Autopsy  4.4
Graphical digital forensics platform for The Sleuth Kit and other tools.
ArtifactStringContent.java
Go to the documentation of this file.
1 /*
2  * Autopsy Forensic Browser
3  *
4  * Copyright 2011-2017 Basis Technology Corp.
5  * Contact: carrier <at> sleuthkit <dot> org
6  *
7  * Licensed under the Apache License, Version 2.0 (the "License");
8  * you may not use this file except in compliance with the License.
9  * You may obtain a copy of the License at
10  *
11  * http://www.apache.org/licenses/LICENSE-2.0
12  *
13  * Unless required by applicable law or agreed to in writing, software
14  * distributed under the License is distributed on an "AS IS" BASIS,
15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16  * See the License for the specific language governing permissions and
17  * limitations under the License.
18  */
19 package org.sleuthkit.autopsy.datamodel;
20 
21 import java.text.SimpleDateFormat;
22 import java.util.logging.Level;
23 import org.apache.commons.lang.StringUtils;
24 import org.openide.util.NbBundle;
25 import org.openide.util.NbBundle.Messages;
26 import org.sleuthkit.autopsy.coreutils.Logger;
27 import org.sleuthkit.datamodel.BlackboardArtifact;
28 import org.sleuthkit.datamodel.BlackboardAttribute;
29 import org.sleuthkit.datamodel.Content;
30 import org.sleuthkit.datamodel.TskCoreException;
31 
40 @Deprecated
41 public class ArtifactStringContent implements StringContent {
42 
43  private final static SimpleDateFormat dateFormatter = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
44  private final static Logger logger = Logger.getLogger(ArtifactStringContent.class.getName());
45  private final BlackboardArtifact artifact;
46  private String stringContent = "";
47 
56  public ArtifactStringContent(BlackboardArtifact artifact) {
57  this.artifact = artifact;
58  }
59 
65  @Messages({
66  "ArtifactStringContent.attrsTableHeader.type=Type",
67  "ArtifactStringContent.attrsTableHeader.value=Value",
68  "ArtifactStringContent.attrsTableHeader.sources=Source(s)",
69  "ArtifactStringContent.failedToGetSourcePath.message=Failed to get source file path from case database",
70  "ArtifactStringContent.failedToGetAttributes.message=Failed to get some or all attributes from case database"
71  })
72  @Override
73  public String getString() {
74  if (stringContent.isEmpty()) {
75  /*
76  * Start the document.
77  */
78  StringBuilder buffer = new StringBuilder(1024);
79  buffer.append("<html>\n"); //NON-NLS
80  buffer.append("<body>\n"); //NON-NLS
81 
82  /*
83  * Use the artifact display name as a header.
84  */
85  buffer.append("<h3>"); //NON-NLS
86  buffer.append(artifact.getDisplayName());
87  buffer.append("</h3>\n"); //NON-NLS
88 
89  /*
90  * Put the attributes, source content path and artifact id in a
91  * table.
92  */
93  buffer.append("<table border='1'>"); //NON-NLS
94 
95  // header row
96  buffer.append("<tr>"); //NON-NLS
97  buffer.append("<th><b>"); //NON-NLS
98  buffer.append(Bundle.ArtifactStringContent_attrsTableHeader_type());
99  buffer.append("</b></th>"); //NON-NLS
100  buffer.append("<th><b>"); //NON-NLS
101  buffer.append(Bundle.ArtifactStringContent_attrsTableHeader_value());
102  buffer.append("</b></th>"); //NON-NLS
103  buffer.append("<th><b>"); //NON-NLS
104  buffer.append(Bundle.ArtifactStringContent_attrsTableHeader_sources());
105  buffer.append("</b></th>"); //NON-NLS
106  buffer.append("</tr>\n"); //NON-NLS
107  try {
108  Content content = artifact.getSleuthkitCase().getContentById(artifact.getObjectID());
109 
110  /*
111  * Add rows for each attribute.
112  */
113  for (BlackboardAttribute attr : artifact.getAttributes()) {
114 
115  /*
116  * Attribute value column.
117  */
118  String value = "";
119  switch (attr.getAttributeType().getValueType()) {
120  case STRING:
121  case INTEGER:
122  case LONG:
123  case DOUBLE:
124  case BYTE:
125  default:
126  value = attr.getDisplayString();
127  break;
128 
129  // Use Autopsy date formatting settings, not TSK defaults
130  case DATETIME:
131  long epoch = attr.getValueLong();
132  value = "0000-00-00 00:00:00";
133  if (null != content && 0 != epoch) {
134  dateFormatter.setTimeZone(ContentUtils.getTimeZone(content));
135  value = dateFormatter.format(new java.util.Date(epoch * 1000));
136  }
137  break;
138  }
139 
140  /*
141  * Attribute sources column.
