Sleuth Kit Java Bindings (JNI)  4.3
Java bindings for using The Sleuth Kit
org.sleuthkit.datamodel.AbstractFile Class Referenceabstract

Inherits org.sleuthkit.datamodel.AbstractContent.

Inherited by org.sleuthkit.datamodel.DerivedFile, org.sleuthkit.datamodel.FsContent, org.sleuthkit.datamodel.LayoutFile, org.sleuthkit.datamodel.LocalFile, and org.sleuthkit.datamodel.VirtualDirectory.


enum  MimeMatchEnum

Public Member Functions

boolean canRead ()
void close ()
long convertToImgOffset (long fileOffset) throws TskCoreException
boolean exists ()
long getAtime ()
String getAtimeAsDate ()
int getAttributeId ()
short getAttrId ()
TskData.TSK_FS_ATTR_TYPE_ENUM getAttrType ()
long getCrtime ()
String getCrtimeAsDate ()
long getCtime ()
String getCtimeAsDate ()
Content getDataSource () throws TskCoreException
String getDirFlagAsString ()
String getDirTypeAsString ()
int getGid ()
TskData.FileKnown getKnown ()
String getLocalAbsPath ()
String getLocalPath ()
String getMd5Hash ()
long getMetaAddr ()
String getMetaFlagsAsString ()
long getMetaSeq ()
String getMetaTypeAsString ()
String getMIMEType ()
String getModesAsString ()
long getMtime ()
String getMtimeAsDate ()
String getNameExtension ()
String getParentPath ()
List< TskFileRangegetRanges () throws TskCoreException
long getSize ()
int getUid ()
boolean isDir ()
boolean isDirNameFlagSet (TSK_FS_NAME_FLAG_ENUM flag)
boolean isFile ()
boolean isMetaFlagSet (TSK_FS_META_FLAG_ENUM metaFlag)
MimeMatchEnum isMimeType (SortedSet< String > mimeTypes)
boolean isModeSet (TskData.TSK_FS_META_MODE_ENUM mode)
abstract boolean isRoot ()
boolean isVirtual ()
List< AbstractFilelistFiles () throws TskCoreException
final int read (byte[] buf, long offset, long len) throws TskCoreException
String toString (boolean preserveState)
- Public Member Functions inherited from org.sleuthkit.datamodel.AbstractContent
boolean equals (Object obj)
ArrayList< BlackboardArtifactgetAllArtifacts () throws TskCoreException
long getAllArtifactsCount () throws TskCoreException
ArrayList< BlackboardArtifactgetArtifacts (String artifactTypeName) throws TskCoreException
ArrayList< BlackboardArtifactgetArtifacts (int artifactTypeID) throws TskCoreException
ArrayList< BlackboardArtifactgetArtifacts (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
long getArtifactsCount (String artifactTypeName) throws TskCoreException
long getArtifactsCount (int artifactTypeID) throws TskCoreException
long getArtifactsCount (ARTIFACT_TYPE type) throws TskCoreException
int getChildrenCount () throws TskCoreException
Content getDataSource () throws TskCoreException
BlackboardArtifact getGenInfoArtifact () throws TskCoreException
BlackboardArtifact getGenInfoArtifact (boolean create) throws TskCoreException
ArrayList< BlackboardAttributegetGenInfoAttributes (ATTRIBUTE_TYPE attr_type) throws TskCoreException
Set< String > getHashSetNames () throws TskCoreException
long getId ()
String getName ()
synchronized Content getParent () throws TskCoreException
SleuthkitCase getSleuthkitCase ()
synchronized String getUniquePath () throws TskCoreException
boolean hasChildren () throws TskCoreException
int hashCode ()
BlackboardArtifact newArtifact (int artifactTypeID) throws TskCoreException
BlackboardArtifact newArtifact (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
String toString ()
String toString (boolean preserveState)
- Public Member Functions inherited from org.sleuthkit.datamodel.Content
public< T > T accept (ContentVisitor< T > v)
long getArtifactsCount (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
List< ContentgetChildren () throws TskCoreException
List< Long > getChildrenIds () throws TskCoreException
ArrayList< BlackboardAttributegetGenInfoAttributes (BlackboardAttribute.ATTRIBUTE_TYPE attr_type) throws TskCoreException
- Public Member Functions inherited from org.sleuthkit.datamodel.SleuthkitVisitableItem
public< T > T accept (SleuthkitItemVisitor< T > v)

