Autopsy
3.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
class | DBPopulationWorker |
Public Member Functions | |
Interval | getBoundingEventsInterval (Interval timeRange, Filter filter) |
FilteredEventsModel | getEventsModel () |
EventsRepository (ReadOnlyObjectProperty< ZoomParams > currentStateProperty) | |
Long | getMaxTime () |
Long | getMinTime () |
void | recordLastArtifactID (long lastArtfID) |
void | recordWasIngestRunning (Boolean wasIngestRunning) |
void | recordLastObjID (Long lastObjID) |
boolean | getWasIngestRunning () |
Long | getLastObjID () |
long | getLastArtfactID () |
TimeLineEvent | getEventById (Long eventID) |
List< AggregateEvent > | getAggregatedEvents (ZoomParams params) |
Map< EventType, Long > | countEvents (ZoomParams params) |
Set< Long > | getEventIDs (Interval timeRange, Filter filter) |
Interval | getSpanningInterval (Collection< Long > eventIDs) |
synchronized void | rebuildRepository (Runnable r) |
Private Member Functions | |
void | invalidateCaches () |
Private Attributes | |
final EventDB | eventDB |
SwingWorker< Void, ProgressWindow.ProgressUpdate > | dbPopulationWorker |
final LoadingCache< Object, Long > | maxCache |
final LoadingCache< Object, Long > | minCache |
final FilteredEventsModel | modelInstance |
final LoadingCache< Long, TimeLineEvent > | idToEventCache |
final LoadingCache< ZoomParams, Map< EventType, Long > > | eventCountsCache |
final LoadingCache< ZoomParams, List< AggregateEvent > > | aggregateEventsCache |
Static Private Attributes | |
static final String | FILES_AND_DIRS_WHERE_CLAUSE = "name != '.' AND name != '..'" |
static final Logger | LOGGER = Logger.getLogger(EventsRepository.class.getName()) |
Provides public API (over EventsDB) to access events. In theory this insulates the rest of the timeline module form the details of the db implementation. Since there are no other implementations of the database or clients of this class, and no Java Interface defined yet, in practice this just delegates everything to the eventDB
Concurrency Policy:
Since almost everything just delegates to the EventDB, which is internally synchronized, we only have to worry about rebuildRepository() which we synchronize on our intrinsic lock.
Definition at line 73 of file EventsRepository.java.
org.sleuthkit.autopsy.timeline.events.db.EventsRepository.EventsRepository | ( | ReadOnlyObjectProperty< ZoomParams > | currentStateProperty | ) |
Definition at line 108 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.aggregateEventsCache, org.sleuthkit.autopsy.timeline.events.db.EventsRepository.eventCountsCache, org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.timeline.events.db.EventDB.getEventDB(), org.sleuthkit.autopsy.timeline.events.db.EventsRepository.idToEventCache, org.sleuthkit.autopsy.timeline.events.db.EventsRepository.maxCache, org.sleuthkit.autopsy.timeline.events.db.EventsRepository.minCache, and org.sleuthkit.autopsy.timeline.events.db.EventsRepository.modelInstance.
Map<EventType, Long> org.sleuthkit.autopsy.timeline.events.db.EventsRepository.countEvents | ( | ZoomParams | params | ) |
Definition at line 171 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.eventCountsCache.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventCounts().
List<AggregateEvent> org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getAggregatedEvents | ( | ZoomParams | params | ) |
Definition at line 166 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.aggregateEventsCache.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getAggregatedEvents().
Interval org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getBoundingEventsInterval | ( | Interval | timeRange, |
Filter | filter | ||
) |
Definition at line 96 of file EventsRepository.java.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getBoundingEventsInterval().
TimeLineEvent org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getEventById | ( | Long | eventID | ) |
Definition at line 162 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.idToEventCache.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventById().
Set<Long> org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getEventIDs | ( | Interval | timeRange, |
Filter | filter | ||
) |
Definition at line 183 of file EventsRepository.java.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventIDs().
FilteredEventsModel org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getEventsModel | ( | ) |
Definition at line 104 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.modelInstance.
Referenced by org.sleuthkit.autopsy.timeline.TimeLineController.TimeLineController().
long org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getLastArtfactID | ( | ) |
Definition at line 159 of file EventsRepository.java.
Long org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getLastObjID | ( | ) |
Definition at line 156 of file EventsRepository.java.
Long org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getMaxTime | ( | ) |
Definition at line 129 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.maxCache.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getMaxTime().
Long org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getMinTime | ( | ) |
Definition at line 135 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.minCache.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getMinTime().
Interval org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getSpanningInterval | ( | Collection< Long > | eventIDs | ) |
Definition at line 187 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.db.EventDB.getSpanningInterval().
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getSpanningInterval(), and org.sleuthkit.autopsy.timeline.TimeLineController.TimeLineController().
boolean org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getWasIngestRunning | ( | ) |
Definition at line 152 of file EventsRepository.java.
|
private |
Definition at line 176 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.aggregateEventsCache, org.sleuthkit.autopsy.timeline.events.db.EventsRepository.eventCountsCache, org.sleuthkit.autopsy.timeline.events.db.EventsRepository.maxCache, and org.sleuthkit.autopsy.timeline.events.db.EventsRepository.minCache.
Referenced by org.sleuthkit.autopsy.timeline.events.db.EventsRepository.DBPopulationWorker.doInBackground().
synchronized void org.sleuthkit.autopsy.timeline.events.db.EventsRepository.rebuildRepository | ( | Runnable | r | ) |
Definition at line 191 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.dbPopulationWorker.
void org.sleuthkit.autopsy.timeline.events.db.EventsRepository.recordLastArtifactID | ( | long | lastArtfID | ) |
Definition at line 140 of file EventsRepository.java.
void org.sleuthkit.autopsy.timeline.events.db.EventsRepository.recordLastObjID | ( | Long | lastObjID | ) |
Definition at line 148 of file EventsRepository.java.
void org.sleuthkit.autopsy.timeline.events.db.EventsRepository.recordWasIngestRunning | ( | Boolean | wasIngestRunning | ) |
Definition at line 144 of file EventsRepository.java.
|
private |
Definition at line 94 of file EventsRepository.java.
Referenced by org.sleuthkit.autopsy.timeline.events.db.EventsRepository.EventsRepository(), org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getAggregatedEvents(), and org.sleuthkit.autopsy.timeline.events.db.EventsRepository.invalidateCaches().
|
private |
Definition at line 82 of file EventsRepository.java.
Referenced by org.sleuthkit.autopsy.timeline.events.db.EventsRepository.rebuildRepository().
|
private |
|
private |
Definition at line 77 of file EventsRepository.java.
|
staticprivate |
Definition at line 75 of file EventsRepository.java.
|
private |
Definition at line 90 of file EventsRepository.java.
Referenced by org.sleuthkit.autopsy.timeline.events.db.EventsRepository.EventsRepository(), and org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getEventById().
|
staticprivate |
Definition at line 79 of file EventsRepository.java.
|
private |
|
private |
|
private |
Definition at line 88 of file EventsRepository.java.
Referenced by org.sleuthkit.autopsy.timeline.events.db.EventsRepository.EventsRepository(), and org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getEventsModel().
Copyright © 2012-2015 Basis Technology. Generated on: Mon Oct 19 2015
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.