Autopsy
4.10.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
class | CancelButtonListener |
enum | CaseType |
enum | Events |
class | TaskThreadFactory |
Public Member Functions | |
Image | addImage (String imgPath, long imgId, String timeZone) throws CaseActionException |
void | addReport (String localPath, String srcModuleName, String reportName) throws TskCoreException |
Report | addReport (String localPath, String srcModuleName, String reportName, Content parent) throws TskCoreException |
void | closeCase () throws CaseActionException |
SleuthkitCase | createPortableCase (String caseName, File portableCaseFolder) throws TskCoreException |
void | deleteReports (Collection<?extends Report > reports) throws TskCoreException |
void | deleteReports (Collection<?extends Report > reports, boolean deleteFromDisk) throws TskCoreException |
List< Report > | getAllReports () throws TskCoreException |
String | getCacheDirectory () |
String | getCaseDirectory () |
String | getCaseNotes () |
CaseType | getCaseType () |
String | getConfigDirectory () |
String | getCreatedDate () |
List< Content > | getDataSources () throws TskCoreException |
String | getDisplayName () |
String | getExaminer () |
String | getExaminerEmail () |
String | getExaminerPhone () |
String | getExportDirectory () |
String | getLogDirectoryPath () |
String | getModuleDirectory () |
String | getModuleOutputDirectoryRelativePath () |
String | getModulesOutputDirAbsPath () |
String | getName () |
String | getNumber () |
String | getOutputDirectory () |
String | getReportDirectory () |
Services | getServices () |
SleuthkitCase | getSleuthkitCase () |
String | getTempDirectory () |
String | getTextIndexName () |
Set< TimeZone > | getTimeZone () |
Set< TimeZone > | getTimeZones () |
boolean | hasData () |
void | notifyAddingDataSource (UUID eventId) |
void | notifyBlackBoardArtifactTagAdded (BlackboardArtifactTag newTag) |
void | notifyBlackBoardArtifactTagDeleted (BlackboardArtifactTag deletedTag) |
void | notifyCentralRepoCommentChanged (long contentId, String newComment) |
void | notifyContentTagAdded (ContentTag newTag) |
void | notifyContentTagDeleted (ContentTag deletedTag) |
void | notifyDataSourceAdded (Content dataSource, UUID addingDataSourceEventId) |
void | notifyDataSourceNameChanged (Content dataSource, String newName) |
void | notifyFailedAddingDataSource (UUID addingDataSourceEventId) |
void | notifyTagDefinitionChanged (String changedTagName) |
Static Public Member Functions | |
static void | addEventSubscriber (Set< String > eventNames, PropertyChangeListener subscriber) |
static void | addEventSubscriber (String eventName, PropertyChangeListener subscriber) |
static void | addEventTypeSubscriber (Set< Events > eventTypes, PropertyChangeListener subscriber) |
static void | addPropertyChangeListener (PropertyChangeListener listener) |
static void | closeCurrentCase () throws CaseActionException |
static String | convertTimeZone (String timeZoneId) |
static void | create (String caseDir, String caseDisplayName, String caseNumber, String examiner) throws CaseActionException |
static void | create (String caseDir, String caseDisplayName, String caseNumber, String examiner, CaseType caseType) throws CaseActionException |
static void | createAsCurrentCase (String caseDir, String caseDisplayName, String caseNumber, String examiner, CaseType caseType) throws CaseActionException, CaseActionCancelledException |
static void | createAsCurrentCase (CaseType caseType, String caseDir, CaseDetails caseDetails) throws CaseActionException, CaseActionCancelledException |
static void | createCaseDirectory (String caseDirPath, CaseType caseType) throws CaseActionException |
static void | deleteCase (CaseMetadata metadata) throws CaseActionException |
static void | deleteCurrentCase () throws CaseActionException |
static boolean | existsCurrentCase () |
static String | getAppName () |
static String | getAutopsyVersion () |
static Case | getCurrentCase () |
static Case | getCurrentCaseThrows () throws NoCurrentCaseException |
static String | getModulesOutputDirRelPath () |
static PropertyChangeSupport | getPropertyChangeSupport () |
static void | invokeStartupDialog () |
static boolean | isCaseOpen () |
static boolean | isValidName (String caseName) |