Static Public Member Functions

static String createNonUniquePath (String uniquePath)
static String epochToTime (long epoch)
static long timeToEpoch (String time)

Protected Member Functions

 AbstractFile (SleuthkitCase db, long objId, TskData.TSK_FS_ATTR_TYPE_ENUM attrType, short attrId, String name, TskData.TSK_DB_FILES_TYPE_ENUM fileType, long metaAddr, int metaSeq, TSK_FS_NAME_TYPE_ENUM dirType, TSK_FS_META_TYPE_ENUM metaType, TSK_FS_NAME_FLAG_ENUM dirFlag, short metaFlags, long size, long ctime, long crtime, long atime, long mtime, short modes, int uid, int gid, String md5Hash, FileKnown knownState, String parentPath)
void finalize () throws Throwable
int readInt (byte[] buf, long offset, long len) throws TskCoreException
final int readLocal (byte[] buf, long offset, long len) throws TskCoreException
void setLocalPath (String localPath, boolean isAbsolute)
- Protected Member Functions inherited from org.sleuthkit.datamodel.AbstractContent
 AbstractContent (SleuthkitCase db, long obj_id, String name)

Protected Attributes

final int attrId
final TskData.TSK_FS_ATTR_TYPE_ENUM attrType
final TskData.TSK_DB_FILES_TYPE_ENUM fileType
TskData.FileKnown knownState
String md5Hash
final long metaAddr
final Set< TSK_FS_META_FLAG_ENUMmetaFlags
final int metaSeq
final TSK_FS_META_TYPE_ENUM metaType
final Set< TskData.TSK_FS_META_MODE_ENUM > modes
final String parentPath
long size
final int uid
- Protected Attributes inherited from org.sleuthkit.datamodel.AbstractContent
long parentId

Private Member Functions

void loadLocalFile () throws TskCoreException

Private Attributes

long dataSourceObjectId
TskData.EncodingType encodingType
String localAbsPath
 absolute path representation of the local path More...
volatile localFile
volatile RandomAccessFile localFileHandle
String localPath
 local path as stored in db tsk_files_path, is relative to the db, More...
boolean localPathSet = false
 if set by setLocalPath(), reads are done on local file More...
String mimeType
List< TskFileRangeranges

Static Private Attributes

static final ResourceBundle bundle = ResourceBundle.getBundle("org.sleuthkit.datamodel.Bundle")
static final Logger logger = Logger.getLogger(AbstractFile.class.getName())

Additional Inherited Members

- Static Public Attributes inherited from org.sleuthkit.datamodel.AbstractContent
static final long UNKNOWN_ID = -1

Detailed Description

An abstract base class for classes that represent of files that have been added to the case.

Definition at line 42 of file

Constructor & Destructor Documentation

org.sleuthkit.datamodel.AbstractFile.AbstractFile ( SleuthkitCase  db,
long  objId,
TskData.TSK_FS_ATTR_TYPE_ENUM  attrType,
short  attrId,
String  name,
long  metaAddr,
int  metaSeq,
short  metaFlags,
long  size,
long  ctime,
long  crtime,
long  atime,
long  mtime,
short  modes,
int  uid,
int  gid,
String  md5Hash,
FileKnown  knownState,
String  parentPath 

Initializes common fields used by AbstactFile implementations (objects in tsk_files table)

dbcase / db handle where this file belongs to
objIdobject id in tsk_objects table
namename field of the file
fileTypetype of the file
md5Hashmd5sum of the file, or null or "NULL" if not present
knownStateknownState status of the file, or null if unknown (default)
Do not make subclasses outside of this package.