142  */
143  String sources = StringUtils.join(attr.getSources(), ", ");
144  buffer.append(makeTableRow(attr.getAttributeType().getDisplayName(), value, sources));
145  }
146 
147  /*
148  * Add a row for the source content path.
149  */
150 
151  String path = "";
152  try {
153  if (null != content) {
154  path = content.getUniquePath();
155  }
156  } catch (TskCoreException ex) {
157  logger.log(Level.SEVERE, String.format("Error getting source content path for artifact (artifact_id=%d, obj_id=%d)", artifact.getArtifactID(), artifact.getObjectID()), ex);
158  path = Bundle.ArtifactStringContent_failedToGetSourcePath_message();
159  }
160 
161  buffer.append(makeTableRow(NbBundle.getMessage(this.getClass(), "ArtifactStringContent.getStr.srcFilePath.text"),
162  path, ""));
163 
164 
165  /*
166  * Add a row for the artifact id.
167  */
168  buffer.append(makeTableRow(NbBundle.getMessage(this.getClass(), "ArtifactStringContent.getStr.artifactId.text"),
169  Long.toString(artifact.getArtifactID()), ""));
170 
171  } catch (TskCoreException ex) {
172  logger.log(Level.SEVERE, String.format("Error getting data for artifact (artifact_id=%d)", artifact.getArtifactID()), ex);
173  buffer.append(makeTableRow(Bundle.ArtifactStringContent_failedToGetAttributes_message(), "", ""));
174  } finally {
175  /*
176  * Finish the document
177  */
178  buffer.append("</table>"); //NON-NLS
179  buffer.append("</html>\n"); //NON-NLS
180  stringContent = buffer.toString();
181  }
182  }
183 
184  return stringContent;
185  }
186 
187  // escape special HTML characters
188  private String escapeHtmlString(String str) {
189  str = str.replaceAll(" ", "&nbsp;"); //NON-NLS
190  str = str.replaceAll("<", "&lt;"); //NON-NLS
191  str = str.replaceAll(">", "&gt;"); //NON-NLS
192  str = str.replaceAll("(\r\n|\n)", "<br />"); //NON-NLS
193  return str;
194  }
195 
203  private String makeTableRow(String type, String value, String source) {
204  String row = "<tr><td>" + escapeHtmlString(type) + "</td><td>" + escapeHtmlString(value) + "</td><td>" + escapeHtmlString(source) + "</td></tr>";
205  return row;
206  }
207 
208 }
org.sleuthkit.autopsy.datamodel.ArtifactStringContent.dateFormatter
static final SimpleDateFormat dateFormatter
Definition: ArtifactStringContent.java:43
org.sleuthkit.autopsy.datamodel.ContentUtils
Definition: ContentUtils.java:53
org.sleuthkit.autopsy.datamodel.StringContent
Definition: StringContent.java:13
org.sleuthkit.autopsy.datamodel.ArtifactStringContent.ArtifactStringContent
ArtifactStringContent(BlackboardArtifact artifact)
Definition: ArtifactStringContent.java:56
org.sleuthkit.autopsy.datamodel.ArtifactStringContent.getString
String getString()
Definition: ArtifactStringContent.java:73
org.sleuthkit.autopsy.datamodel.ArtifactStringContent
Definition: ArtifactStringContent.java:41
org.sleuthkit.autopsy.datamodel.ArtifactStringContent.makeTableRow
String makeTableRow(String type, String value, String source)
Definition: ArtifactStringContent.java:203
org.sleuthkit.autopsy.datamodel.ArtifactStringContent.stringContent
String stringContent
Definition: ArtifactStringContent.java:46
org.sleuthkit.autopsy.datamodel.ArtifactStringContent.logger
static final Logger logger
Definition: ArtifactStringContent.java:44
org.sleuthkit.autopsy.datamodel.ArtifactStringContent.escapeHtmlString
String escapeHtmlString(String str)
Definition: ArtifactStringContent.java:188
org.sleuthkit.autopsy.coreutils.Logger.getLogger
synchronized static Logger getLogger(String name)
Definition: Logger.java:161
org.sleuthkit.autopsy.datamodel.ContentUtils.getTimeZone
static TimeZone getTimeZone(Content c)
Definition: ContentUtils.java:132
org.sleuthkit.autopsy.datamodel.ArtifactStringContent.artifact
final BlackboardArtifact artifact
Definition: ArtifactStringContent.java:45

Copyright © 2012-2016 Basis Technology. Generated on: Tue Jun 13 2017
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.