Autopsy  4.5.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Static Public Member Functions | Static Public Attributes | Protected Member Functions | Protected Attributes | Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb Class Referenceabstract

Inherits org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Inherited by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.

Public Member Functions

void addArtifact (CorrelationAttribute eamArtifact) throws EamDbException
 
void addReferenceInstance (EamGlobalFileInstance eamGlobalFileInstance, CorrelationAttribute.Type correlationType) throws EamDbException
 
void bulkInsertArtifacts () throws EamDbException
 
void bulkInsertCases (List< CorrelationCase > cases) throws EamDbException
 
void bulkInsertReferenceTypeEntries (Set< EamGlobalFileInstance > globalInstances, CorrelationAttribute.Type contentType) throws EamDbException
 
void deleteOrganization (EamOrganization organizationToDelete) throws EamDbException
 
void deleteReferenceSet (int referenceSetID) throws EamDbException
 
List< EamGlobalSetgetAllReferenceSets (CorrelationAttribute.Type correlationType) throws EamDbException
 
List< CorrelationAttributeInstancegetArtifactInstancesByPath (CorrelationAttribute.Type aType, String filePath) throws EamDbException
 
List< CorrelationAttributeInstancegetArtifactInstancesByTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException
 
List< CorrelationAttributeInstancegetArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException
 
CorrelationCase getCase (Case autopsyCase) throws EamDbException
 
CorrelationCase getCaseByUUID (String caseUUID) throws EamDbException
 
List< CorrelationCasegetCases () throws EamDbException
 
CorrelationAttribute.Type getCorrelationTypeById (int typeId) throws EamDbException
 
Long getCountArtifactInstancesByCaseDataSource (String caseUUID, String dataSourceID) throws EamDbException
 
Long getCountArtifactInstancesByTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException
 
Long getCountArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException
 
Long getCountUniqueCaseDataSourceTuplesHavingTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException
 
Long getCountUniqueDataSources () throws EamDbException
 
CorrelationDataSource getDataSource (CorrelationCase correlationCase, String dataSourceDeviceId) throws EamDbException
 
List< CorrelationDataSourcegetDataSources () throws EamDbException
 
String getDbInfo (String name) throws EamDbException
 
List< CorrelationAttribute.Type > getDefinedCorrelationTypes () throws EamDbException
 
List< CorrelationAttribute.Type > getEnabledCorrelationTypes () throws EamDbException
 
CoordinationService.Lock getExclusiveMultiUserDbLock () throws EamDbException
 
int getFrequencyPercentage (CorrelationAttribute corAttr) throws EamDbException
 
List< String > getListCasesHavingArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException
 
EamOrganization getOrganizationByID (int orgID) throws EamDbException
 
List< EamOrganizationgetOrganizations () throws EamDbException
 
List< EamGlobalFileInstancegetReferenceInstancesByTypeValue (CorrelationAttribute.Type aType, String aValue) throws EamDbException
 
EamGlobalSet getReferenceSetByID (int referenceSetID) throws EamDbException
 
EamOrganization getReferenceSetOrganization (int referenceSetID) throws EamDbException
 
List< CorrelationAttribute.Type > getSupportedCorrelationTypes () throws EamDbException
 
boolean isArtifactKnownBadByReference (CorrelationAttribute.Type aType, String value) throws EamDbException
 
boolean isFileHashInReferenceSet (String hash, int referenceSetID) throws EamDbException
 
boolean isValueInReferenceSet (String value, int referenceSetID, int correlationTypeID) throws EamDbException
 