Definition at line 1129 of file

References org.sleuthkit.datamodel.AbstractFile.attrType, org.sleuthkit.datamodel.AbstractContent.db, and org.sleuthkit.datamodel.AbstractContent.objId.

Member Function Documentation

boolean org.sleuthkit.datamodel.AbstractFile.canRead ( )

Check if the file exists and is readable. If non-local (e.g. within an image), always true, if local, checks if actual local path exists and is readable

true if the file is readable

Definition at line 946 of file

References org.sleuthkit.datamodel.AbstractFile.canRead(), org.sleuthkit.datamodel.AbstractFile.loadLocalFile(), and org.sleuthkit.datamodel.AbstractFile.localFile.

Referenced by org.sleuthkit.datamodel.AbstractFile.canRead(), and org.sleuthkit.datamodel.AbstractFile.readLocal().

void org.sleuthkit.datamodel.AbstractFile.close ( )

Free native resources after read is done on the Content object. After closing, read can be called again on the same Content object, which should result in re-opening of new native resources.

Implements org.sleuthkit.datamodel.Content.

Definition at line 983 of file

References org.sleuthkit.datamodel.AbstractContent.getName(), and org.sleuthkit.datamodel.AbstractFile.getParentPath().

Referenced by org.sleuthkit.datamodel.DerivedFile.finalize(), and org.sleuthkit.datamodel.AbstractFile.finalize().

long org.sleuthkit.datamodel.AbstractFile.convertToImgOffset ( long  fileOffset) throws TskCoreException

Convert an internal offset to an image offset

fileOffsetthe byte offset in this layout file to map
the corresponding byte offset in the image where the file offset is located, or -1 if the file has no range layout information or if the fileOffset is larger than file size
TskCoreExceptionexception thrown if critical error occurred within tsk core and offset could not be converted

Definition at line 574 of file

References org.sleuthkit.datamodel.AbstractFile.getRanges().

static String org.sleuthkit.datamodel.AbstractFile.createNonUniquePath ( String  uniquePath)
uniquePaththe unique path to an AbstractFile (or subclass) usually obtained by a call to AbstractFile.getUniquePath.
the path to to an AbstractFile (or subclass) with the image and volume path segments removed.

Definition at line 644 of file

Referenced by org.sleuthkit.datamodel.SleuthkitCase.openFiles().

static String org.sleuthkit.datamodel.AbstractFile.epochToTime ( long  epoch)

Return the epoch into string in ISO 8601 dateTime format

epochtime in seconds
formatted date time string as "yyyy-MM-dd HH:mm:ss"

Definition at line 1043 of file

Referenced by org.sleuthkit.datamodel.AbstractFile.getAtimeAsDate(), org.sleuthkit.datamodel.AbstractFile.getCrtimeAsDate(), org.sleuthkit.datamodel.AbstractFile.getCtimeAsDate(), org.sleuthkit.datamodel.BlackboardAttribute.getDisplayString(), and org.sleuthkit.datamodel.AbstractFile.getMtimeAsDate().

boolean org.sleuthkit.datamodel.AbstractFile.exists ( )

Check if the file exists. If non-local always true, if local, checks if actual local path exists

true if the file exists, false otherwise

Definition at line 925 of file

References org.sleuthkit.datamodel.AbstractFile.exists(), org.sleuthkit.datamodel.AbstractFile.loadLocalFile(), and org.sleuthkit.datamodel.AbstractFile.localFile.