static void | open (String caseMetadataFilePath) throws CaseActionException |
static void | openAsCurrentCase (String caseMetadataFilePath) throws CaseActionException |
static boolean | pathExists (String filePath) |
static void | removeEventSubscriber (String eventName, PropertyChangeListener subscriber) |
static void | removeEventSubscriber (Set< String > eventNames, PropertyChangeListener subscriber) |
static void | removeEventTypeSubscriber (Set< Events > eventTypes, PropertyChangeListener subscriber) |
static void | removePropertyChangeListener (PropertyChangeListener listener) |
Private Member Functions | |
Case (CaseType caseType, String caseDir, CaseDetails caseDetails) | |
Case (CaseMetadata caseMetaData) | |
void | acquireSharedCaseDirLock (String caseDir) throws CaseActionException |
void | close () throws CaseActionException |
void | close (ProgressIndicator progressIndicator) |
void | closeAppServiceCaseResources () |
void | createCaseDatabase (ProgressIndicator progressIndicator) throws CaseActionException |
void | createCaseDirectoryIfDoesNotExist (ProgressIndicator progressIndicator) throws CaseActionException |
void | createCaseNodeData (ProgressIndicator progressIndicator) throws CaseActionException |
void | deleteTempfilesFromCaseDirectory (ProgressIndicator progressIndicator) |
String | getOrCreateSubdirectory (String subDirectoryName) |
void | open (boolean isNewCase) throws CaseActionException |
void | open (boolean isNewCase, ProgressIndicator progressIndicator) throws CaseActionException |
void | openAppServiceCaseResources (ProgressIndicator progressIndicator) throws CaseActionException |
void | openCaseDataBase (ProgressIndicator progressIndicator) throws CaseActionException |
void | openCaseLevelServices (ProgressIndicator progressIndicator) |
void | openCommunicationChannels (ProgressIndicator progressIndicator) throws CaseActionException |
void | releaseSharedCaseDirLock (String caseDir) |
void | saveCaseMetadataToFile (ProgressIndicator progressIndicator) throws CaseActionException |
void | switchLoggingToCaseLogsDirectory (ProgressIndicator progressIndicator) |
void | updateCaseNodeData (ProgressIndicator progressIndicator) throws CaseActionException |
Static Private Member Functions | |
static CoordinationService.Lock | acquireExclusiveCaseResourcesLock (String caseDir) throws CaseActionException |
static void | checkForUserCancellation () throws CaseActionCancelledException |
static void | clearTempSubDir (String tempSubDirPath) |
static void | deleteCase (CaseMetadata metadata, ProgressIndicator progressIndicator) throws CaseActionException |
static String | displayNameToUniqueName (String caseDisplayName) |
static String | getNameForTitle () |
static void | openAsCurrentCase (Case newCurrentCase, boolean isNewCase) throws CaseActionException, CaseActionCancelledException |
static void | updateGUIForCaseClosed () |
static void | updateGUIForCaseOpened (Case newCurrentCase) |
Private Attributes | |
SleuthkitCase | caseDb |
CoordinationService.Lock | caseDirLock |
volatile ExecutorService | caseLockingExecutor |
Services | caseServices |
CollaborationMonitor | collaborationMonitor |
boolean | hasDataSources |
final CaseMetadata | metadata |
Static Private Attributes | |
static final String | CACHE_FOLDER = "Cache" |
static final String | CASE_ACTION_THREAD_NAME = "%s-case-action" |
static final String | CASE_RESOURCES_THREAD_NAME = "%s-manage-case-resources" |
static final Object | caseActionSerializationLock = new Object() |
static final String | CONFIG_FOLDER = "Config" |
static volatile Case | currentCase |
static final int | DIR_LOCK_TIMOUT_HOURS = 12 |
static final String | EVENT_CHANNEL_NAME = "%s-Case-Events" |
static final AutopsyEventPublisher | eventPublisher = new AutopsyEventPublisher() |
static final String | EXPORT_FOLDER = "Export" |
static final String | LOG_FOLDER = "Log" |
static final Logger | logger = Logger.getLogger(Case.class.getName()) |
static volatile Frame | mainFrame |
static final String | MODULE_FOLDER = "ModuleOutput" |
static final String | REPORTS_FOLDER = "Reports" |
static final int | RESOURCES_LOCK_TIMOUT_HOURS = 12 |
static final String | SINGLE_USER_CASE_DB_NAME = "autopsy.db" |
static final String | TEMP_FOLDER = "Temp" |
An Autopsy case. Currently, only one case at a time may be open.
