Autopsy  4.5.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent Class Reference

Public Member Functions

 CombinedEvent (long epochMillis, String description, long fileID, Map< EventType, Long > eventMap)
 
boolean equals (Object obj)
 
String getDescription ()
 
ImmutableSet< Long > getEventIDs ()
 
Set< EventTypegetEventTypes ()
 
long getFileID ()
 
Long getRepresentativeEventID ()
 
long getStartMillis ()
 
int hashCode ()
 

Private Attributes

final String description
 
final long epochMillis
 
final Map< EventType, Long > eventTypeMap = new HashMap<>()
 
final long fileID
 

Detailed Description

A container for several events that have the same timestamp and description and are backed by the same file. Used in the ListView to coalesce the file system events for a file when they have the same timestamp.

Definition at line 33 of file CombinedEvent.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.CombinedEvent ( long  epochMillis,
String  description,
long  fileID,
Map< EventType, Long >  eventMap 
)

Constructor

Parameters
epochMillisThe timestamp for this event, in millis from the Unix epoch.
descriptionThe full description shared by all the combined events
fileIDThe ID of the file shared by all the combined events.
eventMapA map from EventType to event ID.

Definition at line 53 of file CombinedEvent.java.

References org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.description, org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.epochMillis, and org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.fileID.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.equals().

Member Function Documentation

boolean org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.equals ( Object  obj)
String org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.getDescription ( )

Get the full description shared by all the combined events.

Returns
The full description shared by all the combined events.

Definition at line 74 of file CombinedEvent.java.

References org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.description.

ImmutableSet<Long> org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.getEventIDs ( )

Get the event IDs of the combined events.

Returns
The event IDs of the combined events.

Definition at line 101 of file CombinedEvent.java.

Set<EventType> org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.getEventTypes ( )

Get the types of the combined events.

Returns
The types of the combined events.

Definition at line 92 of file CombinedEvent.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.listvew.ListTimeline.EventTypeCell.updateItem().

long org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.getFileID ( )

Get the obj ID of the file shared by the combined events.

Returns
The obj ID of the file shared by the combined events.

Definition at line 83 of file CombinedEvent.java.

References org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.fileID.

Long org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.getRepresentativeEventID ( )

Get the event ID of one event that is representative of all the combined events. It can be used to look up a SingleEvent with more details, for example.

Returns
An arbitrary representative event ID for the combined events.

Definition at line 112 of file CombinedEvent.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.listvew.ListTimeline.EventTableCell.updateItem(), and org.sleuthkit.autopsy.timeline.ui.listvew.ListTimeline.EventRow.updateItem().

long org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.getStartMillis ( )

Get the timestamp of this event as millis from the Unix epoch.

Returns
The timestamp of this event as millis from the Unix epoch.

Definition at line 65 of file CombinedEvent.java.

References org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.epochMillis.

int org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.hashCode ( )

Definition at line 117 of file CombinedEvent.java.

Member Data Documentation

final String org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.description
private
final long org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.epochMillis
private
final Map<EventType, Long> org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.eventTypeMap = new HashMap<>()
private

A map from EventType to event ID.

Definition at line 42 of file CombinedEvent.java.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.equals().

final long org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.fileID
private

The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Tue Feb 20 2018
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.