Autopsy
4.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits Closeable.
Classes | |
class | TagNameAlreadyExistsException |
Public Member Functions | |
BlackboardArtifactTag | addBlackboardArtifactTag (BlackboardArtifact artifact, TagName tagName) throws TskCoreException |
BlackboardArtifactTag | addBlackboardArtifactTag (BlackboardArtifact artifact, TagName tagName, String comment) throws TskCoreException |
ContentTag | addContentTag (Content content, TagName tagName) throws TskCoreException |
ContentTag | addContentTag (Content content, TagName tagName, String comment) throws TskCoreException |
ContentTag | addContentTag (Content content, TagName tagName, String comment, long beginByteOffset, long endByteOffset) throws IllegalArgumentException, TskCoreException |
TagName | addTagName (String displayName) throws TagNameAlreadyExistsException, TskCoreException |
TagName | addTagName (String displayName, String description) throws TagNameAlreadyExistsException, TskCoreException |
synchronized TagName | addTagName (String displayName, String description, TagName.HTML_COLOR color) throws TagNameAlreadyExistsException, TskCoreException |
synchronized void | close () throws IOException |
void | deleteBlackboardArtifactTag (BlackboardArtifactTag tag) throws TskCoreException |
void | deleteContentTag (ContentTag tag) throws TskCoreException |
synchronized List< BlackboardArtifactTag > | getAllBlackboardArtifactTags () throws TskCoreException |
synchronized List< ContentTag > | getAllContentTags () throws TskCoreException |
synchronized List< TagName > | getAllTagNames () throws TskCoreException |
synchronized BlackboardArtifactTag | getBlackboardArtifactTagByTagID (long tagID) throws TskCoreException |
synchronized List< BlackboardArtifactTag > | getBlackboardArtifactTagsByArtifact (BlackboardArtifact artifact) throws TskCoreException |
synchronized List< BlackboardArtifactTag > | getBlackboardArtifactTagsByTagName (TagName tagName) throws TskCoreException |
synchronized long | getBlackboardArtifactTagsCountByTagName (TagName tagName) throws TskCoreException |
synchronized ContentTag | getContentTagByTagID (long tagID) throws TskCoreException |
synchronized List< ContentTag > | getContentTagsByContent (Content content) throws TskCoreException |
synchronized List< ContentTag > | getContentTagsByTagName (TagName tagName) throws TskCoreException |
synchronized long | getContentTagsCountByTagName (TagName tagName) throws TskCoreException |
synchronized List< TagName > | getTagNamesInUse () throws TskCoreException |
synchronized boolean | tagNameExists (String tagDisplayName) |
Private Member Functions | |
void | addPredefinedTagNames () |
void | addTagNamesFromCurrentCase () |
void | addTagNamesFromTagsSettings () |
void | lazyLoadExistingTagNames () |
void | saveTagNamesToTagsSettings () |
Private Attributes | |
final SleuthkitCase | caseDb |
boolean | tagNamesLoaded = false |
final HashMap< String, TagName > | uniqueTagNames = new HashMap<>() |
Static Private Attributes | |
static final Logger | logger = Logger.getLogger(TagsManager.class.getName()) |
static final String | TAG_NAMES_SETTING_KEY = "TagNames" |
static final String | TAGS_SETTINGS_NAME = "Tags" |
A per case Autopsy service that manages the creation, updating, and deletion of tags applied to content and blackboard artifacts by users.
Definition at line 43 of file TagsManager.java.
BlackboardArtifactTag org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag | ( | BlackboardArtifact | artifact, |
TagName | tagName | ||
) | throws TskCoreException |
Tags a blackboard artifact object.
artifact | The blackboard artifact to tag. |
tagName | The name to use for the tag. |
TskCoreException | If there is an error adding the tag to the case database. |
Definition at line 363 of file TagsManager.java.
Referenced by org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.addTag().
BlackboardArtifactTag org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag | ( | BlackboardArtifact | artifact, |
TagName | tagName, | ||
String | comment | ||
) | throws TskCoreException |
Tags a blackboard artifact object.
artifact | The blackboard artifact to tag. |
tagName | The name to use for the tag. |
comment | A comment to store with the tag. |
TskCoreException | If there is an error adding the tag to the case database. |
Definition at line 380 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames(), and org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagAdded().
ContentTag org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag | ( | Content | content, |
TagName | tagName | ||
) | throws TskCoreException |
Tags a content object.
content | The content to tag. |
tagName | The name to use for the tag. |
TskCoreException | If there is an error adding the tag to the case database. |
Definition at line 184 of file TagsManager.java.
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag(), and org.sleuthkit.autopsy.actions.AddContentTagAction.addTag().
ContentTag org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag | ( | Content | content, |
TagName | tagName, | ||
String | comment | ||
) | throws TskCoreException |
Tags a content object.
content | The content to tag. |
tagName | The name to use for the tag. |
comment | A comment to store with the tag. |
TskCoreException | If there is an error adding the tag to the case database. |
Definition at line 200 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag().