Referenced by org.sleuthkit.datamodel.AbstractFile.exists(), org.sleuthkit.datamodel.Image.imageFileExists(), and org.sleuthkit.datamodel.AbstractFile.readLocal().

void org.sleuthkit.datamodel.AbstractFile.finalize ( ) throws Throwable

Definition at line 1002 of file

References org.sleuthkit.datamodel.AbstractFile.close().

long org.sleuthkit.datamodel.AbstractFile.getAtime ( )

Get the access time

access time

Definition at line 230 of file

String org.sleuthkit.datamodel.AbstractFile.getAtimeAsDate ( )

Get the access time as Date (in local timezone)

access time as Date

Definition at line 239 of file

References org.sleuthkit.datamodel.AbstractFile.epochToTime().

int org.sleuthkit.datamodel.AbstractFile.getAttributeId ( )

Get the attribute id

attribute id

Definition at line 185 of file

References org.sleuthkit.datamodel.AbstractFile.attrId.

short org.sleuthkit.datamodel.AbstractFile.getAttrId ( )

Get the attribute id

attribute id
Use getAttributeId() method instead as it returns integer instead of short.

Definition at line 1192 of file

References org.sleuthkit.datamodel.AbstractFile.attrId.

TskData.TSK_FS_ATTR_TYPE_ENUM org.sleuthkit.datamodel.AbstractFile.getAttrType ( )

Get the attribute type

attribute type

Definition at line 176 of file

References org.sleuthkit.datamodel.AbstractFile.attrType.

long org.sleuthkit.datamodel.AbstractFile.getCrtime ( )

Get the creation time

creation time

Definition at line 212 of file

String org.sleuthkit.datamodel.AbstractFile.getCrtimeAsDate ( )

Get the creation time as Date (in local timezone)

creation time as Date

Definition at line 221 of file

References org.sleuthkit.datamodel.AbstractFile.epochToTime().

long org.sleuthkit.datamodel.AbstractFile.getCtime ( )

Get the change time

change time

Definition at line 194 of file

String org.sleuthkit.datamodel.AbstractFile.getCtimeAsDate ( )

Get the change time as Date (in local timezone)

change time as Date

Definition at line 203 of file

References org.sleuthkit.datamodel.AbstractFile.epochToTime().

Content org.sleuthkit.datamodel.AbstractFile.getDataSource ( ) throws TskCoreException

Gets the data source for this file.

The data source.
TskCoreExceptionif there was an error querying the case database.

Implements org.sleuthkit.datamodel.Content.

Definition at line 531 of file

References org.sleuthkit.datamodel.SleuthkitCase.getContentById(), and org.sleuthkit.datamodel.AbstractContent.getSleuthkitCase().

Referenced by org.sleuthkit.datamodel.LayoutFile.readInt().

String org.sleuthkit.datamodel.AbstractFile.getDirFlagAsString ( )
a string representation of the directory name flag (type TSK_FS_NAME_FLAG_ENUM)

Definition at line 730 of file

References org.sleuthkit.datamodel.TskData.TSK_FS_NAME_FLAG_ENUM.toString().

TSK_FS_NAME_TYPE_ENUM org.sleuthkit.datamodel.AbstractFile.getDirType ( )

Get the directory type id

directory type id

Definition at line 709 of file

References org.sleuthkit.datamodel.AbstractFile.dirType.

String org.sleuthkit.datamodel.AbstractFile.getDirTypeAsString ( )

Definition at line 713 of file

int org.sleuthkit.datamodel.AbstractFile.getGid ( )

Get the group id

group id

Definition at line 275 of file

TskData.FileKnown org.sleuthkit.datamodel.AbstractFile.getKnown ( )

Get "knownState" file status - after running a HashDB ingest on it As marked by a knownState file database, such as NSRL

file knownState status enum value

Definition at line 472 of file

References org.sleuthkit.datamodel.AbstractFile.knownState.

String org.sleuthkit.datamodel.AbstractFile.getLocalAbsPath ( )

Get local absolute path of the file, if localPath has been set

local absolute file path if local path has been set, or null

Definition at line 907 of file

References org.sleuthkit.datamodel.AbstractFile.localAbsPath.

String org.sleuthkit.datamodel.AbstractFile.getLocalPath ( )

Get local relative to case db path of the file

local file path if set

Definition at line 898 of file

References org.sleuthkit.datamodel.AbstractFile.localPath.