|
private |
Constructs a Case object for a new Autopsy case.
caseType | The type of case (single-user or multi-user). |
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDetails | Contains details of the case, such as examiner, display name, etc |
Definition at line 1822 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.displayNameToUniqueName(), and org.sleuthkit.autopsy.casemodule.CaseDetails.getCaseDisplayName().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
private |
|
staticprivate |
Acquires an exclusive case resources lock.
caseDir | The full path of the case directory. |
CaseActionException | with a user-friendly message if the lock cannot be acquired due to an exception. |
Definition at line 1102 of file Case.java.
References org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), and org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetExclusiveLock().
Referenced by org.sleuthkit.autopsy.casemodule.Case.close(), and org.sleuthkit.autopsy.casemodule.Case.open().
|
private |
Acquires a shared case directory lock for the current case.
caseDir | The full path of the case directory. |
CaseActionException | with a user-friendly message if the lock cannot be acquired. |
Definition at line 2649 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseDirLock, org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), and org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetSharedLock().
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
static |
Adds a subscriber to specific case events.
eventNames | The events the subscriber is interested in. |
subscriber | The subscriber (PropertyChangeListener) to add. |
Definition at line 427 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().
Referenced by org.sleuthkit.autopsy.casemodule.Case.addPropertyChangeListener().
|
static |
Adds a subscriber to specific case events.
eventName | The event the subscriber is interested in. |
subscriber | The subscriber (PropertyChangeListener) to add. |
Definition at line 452 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().
|
static |
Adds a subscriber to specific case events.
eventTypes | The events the subscriber is interested in. |
subscriber | The subscriber (PropertyChangeListener) to add. |
Definition at line 437 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().
Referenced by org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.addNotify(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.addNotify(), org.sleuthkit.autopsy.communications.FiltersPanel.addNotify(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.ExtractedContent.TypeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.addNotify(), org.sleuthkit.autopsy.communications.VisualizationPanel.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.addNotify(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ViewModeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.addNotify(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.FileTypesByExtObservable(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.GlobalSettingsPanel(), org.sleuthkit.autopsy.datamodel.ImageNode.ImageNode(), org.sleuthkit.autopsy.report.ReportWizardAction.ReportWizardAction(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToCaseEvents(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.subscribeToChangeEvents(), org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.ViewPreferencesPanel(), and org.sleuthkit.autopsy.datamodel.VolumeNode.VolumeNode().
Image org.sleuthkit.autopsy.casemodule.Case.addImage | ( | String | imgPath, |
long | imgId, | ||
String | timeZone | ||
) | throws CaseActionException |
Adds an image to the current case after it has been added to the DB. Sends out event and reopens windows if needed.
imgPath | The path of the image file. |
imgId | The ID of the image. |
timeZone | The time zone of the image. |
Definition at line 3028 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceAdded().
|
static |
Adds a subscriber to all case events. To subscribe to only specific events, use one of the overloads of addEventSubscriber.
listener | The subscriber (PropertyChangeListener) to add. |
Definition at line 400 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.addEventSubscriber().
Referenced by org.sleuthkit.autopsy.communications.OpenCommVisualizationToolAction.OpenCommVisualizationToolAction(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.Installer.restored().
void org.sleuthkit.autopsy.casemodule.Case.addReport | ( | String | localPath, |
String | srcModuleName, | ||
String | reportName | ||
) | throws TskCoreException |
Adds a report to the case.
localPath | The path of the report file, must be in the case directory or one of its subdirectories. |
srcModuleName | The name of the module that created the report. |
reportName | The report name, may be empty. |
TskCoreException | if there is a problem adding the report to the case database. |
Definition at line 1690 of file Case.java.
Referenced by org.sleuthkit.autopsy.report.caseuco.CaseUcoFormatExporter.generateReport(), org.sleuthkit.autopsy.modules.stix.STIXReportModule.generateReport(), org.sleuthkit.autopsy.communications.VisualizationPanel.handleSnapshotEvent(), and org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport().