ContentTag org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag | ( | Content | content, |
TagName | tagName, | ||
String | comment, | ||
long | beginByteOffset, | ||
long | endByteOffset | ||
) | throws IllegalArgumentException, TskCoreException |
Tags a content object or a section of a content object.
content | The content to tag. |
tagName | The name to use for the tag. |
comment | A comment to store with the tag. |
beginByteOffset | Designates the beginning of a tagged section. |
endByteOffset | Designates the end of a tagged section. |
IllegalArgumentException | If a requested byte offset is out of range. |
TskCoreException | If there is an error adding the tag to the case database. |
Definition at line 220 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames(), and org.sleuthkit.autopsy.casemodule.Case.notifyContentTagAdded().
|
private |
Adds the standard tag names to the tag names collection.
Definition at line 559 of file TagsManager.java.
References org.sleuthkit.autopsy.coreutils.Logger.getLogger().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
TagName org.sleuthkit.autopsy.casemodule.services.TagsManager.addTagName | ( | String | displayName | ) | throws TagNameAlreadyExistsException, TskCoreException |
Adds a new tag name to the current case and to the tags settings.
displayName | The display name for the new tag name. |
TagNameAlreadyExistsException | If the tag name would be a duplicate. |
TskCoreException | If there is an error adding the tag to the case database. |
Definition at line 116 of file TagsManager.java.
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addTagName(), and org.sleuthkit.autopsy.actions.GetTagNameDialog.okButtonActionPerformed().
TagName org.sleuthkit.autopsy.casemodule.services.TagsManager.addTagName | ( | String | displayName, |
String | description | ||
) | throws TagNameAlreadyExistsException, TskCoreException |
Adds a new tag name to the current case and to the tags settings.
displayName | The display name for the new tag name. |
description | The description for the new tag name. |
TagNameAlreadyExistsException | If the tag name would be a duplicate. |
TskCoreException | If there is an error adding the tag to the case database. |
Definition at line 134 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.addTagName().
synchronized TagName org.sleuthkit.autopsy.casemodule.services.TagsManager.addTagName | ( | String | displayName, |
String | description, | ||
TagName.HTML_COLOR | color | ||
) | throws TagNameAlreadyExistsException, TskCoreException |
Adds a new tag name to the current case and to the tags settings.
displayName | The display name for the new tag name. |
description | The description for the new tag name. |
color | The HTML color to associate with the new tag name. |
TagNameAlreadyExistsException | If the tag name would be a duplicate. |
TskCoreException | If there is an error adding the tag to the case database. |
Definition at line 153 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames(), and org.sleuthkit.autopsy.casemodule.services.TagsManager.saveTagNamesToTagsSettings().
|
private |
Adds any tag names that are in the case database to the tag names collection.
Definition at line 518 of file TagsManager.java.
References org.sleuthkit.autopsy.coreutils.Logger.getLogger().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
|
private |
Adds any tag names that are in the properties file to the tag names collection and to the case database. The properties file is used to make it possible to use tag names across cases.
Definition at line 534 of file TagsManager.java.
References org.sleuthkit.autopsy.coreutils.ModuleSettings.getConfigSetting(), and org.sleuthkit.autopsy.coreutils.Logger.getLogger().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
synchronized void org.sleuthkit.autopsy.casemodule.services.TagsManager.close | ( | ) | throws IOException |
Saves the avaialble tag names to secondary storage.
Definition at line 496 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.saveTagNamesToTagsSettings().
void org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag | ( | BlackboardArtifactTag | tag | ) | throws TskCoreException |
Deletes a blackboard artifact tag.
tag | The tag to delete. |
TskCoreException | If there is an error deleting the tag from the case database. |
Definition at line 403 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames(), and org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagDeleted().
Referenced by org.sleuthkit.autopsy.actions.DeleteBlackboardArtifactTagAction.actionPerformed().
void org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag | ( | ContentTag | tag | ) | throws TskCoreException |
Deletes a content tag.
tag | The tag to delete. |
TskCoreException | If there is an error deleting the tag from the case database. |
Definition at line 263 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames(), and org.sleuthkit.autopsy.casemodule.Case.notifyContentTagDeleted().
Referenced by org.sleuthkit.autopsy.actions.DeleteContentTagAction.actionPerformed().
synchronized List<BlackboardArtifactTag> org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllBlackboardArtifactTags | ( | ) | throws TskCoreException |
Gets all blackboard artifact tags for the current case.
TskCoreException | If there is an error getting the tags from the case database. |
Definition at line 424 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call(), and org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.makeBlackboardArtifactTagsTables().
synchronized List<ContentTag> org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllContentTags | ( | ) | throws TskCoreException |
Gets all content tags for the current case.
TskCoreException | If there is an error getting the tags from the case database. |
Definition at line 284 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call(), and org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.makeContentTagsTables().
synchronized List<TagName> org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllTagNames | ( | ) | throws TskCoreException |
Gets a list of all tag names currently available for tagging content or artifacts.