String org.sleuthkit.datamodel.AbstractFile.getMd5Hash ( )

Get the md5 hash value as calculated, if present

md5 hash string, if it is present or null if it is not

Definition at line 451 of file

References org.sleuthkit.datamodel.AbstractFile.md5Hash.

long org.sleuthkit.datamodel.AbstractFile.getMetaAddr ( )

Get the file meta address

Address of the meta data structure

Definition at line 284 of file

References org.sleuthkit.datamodel.AbstractFile.metaAddr.

Referenced by org.sleuthkit.datamodel.FsContent.isRoot().

String org.sleuthkit.datamodel.AbstractFile.getMetaFlagsAsString ( )
a string representation of the meta flags

Definition at line 737 of file

References org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.ALLOC, and org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.UNALLOC.

long org.sleuthkit.datamodel.AbstractFile.getMetaSeq ( )

Get the file meta address sequence. Only useful with NTFS. Incremented each time a structure is re-allocated.

Address of the meta data structure sequence.

Definition at line 294 of file

References org.sleuthkit.datamodel.AbstractFile.metaSeq.

TSK_FS_META_TYPE_ENUM org.sleuthkit.datamodel.AbstractFile.getMetaType ( )

Get the meta data type

meta data type

Definition at line 696 of file

References org.sleuthkit.datamodel.AbstractFile.metaType.

String org.sleuthkit.datamodel.AbstractFile.getMetaTypeAsString ( )
String org.sleuthkit.datamodel.AbstractFile.getMIMEType ( )

Gets the MIME type of this file.

The MIME type name or null if the MIME type has not been set.

Definition at line 420 of file

References org.sleuthkit.datamodel.AbstractFile.mimeType.

long org.sleuthkit.datamodel.AbstractFile.getMtime ( )

Get the modified time

modified time

Definition at line 248 of file

String org.sleuthkit.datamodel.AbstractFile.getMtimeAsDate ( )

Get the modified time as Date (in local timezone)

modified time as Date

Definition at line 257 of file

References org.sleuthkit.datamodel.AbstractFile.epochToTime().

String org.sleuthkit.datamodel.AbstractFile.getNameExtension ( )

Figures out the extension from the filename, if there is one. We assume that extensions only have ASCII alphanumeric chars

filename extension in lowercase (not including the period) or empty string if there is no extension

Definition at line 483 of file

References org.sleuthkit.datamodel.AbstractContent.getName().

String org.sleuthkit.datamodel.AbstractFile.getParentPath ( )
List<TskFileRange> org.sleuthkit.datamodel.AbstractFile.getRanges ( ) throws TskCoreException

Gets file ranges associated with the file. File ranges are objects in tsk_file_layout table Any file type (especially unallocated) may have 1 or more block ranges associated with it

list of file layout ranges
TskCoreExceptionexception thrown if critical error occurred within tsk core

Definition at line 554 of file

References org.sleuthkit.datamodel.SleuthkitCase.getFileRanges(), org.sleuthkit.datamodel.AbstractContent.getId(), org.sleuthkit.datamodel.AbstractContent.getSleuthkitCase(), and org.sleuthkit.datamodel.AbstractFile.ranges.

Referenced by org.sleuthkit.datamodel.AbstractFile.convertToImgOffset(), org.sleuthkit.datamodel.LayoutFile.getNumParts(), and org.sleuthkit.datamodel.LayoutFile.readInt().

long org.sleuthkit.datamodel.AbstractFile.getSize ( )

Get size of the file

file size in bytes

Implements org.sleuthkit.datamodel.Content.

Definition at line 509 of file

References org.sleuthkit.datamodel.AbstractFile.size.

TskData.TSK_DB_FILES_TYPE_ENUM org.sleuthkit.datamodel.AbstractFile.getType ( )

Gets type of the abstract file as defined in TSK_DB_FILES_TYPE_ENUM

the type of the abstract file

Definition at line 167 of file

References org.sleuthkit.datamodel.AbstractFile.fileType.

int org.sleuthkit.datamodel.AbstractFile.getUid ( )

Get the user id

user id

Definition at line 266 of file

References org.sleuthkit.datamodel.AbstractFile.uid.

boolean org.sleuthkit.datamodel.AbstractFile.isDir ( )

Is this object a directory. Should return true for file system folders and virtual folders.