Report org.sleuthkit.autopsy.casemodule.Case.addReport | ( | String | localPath, |
String | srcModuleName, | ||
String | reportName, | ||
Content | parent | ||
) | throws TskCoreException |
Adds a report to the case.
localPath | The path of the report file, must be in the case directory or one of its subdirectories. |
srcModuleName | The name of the module that created the report. |
reportName | The report name, may be empty. |
parent | The Content used to create the report, if available. |
TskCoreException | if there is a problem adding the report to the case database. |
Definition at line 1708 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
|
staticprivate |
Checks current thread for an interrupt. Usage: checking for user cancellation of a case creation/opening operation, as reflected in the exception message.
CaseActionCancelledException | If the current thread is interrupted, assumes interrupt was due to a user action. |
Definition at line 2078 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.open(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), and org.sleuthkit.autopsy.casemodule.Case.openCommunicationChannels().
|
staticprivate |
Empties the temp subdirectory for the current case.
Definition at line 1254 of file Case.java.
References org.sleuthkit.autopsy.coreutils.FileUtil.deleteDir().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteTempfilesFromCaseDirectory().
|
private |
Closes the case.
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2463 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.acquireExclusiveCaseResourcesLock(), org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.Case.releaseSharedCaseDirLock(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.coreutils.ThreadUtils.shutDownTaskExecutor(), org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.progress.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.report.CreatePortableCaseModule.cleanup(), org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.open().
|
private |
Closes the case.
progressIndicator | A progress indicator. |
Definition at line 2539 of file Case.java.
References org.sleuthkit.autopsy.ingest.IngestManager.cancelAllIngestJobs(), org.sleuthkit.autopsy.ingest.IngestJob.CancellationReason.CASE_CLOSED, org.sleuthkit.autopsy.casemodule.services.Services.close(), org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.closeRemoteEventChannel(), org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.ingest.IngestManager.getInstance(), org.sleuthkit.autopsy.coreutils.PlatformUtil.getLogDirectory(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), and org.sleuthkit.autopsy.coreutils.Logger.setLogDirectory().
|
private |
Allows any registered application-level services to close any resources specific to this case.
Definition at line 2596 of file Case.java.
References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.Case.logger, org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.coreutils.ThreadUtils.shutDownTaskExecutor(), and org.sleuthkit.autopsy.progress.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.casemodule.Case.close().
void org.sleuthkit.autopsy.casemodule.Case.closeCase | ( | ) | throws CaseActionException |
Closes this Autopsy case.
CaseActionException | if there is a problem closing the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2899 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase().
|
static |
Closes the current case.
CaseActionException | If there is a problem closing the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 659 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseActionSerializationLock, org.sleuthkit.autopsy.casemodule.Case.close(), org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, org.sleuthkit.autopsy.casemodule.Case.currentCase, org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getDisplayName(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.publishLocally(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseClosed().
Referenced by org.sleuthkit.autopsy.actions.ExitAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.CaseCloseAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.Case.closeCase(), org.sleuthkit.autopsy.core.Installer.closing(), org.sleuthkit.autopsy.casemodule.Case.deleteCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.run(), and org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.stop().
|
static |
Converts a Java timezone id to a coded string with only alphanumeric characters. Example: "America/New_York" is converted to "EST5EDT" by this method.
timeZoneId | The time zone id. |
Definition at line 2927 of file Case.java.
References org.sleuthkit.autopsy.coreutils.TimeZoneUtils.convertToAlphaNumericFormat().
|
static |
Creates a new, single-user Autopsy case.
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDisplayName | The display name of case, which may be changed later by the user. |
caseNumber | The case number, can be the empty string. |
examiner | The examiner to associate with the case, can be the empty string. |
CaseActionException | if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2844 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE.
|
static |
Creates a new Autopsy case and makes it the current case.
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDisplayName | The display name of case, which may be changed later by the user. |
caseNumber | The case number, can be the empty string. |
examiner | The examiner to associate with the case, can be the empty string. |
caseType | The type of case (single-user or multi-user). |
CaseActionException | if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2869 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase().
|
static |
Creates a new case and makes it the current case.