CorrelationCase newCase (CorrelationCase eamCase) throws EamDbException
 
CorrelationCase newCase (Case autopsyCase) throws EamDbException
 
int newCorrelationType (CorrelationAttribute.Type newType) throws EamDbException
 
void newDataSource (CorrelationDataSource eamDataSource) throws EamDbException
 
void newDbInfo (String name, String value) throws EamDbException
 
long newOrganization (EamOrganization eamOrg) throws EamDbException
 
int newReferenceSet (EamGlobalSet eamGlobalSet) throws EamDbException
 
void prepareBulkArtifact (CorrelationAttribute eamArtifact) throws EamDbException
 
boolean referenceSetExists (String referenceSetName, String version) throws EamDbException
 
boolean referenceSetIsValid (int referenceSetID, String setName, String version) throws EamDbException
 
void reset () throws EamDbException
 
void saveSettings ()
 
void setArtifactInstanceKnownStatus (CorrelationAttribute eamArtifact, TskData.FileKnown knownStatus) throws EamDbException
 
void shutdownConnections () throws EamDbException
 
void updateCase (CorrelationCase eamCase) throws EamDbException
 
void updateCorrelationType (CorrelationAttribute.Type aType) throws EamDbException
 
void updateDbInfo (String name, String value) throws EamDbException
 
void updateOrganization (EamOrganization updatedOrganization) throws EamDbException
 
void updateSettings ()
 
void upgradeSchema () throws EamDbException, SQLException
 

Static Public Member Functions

static EamDb getInstance () throws EamDbException
 
static boolean isEnabled ()
 

Static Public Attributes

static final CaseDbSchemaVersionNumber CURRENT_DB_SCHEMA_VERSION = new CaseDbSchemaVersionNumber(1, 1)
 
static final int SCHEMA_VERSION = 1
 

Protected Member Functions

 AbstractSqlEamDb () throws EamDbException
 
abstract Connection connect () throws EamDbException
 
abstract String getConflictClause ()
 

Protected Attributes

int bulkArtifactsThreshold
 
final List< CorrelationAttribute.Type > DEFAULT_CORRELATION_TYPES
 

Private Member Functions

void deleteReferenceSetEntries (int referenceSetID) throws EamDbException
 
void deleteReferenceSetEntry (int referenceSetID) throws EamDbException
 
CorrelationAttribute.Type getCorrelationTypeFromResultSet (ResultSet resultSet) throws EamDbException, SQLException
 
CorrelationAttributeInstance getEamArtifactInstanceFromResultSet (ResultSet resultSet) throws SQLException, EamDbException
 
CorrelationCase getEamCaseFromResultSet (ResultSet resultSet) throws SQLException
 
CorrelationDataSource getEamDataSourceFromResultSet (ResultSet resultSet) throws SQLException
 
EamGlobalFileInstance getEamGlobalFileInstanceFromResultSet (ResultSet resultSet) throws SQLException, EamDbException
 
EamGlobalSet getEamGlobalSetFromResultSet (ResultSet resultSet) throws SQLException, EamDbException
 
EamOrganization getEamOrganizationFromResultSet (ResultSet resultSet) throws SQLException
 

Private Attributes

final Map< String, Collection< CorrelationAttribute > > bulkArtifacts
 
int bulkArtifactsCount
 

Static Private Attributes

static final Logger LOGGER = Logger.getLogger(AbstractSqlEamDb.class.getName())
 

Detailed Description

SQLite manager implementation

Definition at line 50 of file AbstractSqlEamDb.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.AbstractSqlEamDb ( ) throws EamDbException
protected

Member Function Documentation

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addArtifact ( CorrelationAttribute  eamArtifact) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addReferenceInstance ( EamGlobalFileInstance  eamGlobalFileInstance,
CorrelationAttribute.Type  correlationType 
) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts ( ) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertCases ( List< CorrelationCase cases) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertReferenceTypeEntries ( Set< EamGlobalFileInstance globalInstances,
CorrelationAttribute.Type  contentType 
) throws EamDbException
abstract Connection org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect ( ) throws EamDbException
abstractprotected