@return true if directory, false otherwise

Definition at line 625 of file

References org.sleuthkit.datamodel.TskData.TSK_FS_META_TYPE_ENUM.TSK_FS_META_TYPE_DIR.

Referenced by org.sleuthkit.datamodel.AbstractFile.readLocal().

boolean org.sleuthkit.datamodel.AbstractFile.isDirNameFlagSet ( TSK_FS_NAME_FLAG_ENUM  flag)
flagthe TSK_FS_NAME_FLAG_ENUM to check
true if the given flag is set in this FsContent object.

Definition at line 722 of file

boolean org.sleuthkit.datamodel.AbstractFile.isFile ( )

Is this object a file. Should return true for all types of files, including file system, logical, derived, layout, and slack space for files.

@return true if a file, false otherwise

Definition at line 612 of file

References org.sleuthkit.datamodel.TskData.TSK_FS_NAME_TYPE_ENUM.REG, org.sleuthkit.datamodel.TskData.TSK_FS_META_TYPE_ENUM.TSK_FS_META_TYPE_REG, and org.sleuthkit.datamodel.TskData.TSK_FS_META_TYPE_ENUM.TSK_FS_META_TYPE_UNDEF.

boolean org.sleuthkit.datamodel.AbstractFile.isMetaFlagSet ( TSK_FS_META_FLAG_ENUM  metaFlag)
metaFlagthe TSK_FS_META_FLAG_ENUM to check
true if the given meta flag is set in this FsContent object.

Definition at line 752 of file

MimeMatchEnum org.sleuthkit.datamodel.AbstractFile.isMimeType ( SortedSet< String >  mimeTypes)

Determines if this file's type is one of the ones passed in. Uses the blackboard attribute for file type.

mimeTypesSet of file types to compare against

Definition at line 1086 of file

References org.sleuthkit.datamodel.AbstractFile.MimeMatchEnum.FALSE, org.sleuthkit.datamodel.AbstractFile.MimeMatchEnum.TRUE, and org.sleuthkit.datamodel.AbstractFile.MimeMatchEnum.UNDEFINED.

boolean org.sleuthkit.datamodel.AbstractFile.isModeSet ( TskData.TSK_FS_META_MODE_ENUM  mode)

Definition at line 431 of file

References org.sleuthkit.datamodel.AbstractFile.modes.

abstract boolean org.sleuthkit.datamodel.AbstractFile.isRoot ( )

Is this a root of a file system

true if root of a file system, false otherwise
boolean org.sleuthkit.datamodel.AbstractFile.isVirtual ( )

is this a virtual file or directory that was created by The Sleuth Kit or Autopsy for general structure and organization.

@return true if it's virtual, false otherwise

Definition at line 599 of file

References org.sleuthkit.datamodel.AbstractFile.fileType, org.sleuthkit.datamodel.TskData.TSK_FS_META_TYPE_ENUM.TSK_FS_META_TYPE_VIRT, org.sleuthkit.datamodel.TskData.TSK_FS_NAME_TYPE_ENUM.VIRT, and org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM.VIRTUAL_DIR.

List<AbstractFile> org.sleuthkit.datamodel.AbstractFile.listFiles ( ) throws TskCoreException
a list of AbstractFiles that are the children of this Directory. Only returns children of type TskData.TSK_DB_FILES_TYPE_ENUM.FS.