TskCoreException | If there is an error reading from the case database. |
Definition at line 72 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
Referenced by org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.GetTagNameAndCommentDialog(), and org.sleuthkit.autopsy.actions.GetTagNameDialog.GetTagNameDialog().
synchronized BlackboardArtifactTag org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagByTagID | ( | long | tagID | ) | throws TskCoreException |
Gets a blackboard artifact tag by tag id.
tagID | The tag id of interest. |
TskCoreException | If there is an error getting the tag from the case database. |
Definition at line 455 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
synchronized List<BlackboardArtifactTag> org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact | ( | BlackboardArtifact | artifact | ) | throws TskCoreException |
Gets blackboard artifact tags for a particular blackboard artifact.
artifact | The blackboard artifact of interest. |
TskCoreException | If there is an error getting the tags from the case database. |
Definition at line 487 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
Referenced by org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleArtifactTagDeleted(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertEventForArtifact().
synchronized List<BlackboardArtifactTag> org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByTagName | ( | TagName | tagName | ) | throws TskCoreException |
Gets blackboard artifact tags by tag name.
tagName | The tag name of interest. |
TskCoreException | If there is an error getting the tags from the case database. |
Definition at line 471 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
Referenced by org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagNodeFactory.createKeys().
synchronized long org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsCountByTagName | ( | TagName | tagName | ) | throws TskCoreException |
Gets blackboard artifact tags count by tag name.
tagName | The tag name of interest. |
TskCoreException | If there is an error getting the tags count from the case database. |
Definition at line 440 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
Referenced by org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), and org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagTypeNode.updateDisplayName().
synchronized ContentTag org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagByTagID | ( | long | tagID | ) | throws TskCoreException |
Gets a content tag by tag id.
tagID | The tag id of interest. |
TskCoreException | If there is an error getting the tag from the case database. |
Definition at line 314 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
synchronized List<ContentTag> org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent | ( | Content | content | ) | throws TskCoreException |
Gets content tags count by content.
content | The content of interest. |
TskCoreException | If there is an error getting the tags from the case database. |
Definition at line 346 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
Referenced by org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleContentTagDeleted(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertEventsForFile().
synchronized List<ContentTag> org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByTagName | ( | TagName | tagName | ) | throws TskCoreException |
Gets content tags by tag name.
tagName | The tag name of interest. |
TskCoreException | If there is an error getting the tags from the case database. |
Definition at line 330 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
Referenced by org.sleuthkit.autopsy.datamodel.Tags.ContentTagNodeFactory.createKeys().
synchronized long org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsCountByTagName | ( | TagName | tagName | ) | throws TskCoreException |
Gets content tags count by tag name.
tagName | The tag name of interest. |
TskCoreException | If there is an error getting the tags count from the case database. |
Definition at line 299 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
Referenced by org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), and org.sleuthkit.autopsy.datamodel.Tags.ContentTagTypeNode.updateDisplayName().
synchronized List<TagName> org.sleuthkit.autopsy.casemodule.services.TagsManager.getTagNamesInUse | ( | ) | throws TskCoreException |
Gets a list of all tag names currently in use for tagging content or artifacts.
TskCoreException | If there is an error reading from the case database. |
Definition at line 86 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
Referenced by org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.createKeys().
|
private |
Populates the tag names collection and the tag names table in the case database with the existing tag names from all sources.
Definition at line 504 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.addPredefinedTagNames(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addTagNamesFromCurrentCase(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addTagNamesFromTagsSettings(), and org.sleuthkit.autopsy.casemodule.services.TagsManager.saveTagNamesToTagsSettings().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addTagName(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllBlackboardArtifactTags(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllContentTags(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllTagNames(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagByTagID(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByTagName(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsCountByTagName(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagByTagID(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByTagName(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsCountByTagName(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getTagNamesInUse(), and org.sleuthkit.autopsy.casemodule.services.TagsManager.tagNameExists().
|
private |
Saves the tag names to a properties file. The properties file is used to make it possible to use tag names across cases.
Definition at line 575 of file TagsManager.java.
References org.sleuthkit.autopsy.coreutils.ModuleSettings.setConfigSetting().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addTagName(), org.sleuthkit.autopsy.casemodule.services.TagsManager.close(), and org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
synchronized boolean org.sleuthkit.autopsy.casemodule.services.TagsManager.tagNameExists | ( | String | tagDisplayName | ) |
Checks whether a tag name with a given display name exists.
tagDisplayName | The display name to check. |
Definition at line 98 of file TagsManager.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.lazyLoadExistingTagNames().
|
private |
Definition at line 48 of file TagsManager.java.
|
staticprivate |
Definition at line 45 of file TagsManager.java.
|
staticprivate |
Definition at line 47 of file TagsManager.java.
|
private |
Definition at line 50 of file TagsManager.java.
|
staticprivate |
Definition at line 46 of file TagsManager.java.
|
private |
Definition at line 49 of file TagsManager.java.
Copyright © 2012-2015 Basis Technology. Generated on: Wed Apr 6 2016
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.