IMPORTANT: This method should not be called in the event dispatch thread (EDT).
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDisplayName | The display name of case, which may be changed later by the user. |
caseNumber | The case number, can be the empty string. |
examiner | The examiner to associate with the case, can be the empty string. |
caseType | The type of case (single-user or multi-user). |
CaseActionException | If there is a problem creating the case. |
CaseActionCancelledException | If creating the case is cancelled. |
Definition at line 527 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), and org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.openCase().
|
static |
Creates a new case and makes it the current case.
IMPORTANT: This method should not be called in the event dispatch thread (EDT).
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseType | The type of case (single-user or multi-user). |
caseDetails | Contains the modifiable details of the case such as the case display name, the case number, and the examiner related data. |
CaseActionException | If there is a problem creating the case. |
CaseActionCancelledException | If creating the case is cancelled. |
Definition at line 554 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.Case(), org.sleuthkit.autopsy.casemodule.CaseDetails.getCaseDisplayName(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
private |
Creates the node data for the case directory lock coordination service node, the case directory, the case database and the case metadata file.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2236 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.casemodule.Case.SINGLE_USER_CASE_DB_NAME.
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
static |
Creates a case directory and its subdirectories.
caseDirPath | Path to the case directory (typically base + case name). |
caseType | The type of case, single-user or multi-user. |
CaseActionException | throw if could not create the case dir |
Definition at line 906 of file Case.java.
References org.sleuthkit.autopsy.coreutils.NetworkUtils.getLocalHostName(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.
Referenced by org.sleuthkit.autopsy.casemodule.Case.createCaseDirectoryIfDoesNotExist(), and org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.openCase().
|
private |
Creates the case directory, if it does not already exist.
TODO (JIRA-2180): Always create the case directory as part of the case creation process.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2100 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.createCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
private |
Creates the node data for the case directory lock coordination service node.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2161 of file Case.java.
References org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.setNodeData(), and org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.toArray().
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
SleuthkitCase org.sleuthkit.autopsy.casemodule.Case.createPortableCase | ( | String | caseName, |
File | portableCaseFolder | ||
) | throws TskCoreException |
Create an empty portable case from the current case
TskCoreException |
Definition at line 2042 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getCaseNotes(), org.sleuthkit.autopsy.casemodule.Case.getExaminer(), org.sleuthkit.autopsy.casemodule.Case.getExaminerEmail(), org.sleuthkit.autopsy.casemodule.Case.getExaminerPhone(), org.sleuthkit.autopsy.casemodule.Case.getNumber(), org.sleuthkit.autopsy.casemodule.Case.metadata, org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.casemodule.Case.SINGLE_USER_CASE_DB_NAME.
Referenced by org.sleuthkit.autopsy.report.CreatePortableCaseModule.createCase().
|
static |
Deletes a case. This method cannot be used to delete the current case; deleting the current case must be done by calling Case.deleteCurrentCase.
metadata | The metadata for the case to delete. |
CaseActionException | if there is a problem deleting the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 719 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseActionSerializationLock, org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.coreutils.StopWatch.getElapsedTimeSecs(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.coreutils.StopWatch.reset(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, org.sleuthkit.autopsy.coreutils.StopWatch.start(), org.sleuthkit.autopsy.progress.ProgressIndicator.start(), org.sleuthkit.autopsy.coreutils.StopWatch.stop(), and org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetExclusiveLock().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteCurrentCase().
|
staticprivate |
Deletes the case directory of a deleted case and removes the case form the Recent Cases menu.
metadata | The case metadata. |
progressIndicator | A progress indicator. |
UserPreferencesException | if there is a problem getting the case databse connection info for a multi-user case. |
ClassNotFoundException | if there is a problem loading the JDBC driver for PostgreSQL for a multi-user case. |
SQLException | If there is a problem |
Definition at line 1012 of file Case.java.
References org.sleuthkit.autopsy.coreutils.FileUtil.deleteDir(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDatabaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.coreutils.StopWatch.getElapsedTimeSecs(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.coreutils.StopWatch.reset(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.coreutils.StopWatch.start(), and org.sleuthkit.autopsy.coreutils.StopWatch.stop().
|
static |
Deletes the current case.