Definition at line 676 of file

References org.sleuthkit.datamodel.Content.getChildren().

void org.sleuthkit.datamodel.AbstractFile.loadLocalFile ( ) throws TskCoreException
final int ( byte[]  buf,
long  offset,
long  len 
) throws TskCoreException

Reads data that this content object is associated with (file contents, volume contents, etc.).

bufa character array of data (in bytes) to copy read data to
offsetbyte offset in the content to start reading from
lennumber of bytes to read into buf.
num of bytes read, or -1 on error
TskCoreExceptionif critical error occurred during read in the tsk core

Implements org.sleuthkit.datamodel.Content.

Definition at line 757 of file

References org.sleuthkit.datamodel.AbstractFile.readInt(), and org.sleuthkit.datamodel.AbstractFile.readLocal().

int org.sleuthkit.datamodel.AbstractFile.readInt ( byte[]  buf,
long  offset,
long  len 
) throws TskCoreException

Internal custom read (non-local) method that child classes can implement

bufbuffer to read into
offsetstart reading position in the file
lennumber of bytes to read
number of bytes read
TskCoreExceptionexception thrown when file could not be read

Definition at line 779 of file

Referenced by

final int org.sleuthkit.datamodel.AbstractFile.readLocal ( byte[]  buf,
long  offset,
long  len 
) throws TskCoreException
void org.sleuthkit.datamodel.AbstractFile.setLocalPath ( String  localPath,
boolean  isAbsolute 

Set local path for the file, as stored in db tsk_files_path, relative to the case db path or an absolute path. When set, subsequent invocations of read() will read the file in the local path.

localPathlocal path to be set
isAbsolutetrue if the path is absolute, false if relative to the case db
Do not make subclasses outside of this package.

Definition at line 1217 of file

static long org.sleuthkit.datamodel.AbstractFile.timeToEpoch ( String  time)

Convert from ISO 8601 formatted date time string to epoch time in seconds

timeformatted date time string as "yyyy-MM-dd HH:mm:ss"
epoch time in seconds

Definition at line 1058 of file

Member Data Documentation

final ResourceBundle org.sleuthkit.datamodel.AbstractFile.bundle = ResourceBundle.getBundle("org.sleuthkit.datamodel.Bundle")

Definition at line 79 of file

long org.sleuthkit.datamodel.AbstractFile.dataSourceObjectId

Definition at line 80 of file

TskData.EncodingType org.sleuthkit.datamodel.AbstractFile.encodingType

Definition at line 62 of file

Referenced by org.sleuthkit.datamodel.AbstractFile.readLocal().

String org.sleuthkit.datamodel.AbstractFile.localAbsPath

absolute path representation of the local path

Definition at line 59 of file

Referenced by org.sleuthkit.datamodel.AbstractFile.getLocalAbsPath(), and org.sleuthkit.datamodel.AbstractFile.readLocal().

volatile RandomAccessFile org.sleuthkit.datamodel.AbstractFile.localFileHandle

Definition at line 60 of file

String org.sleuthkit.datamodel.AbstractFile.localPath

local path as stored in db tsk_files_path, is relative to the db,

Definition at line 58 of file

Referenced by org.sleuthkit.datamodel.DerivedFile.DerivedFile(), org.sleuthkit.datamodel.AbstractFile.getLocalPath(), and org.sleuthkit.datamodel.LocalFile.LocalFile().

boolean org.sleuthkit.datamodel.AbstractFile.localPathSet = false

if set by setLocalPath(), reads are done on local file

Definition at line 57 of file

final Logger org.sleuthkit.datamodel.AbstractFile.logger = Logger.getLogger(AbstractFile.class.getName())

Definition at line 78 of file

final int org.sleuthkit.datamodel.AbstractFile.metaSeq
String org.sleuthkit.datamodel.AbstractFile.mimeType

Definition at line 77 of file

Referenced by org.sleuthkit.datamodel.AbstractFile.getMIMEType().

List<TskFileRange> org.sleuthkit.datamodel.AbstractFile.ranges

Definition at line 64 of file

Referenced by org.sleuthkit.datamodel.AbstractFile.getRanges().

final int org.sleuthkit.datamodel.AbstractFile.uid

The documentation for this class was generated from the following file:

Copyright © 2011-2015 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.