Setup and create a connection to the selected database implementation

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addReferenceInstance(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertCases(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertReferenceTypeEntries(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.deleteOrganization(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.deleteReferenceSetEntries(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.deleteReferenceSetEntry(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getAllReferenceSets(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByPath(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesKnownBad(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCaseByUUID(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCases(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeById(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByCaseDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesKnownBad(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueDataSources(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSources(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDbInfo(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEnabledCorrelationTypes(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getListCasesHavingArtifactInstancesKnownBad(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizationByID(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizations(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceInstancesByTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceSetByID(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getSupportedCorrelationTypes(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.isArtifactKnownBadByReference(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.isValueInReferenceSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDbInfo(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newOrganization(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newReferenceSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.referenceSetExists(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateCase(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateDbInfo(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateOrganization(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.upgradeSchema().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.deleteOrganization ( EamOrganization  organizationToDelete) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.deleteReferenceSet ( int  referenceSetID) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.deleteReferenceSetEntries ( int  referenceSetID) throws EamDbException
private
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.deleteReferenceSetEntry ( int  referenceSetID) throws EamDbException
private
List<EamGlobalSet> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getAllReferenceSets ( CorrelationAttribute.Type  correlationType) throws EamDbException
List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByPath ( CorrelationAttribute.Type  aType,
String  filePath 
) throws EamDbException
List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByTypeValue ( CorrelationAttribute.Type  aType,
String  value 
) throws EamDbException
List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesKnownBad ( CorrelationAttribute.Type  aType,
String  value 
) throws EamDbException
CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCase ( Case  autopsyCase) throws EamDbException

Retrieves Central Repo case based on an Autopsy Case

Parameters
autopsyCaseAutopsy case to find corresponding CR case for
Returns
CR Case
Exceptions
EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 263 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCaseByUUID().

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCaseByUUID ( String  caseUUID) throws EamDbException
List<CorrelationCase> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCases ( ) throws EamDbException
abstract String org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getConflictClause ( )
abstractprotected
CorrelationAttribute.Type org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeById ( int  typeId) throws EamDbException
CorrelationAttribute.Type org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet ( ResultSet  resultSet) throws EamDbException, SQLException
private
Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByCaseDataSource ( String  caseUUID,
String  dataSourceID 
) throws EamDbException
Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByTypeValue ( CorrelationAttribute.Type  aType,
String  value 
) throws EamDbException

Retrieves number of artifact instances in the database that are associated with the ArtifactType and artifactValue of the given artifact.

Parameters
aTypeThe type of the artifact
valueThe correlation value
Returns
Number of artifact instances having ArtifactType and ArtifactValue.

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 709 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesKnownBad ( CorrelationAttribute.Type  aType,
String  value 
) throws EamDbException
Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue ( CorrelationAttribute.Type  aType,
String  value 
) throws EamDbException
Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueDataSources ( ) throws EamDbException
CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSource ( CorrelationCase  correlationCase,
String  dataSourceDeviceId 
) throws EamDbException
List<CorrelationDataSource> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSources ( ) throws EamDbException
String org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDbInfo ( String  name) throws EamDbException
List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes ( ) throws EamDbException
CorrelationAttributeInstance org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamArtifactInstanceFromResultSet ( ResultSet  resultSet) throws SQLException, EamDbException
private

Convert a ResultSet to a EamArtifactInstance object

Parameters
resultSetA resultSet with a set of values to create a EamArtifactInstance object.
Returns
fully populated EamArtifactInstance, or null
Exceptions
SQLExceptionwhen an expected column name is not in the resultSet

Definition at line 2331 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByPath(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByTypeValue(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesKnownBad().

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamCaseFromResultSet ( ResultSet  resultSet) throws SQLException
private
CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamDataSourceFromResultSet ( ResultSet  resultSet) throws SQLException
private
EamGlobalFileInstance org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalFileInstanceFromResultSet ( ResultSet  resultSet) throws SQLException, EamDbException
private
EamGlobalSet org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalSetFromResultSet ( ResultSet  resultSet) throws SQLException, EamDbException
private
EamOrganization org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamOrganizationFromResultSet ( ResultSet  resultSet) throws SQLException
private
List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEnabledCorrelationTypes ( ) throws EamDbException
CoordinationService.Lock org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getExclusiveMultiUserDbLock ( ) throws EamDbException
inherited

Gets an exclusive lock (if applicable). Will return the lock if successful, null if unsuccessful because locking isn't supported, and throw an exception if we should have been able to get the lock but failed (meaning the database is in use).

