Autopsy  4.5.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Protected Member Functions | Private Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher Class Reference

Inherits SwingWorker< Object, Void >.

Protected Member Functions

Object doInBackground () throws Exception
 

Private Member Functions

QueryResults filterResults (QueryResults queryResult)
 
void finalizeSearcher ()
 
void updateKeywords ()
 

Private Attributes

boolean finalRun = false
 
SearchJobInfo job
 
List< String > keywordListNames
 
List< KeywordListkeywordLists
 
List< Keyword > keywords
 
Map< Keyword, KeywordListkeywordToList
 
final Logger logger = Logger.getLogger(SearchRunner.Searcher.class.getName())
 
AggregateProgressHandle progressGroup
 

Detailed Description

Searcher responsible for searching the current index and writing results to blackboard and the inbox. Also, posts results to listeners as Ingest data events. Searches entire index, and keeps track of only new results to report and save. Runs as a background thread.

Definition at line 445 of file SearchRunner.java.

Member Function Documentation

Object org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground ( ) throws Exception
protected
QueryResults org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.filterResults ( QueryResults  queryResult)
private

This method filters out all of the hits found in earlier periodic searches and returns only the results found by the most recent search.

This method will only return hits for objects for which we haven't previously seen a hit for the keyword.

Parameters
queryResultThe results returned by a keyword search.
Returns
A unique set of hits found by the most recent search for objects that have not previously had a hit. The hits will be for the lowest numbered chunk associated with the object.

Definition at line 643 of file SearchRunner.java.

References org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.addKeywordResults(), and org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.currentKeywordResults().

Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground().

void org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.finalizeSearcher ( )
private

Performs the cleanup that needs to be done right AFTER doInBackground() returns without relying on done() method that is not guaranteed to run.

Definition at line 619 of file SearchRunner.java.

Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground().

void org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.updateKeywords ( )
private

Sync-up the updated keywords from the currently used lists in the XML

Definition at line 597 of file SearchRunner.java.

Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground().

Member Data Documentation

boolean org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.finalRun = false
private

Definition at line 457 of file SearchRunner.java.

SearchJobInfo org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.job
private

Searcher has private copies/snapshots of the lists and keywords

Definition at line 450 of file SearchRunner.java.

List<String> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywordListNames
private

Definition at line 452 of file SearchRunner.java.

List<KeywordList> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywordLists
private

Definition at line 453 of file SearchRunner.java.

List<Keyword> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywords
private

Definition at line 451 of file SearchRunner.java.

Map<Keyword, KeywordList> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywordToList
private

Definition at line 454 of file SearchRunner.java.

final Logger org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.logger = Logger.getLogger(SearchRunner.Searcher.class.getName())
private

Definition at line 456 of file SearchRunner.java.

AggregateProgressHandle org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.progressGroup
private

Definition at line 455 of file SearchRunner.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Sun Jan 21 2018
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.