Autopsy
3.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.externalresults.ExternalResultsParser.
Classes | |
enum | AttributeNames |
enum | AttributeValues |
enum | TagNames |
Public Member Functions | |
ExternalResultsXMLParser (Content dataSource, String resultsFilePath) | |
ExternalResults | parse () |
List< ErrorInfo > | getErrorInfo () |
Private Member Functions | |
void | parseDerivedFiles (Element rootElement) |
void | parseArtifacts (final Element root) |
void | parseArtifactAttributes (final Element artifactElem, ExternalResults.Artifact artifact) |
String | parseArtifactAttributeValueType (Element valueElem) |
void | parseReports (Element root) |
String | getElementAttributeValue (Element element, String attributeName) |
String | getChildElementContent (Element parentElement, String childElementTagName, boolean required) |
Element | getChildElement (Element parentElement, String childElementTagName) |
void | recordError (String errorMessage) |
void | recordError (String errorMessage, Exception ex) |
Private Attributes | |
final Content | dataSource |
final String | resultsFilePath |
ExternalResults | resultsData |
List< ErrorInfo > | errors = new ArrayList<>() |
Static Private Attributes | |
static final Logger | logger = Logger.getLogger(ExternalResultsXMLParser.class.getName()) |
static final String | XSD_FILE = "autopsy_external_results.xsd" |
Parses an XML representation of of results data (e.g., artifacts, derived files, reports) generated by a process external to Autopsy.
Definition at line 37 of file ExternalResultsXMLParser.java.
org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.ExternalResultsXMLParser | ( | Content | dataSource, |
String | resultsFilePath | ||
) |
Constructor.
resultsFilePath | Full path of the results file to be parsed. |
Definition at line 121 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.dataSource, and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.resultsFilePath.
|
private |
Definition at line 324 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.recordError(), and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.resultsFilePath.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getChildElementContent(), and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifactAttributes().
|
private |
Definition at line 301 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getChildElement(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.recordError(), and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.resultsFilePath.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifactAttributes(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifacts(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseDerivedFiles(), and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseReports().
|
private |
Definition at line 290 of file ExternalResultsXMLParser.java.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifactAttributes(), and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifacts().
List<ErrorInfo> org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getErrorInfo | ( | ) |
Gets error information describing any errors encountered while parsing the input results representation.
Implements org.sleuthkit.autopsy.externalresults.ExternalResultsParser.
Definition at line 158 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.errors.
Referenced by org.sleuthkit.autopsy.examples.SampleExecutableDataSourceIngestModule.process().
ExternalResults org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parse | ( | ) |
Converts some representation of results data generated by a process external to Autopsy and supplied to the parser via its constructor into a form ready for import into Autopsy.
Implements org.sleuthkit.autopsy.externalresults.ExternalResultsParser.
Definition at line 127 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.coreutils.XMLUtil.loadDoc(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifacts(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseDerivedFiles(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseReports(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.recordError(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.resultsData, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.resultsFilePath, and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.ROOT_ELEM.
Referenced by org.sleuthkit.autopsy.examples.SampleExecutableDataSourceIngestModule.process().
|
private |
Definition at line 210 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.ATTRIBUTE_ELEM, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getChildElement(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getChildElementContent(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getElementAttributeValue(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifactAttributeValueType(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.recordError(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.resultsFilePath, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.SOURCE_MODULE_ELEM, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.AttributeNames.TYPE_ATTR, and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.VALUE_ELEM.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifacts().
|
private |
Definition at line 244 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.recordError(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.AttributeNames.TYPE_ATTR, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.VALUE_ELEM, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.AttributeValues.VALUE_TYPE_DOUBLE, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.AttributeValues.VALUE_TYPE_INT32, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.AttributeValues.VALUE_TYPE_INT64, and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.AttributeValues.VALUE_TYPE_TEXT.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifactAttributes().
|
private |
Definition at line 186 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.ARTIFACT_ELEM, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.ARTIFACTS_LIST_ELEM, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getChildElementContent(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getElementAttributeValue(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifactAttributes(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.SOURCE_FILE_ELEM, and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.AttributeNames.TYPE_ATTR.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parse().
|
private |
Definition at line 162 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.DERIVED_FILE_ELEM, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.DERIVED_FILES_LIST_ELEM, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getChildElementContent(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.LOCAL_PATH_ELEM, and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.PARENT_FILE_ELEM.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parse().
|
private |
Definition at line 264 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getChildElementContent(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.LOCAL_PATH_ELEM, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.REPORT_ELEM, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.REPORT_NAME_ELEM, org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.REPORTS_LIST_ELEM, and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.TagNames.SOURCE_MODULE_ELEM.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parse().
|
private |
Definition at line 340 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.logger.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getChildElement(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getChildElementContent(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parse(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifactAttributes(), and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifactAttributeValueType().
|
private |
Definition at line 345 of file ExternalResultsXMLParser.java.
References org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.logger.
|
private |
Definition at line 41 of file ExternalResultsXMLParser.java.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.ExternalResultsXMLParser().
|
private |
Definition at line 44 of file ExternalResultsXMLParser.java.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getErrorInfo().
|
staticprivate |
Definition at line 39 of file ExternalResultsXMLParser.java.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.recordError().
|
private |
Definition at line 43 of file ExternalResultsXMLParser.java.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parse().
|
private |
Definition at line 42 of file ExternalResultsXMLParser.java.
Referenced by org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.ExternalResultsXMLParser(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getChildElement(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.getChildElementContent(), org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parse(), and org.sleuthkit.autopsy.externalresults.ExternalResultsXMLParser.parseArtifactAttributes().
|
staticprivate |
Definition at line 40 of file ExternalResultsXMLParser.java.
Copyright © 2012-2015 Basis Technology. Generated on: Mon Oct 19 2015
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.