Returns
the lock, or null if locking is not supported
Exceptions
EamDbExceptionif the coordination service is running but we fail to get the lock

Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.upgradeDatabase().

int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getFrequencyPercentage ( CorrelationAttribute  corAttr) throws EamDbException

Calculate the percentage of data sources that have this attribute value.

Parameters
corAttrAttribute type and value to get data about
Returns
Int between 0 and 100

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 747 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueDataSources().

static EamDb org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getInstance ( ) throws EamDbException
staticinherited

Get the instance

Returns
The EamDb instance or null if one is not configured.
Exceptions
EamDbException

Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.

Definition at line 45 of file EamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.DISABLED, org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getInstance(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.getInstance(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.getSelectedPlatform(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.useCentralRepo().

Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.AddNewOrganizationDialog.bnOKActionPerformed(), org.sleuthkit.autopsy.centralrepository.optionspanel.EamDbSettingsDialog.bnOkActionPerformed(), org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.cancel(), org.sleuthkit.autopsy.centralrepository.optionspanel.ManageOrganizationsDialog.deleteButtonActionPerformed(), org.sleuthkit.autopsy.modules.hashdatabase.ImportCentralRepoDbProgressDialog.CentralRepoImportWorker.deleteIncompleteSet(), org.sleuthkit.autopsy.modules.hashdatabase.ImportCentralRepoDbProgressDialog.CentralRepoImportWorker.doInBackground(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getCentralRepoHashSetsFromDatabase(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromBlackboardArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromContent(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelationAttributesFromNode(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalSetFromResultSet(), org.sleuthkit.autopsy.centralrepository.optionspanel.ManageOrganizationsDialog.ManageOrganizationsDialog(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.IngestModuleEventListener.propertyChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.NewArtifactsRunner.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.showCaseDetails(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.showCommonalityDetails(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.upgradeDatabase().

List<String> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getListCasesHavingArtifactInstancesKnownBad ( CorrelationAttribute.Type  aType,
String  value 
) throws EamDbException

Gets list of distinct case display names, where each case has 1+ Artifact Instance matching eamArtifact with knownStatus = "Bad".

Parameters
aTypeEamArtifact.Type to search for
valueValue to search for
Returns
List of cases containing this artifact with instances marked as bad
Exceptions
EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1290 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

EamOrganization org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizationByID ( int  orgID) throws EamDbException
List<EamOrganization> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizations ( ) throws EamDbException
List<EamGlobalFileInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceInstancesByTypeValue ( CorrelationAttribute.Type  aType,
String  aValue 
) throws EamDbException
EamGlobalSet org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceSetByID ( int  referenceSetID) throws EamDbException
EamOrganization org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceSetOrganization ( int  referenceSetID) throws EamDbException
List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getSupportedCorrelationTypes ( ) throws EamDbException
boolean org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.isArtifactKnownBadByReference ( CorrelationAttribute.Type  aType,
String  value 
) throws EamDbException
static boolean org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.isEnabled ( )
staticinherited

Is the database enabled?

Returns
Is the database enabled

Definition at line 98 of file EamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.DISABLED, org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.getSelectedPlatform(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.useCentralRepo().

Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.cancel(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.configureSettings(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.connect(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getCentralRepoHashSetsFromDatabase(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.isSupported(), org.sleuthkit.autopsy.centralrepository.eventlisteners.NewArtifactsRunner.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.DataAddedTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceAddedTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.CurrentCaseTask.run(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.setNode(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.updateHashSetsFromCentralRepository(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.upgradeDatabase().

boolean org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.isFileHashInReferenceSet ( String  hash,
int  referenceSetID 
) throws EamDbException

Check if the given file hash is in this reference set. Only searches the reference_files table.

