateComponentsForSelection().
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getSearchDuringIngest | ( | ) |
Definition at line 637 of file HashDbManager.java.
References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.searchDuringIngest.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.configureSettings(), and org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.updateComponentsForSelection().
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getSendIngestMessages | ( | ) |
Definition at line 645 of file HashDbManager.java.
References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.sendIngestMessages.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.configureSettings(), and org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.updateComponentsForSelection().
int org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.hashCode | ( | ) |
Definition at line 772 of file HashDbManager.java.
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.hasIndexOnly | ( | ) | throws TskCoreException |
Definition at line 755 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.removeHashDatabaseNoSave(), and org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.updateComponentsForSelection().
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.isUpdateable | ( | ) | throws TskCoreException |
Indicates whether the hash database accepts updates.
org.sleuthkit.datamodel.TskCoreException |
Definition at line 660 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.updateComponentsForSelection().
HashHitInfo org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.lookupMD5 | ( | Content | content | ) | throws TskCoreException |
Lookup hash value in DB and provide details on file.
content |
TskCoreException |
Definition at line 738 of file HashDbManager.java.
References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.handle.
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.lookupMD5Quick | ( | Content | content | ) | throws TskCoreException |
Perform a basic boolean lookup of the file's hash.
content |
TskCoreException |
Definition at line 717 of file HashDbManager.java.
References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.handle.
void org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.removePropertyChangeListener | ( | PropertyChangeListener | pcl | ) |
Removes a listener for the events defined in HashDb.Event.
pcl |
Definition at line 617 of file HashDbManager.java.
|
private |
Definition at line 586 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.addHashes(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDbIndexer.doInBackground(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.HashDb(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.lookupMD5(), and org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.lookupMD5Quick().
|
private |
Definition at line 587 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDbIndexer.doInBackground(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.equals(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getHashSetName(), and org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.HashDb().
|
private |
Definition at line 591 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDbIndexer.doInBackground(), and org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDbIndexer.done().
|
private |
Definition at line 590 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.equals(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getKnownFilesType(), and org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.HashDb().
|
private |
Definition at line 592 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDbIndexer.done().
|
private |
Definition at line 588 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.equals(), and org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getSearchDuringIngest().
|
private |
Definition at line 589 of file HashDbManager.java.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.equals(), and org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getSendIngestMessages().
|
staticprivate |
Definition at line 585 of file HashDbManager.java.
Copyright © 2012-2016 Basis Technology. Generated on: Fri Sep 29 2017
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.