Parameters
hash
referenceSetID
Returns
true if the hash is found in the reference set
Exceptions
EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1428 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.FILES_TYPE_ID, and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.isValueInReferenceSet().

boolean org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.isValueInReferenceSet ( String  value,
int  referenceSetID,
int  correlationTypeID 
) throws EamDbException
CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase ( CorrelationCase  eamCase) throws EamDbException
CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase ( Case  autopsyCase) throws EamDbException
int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCorrelationType ( CorrelationAttribute.Type  newType) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDataSource ( CorrelationDataSource  eamDataSource) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDbInfo ( String  name,
String  value 
) throws EamDbException
long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newOrganization ( EamOrganization  eamOrg) throws EamDbException
int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newReferenceSet ( EamGlobalSet  eamGlobalSet) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.prepareBulkArtifact ( CorrelationAttribute  eamArtifact) throws EamDbException

Adds an eamArtifact to an internal list to be later added to DB. Artifact can have 1 or more Artifact Instances. Insert will be triggered by a threshold or a call to bulkInsertArtifacts().

Parameters
eamArtifactThe artifact to add

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 892 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifacts, and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts().

boolean org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.referenceSetExists ( String  referenceSetName,
String  version 
) throws EamDbException

Check whether a reference set with the given name/version is in the central repo. Used to check for name collisions when creating reference sets.

Parameters
referenceSetName
version
Returns
true if a matching set is found
Exceptions
EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1898 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

boolean org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.referenceSetIsValid ( int  referenceSetID,
String  setName,
String  version 
) throws EamDbException

Check whether a reference set with the given parameters exists in the central repository. Used to check whether reference sets saved in the settings are still present.

Parameters
referenceSetID
setName
version
Returns
true if a matching entry exists in the central repository
Exceptions
EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1409 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceSetByID(), org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalSet.getSetName(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalSet.getVersion().

void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.reset ( ) throws EamDbException
inherited
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.saveSettings ( )
inherited
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus ( CorrelationAttribute  eamArtifact,
TskData.FileKnown  knownStatus 
) throws EamDbException

Sets an eamArtifact instance to the given knownStatus. knownStatus should be BAD if the file has been tagged with a notable tag and UNKNOWN otherwise. If eamArtifact exists, it is updated. If eamArtifact does not exist it is added with the given status.

Parameters
eamArtifactArtifact containing exactly one (1) ArtifactInstance.
knownStatusThe status to change the artifact to. Should never be KNOWN

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1084 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCaseByUUID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationCase.getCaseUUID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationCase(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getCorrelationValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationDataSource.getDeviceID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFilePath(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getInstances(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDataSource().

void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.shutdownConnections ( ) throws EamDbException
inherited

Shutdown the connection pool.

This closes the connection pool including all idle database connections. It will not close active/in-use connections. Thus, it is vital that there are no in-use connections when you call this method.

Exceptions
EamDbExceptionif there is a problem closing the connection pool.

Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.

Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.EamDbSettingsDialog.bnOkActionPerformed(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.upgradeDatabase().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateCase ( CorrelationCase  eamCase) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateCorrelationType ( CorrelationAttribute.Type  aType) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateDbInfo ( String  name,
String  value 
) throws EamDbException
void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateOrganization ( EamOrganization  updatedOrganization) throws EamDbException

Update an existing organization.

Parameters
updatedOrganizationthe values the Organization with the same ID will be updated to in the database.
Exceptions
EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1649 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.updateSettings ( )
inherited

Update settings

When using updateSettings, if any database settings have changed, you should call shutdownConnections() before using any API methods. That will ensure that any old connections are closed and all new connections will be made using the new settings.

Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.

Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.EamDbSettingsDialog.bnOkActionPerformed().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.upgradeSchema ( ) throws EamDbException, SQLException

Member Data Documentation

final Map<String, Collection<CorrelationAttribute> > org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifacts
private
int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifactsCount
private

Definition at line 56 of file AbstractSqlEamDb.java.

int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifactsThreshold
protected
final CaseDbSchemaVersionNumber org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.CURRENT_DB_SCHEMA_VERSION = new CaseDbSchemaVersionNumber(1, 1)
staticinherited
final List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.DEFAULT_CORRELATION_TYPES
protected
final Logger org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.LOGGER = Logger.getLogger(AbstractSqlEamDb.class.getName())
staticprivate

Definition at line 52 of file AbstractSqlEamDb.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.SCHEMA_VERSION = 1
staticinherited

Definition at line 34 of file EamDb.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Tue Feb 20 2018
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.