CaseActionException | If there is a problem deleting the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 690 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseActionSerializationLock, org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.deleteCase().
void org.sleuthkit.autopsy.casemodule.Case.deleteReports | ( | Collection<?extends Report > | reports | ) | throws TskCoreException |
Deletes one or more reports from the case database. Does not delete the report files.
reports | The report(s) to be deleted from the case. |
TskCoreException | if there is an error deleting the report(s). |
Definition at line 1745 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish(), and org.sleuthkit.autopsy.casemodule.Case.Events.REPORT_DELETED.
Referenced by org.sleuthkit.autopsy.datamodel.Reports.ReportNode.DeleteReportAction.actionPerformed(), and org.sleuthkit.autopsy.casemodule.Case.deleteReports().
void org.sleuthkit.autopsy.casemodule.Case.deleteReports | ( | Collection<?extends Report > | reports, |
boolean | deleteFromDisk | ||
) | throws TskCoreException |
Deletes reports from the case.
reports | Collection of Report to be deleted from the case. |
deleteFromDisk | No longer supported - ignored. |
TskCoreException |
Definition at line 3061 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.deleteReports().
|
private |
Deletes any files in the temp subdirectory of the case directory.
progressIndicator | A progress indicator. |
Definition at line 2211 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.clearTempSubDir(), org.sleuthkit.autopsy.casemodule.Case.getTempDirectory(), and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
staticprivate |
Transforms a case display name into a unique case name that can be used to identify the case even if the display name is changed.
caseDisplayName | A case display name. |
Definition at line 866 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.Case().
|
static |
Check if case is currently open.
Definition at line 2966 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.isCaseOpen().
List<Report> org.sleuthkit.autopsy.casemodule.Case.getAllReports | ( | ) | throws TskCoreException |
Gets the reports that have been added to the case.
TskCoreException | if there is a problem querying the case database. |
Definition at line 1733 of file Case.java.
Referenced by org.sleuthkit.autopsy.datamodel.Reports.ReportNodeFactory.createKeys().
|
static |
Gets the application name.
Definition at line 2820 of file Case.java.
References org.sleuthkit.autopsy.core.UserPreferences.getAppName().
|
static |
Gets the Autopsy version.
Definition at line 2954 of file Case.java.
References org.sleuthkit.autopsy.coreutils.Version.getVersion().
String org.sleuthkit.autopsy.casemodule.Case.getCacheDirectory | ( | ) |
Gets the full path to the cache directory for this case, creating it if it does not exist.
Definition at line 1416 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.coreutils.ImageUtils.getCachedThumbnailLocation().
String org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory | ( | ) |
Gets the path to the top-level case directory.
Definition at line 1374 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory().
Referenced by org.sleuthkit.autopsy.casemodule.Case.close(), org.sleuthkit.autopsy.keywordsearch.SolrSearchService.closeCaseResources(), org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.ingest.IngestMonitor.MonitorTimerAction.findRootDirectoryForCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory(), org.sleuthkit.autopsy.casemodule.Case.open(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.keywordsearch.SolrSearchService.openCaseResources(), and org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp().
String org.sleuthkit.autopsy.casemodule.Case.getCaseNotes | ( | ) |
Gets the case notes.
Definition at line 1365 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseNotes().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase().
CaseType org.sleuthkit.autopsy.casemodule.Case.getCaseType | ( | ) |
Gets the case type.
Definition at line 1293 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createCaseNodeData(), org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath(), org.sleuthkit.autopsy.ingest.IngestManager.startIngestJob(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToServiceMonitorEvents(), org.sleuthkit.autopsy.casemodule.Case.updateCaseNodeData(), and org.sleuthkit.autopsy.casemodule.ImageFilePanel.validatePanel().
String org.sleuthkit.autopsy.casemodule.Case.getConfigDirectory | ( | ) |
Gets the full path to the config directory for this case, creating it if it does not exist.
Definition at line 1456 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.casemodule.CasePreferences.loadFromStorage(), and org.sleuthkit.autopsy.casemodule.CasePreferences.saveToStorage().
String org.sleuthkit.autopsy.casemodule.Case.getCreatedDate | ( | ) |
Gets the case create date.
Definition at line 1302 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCreatedDate().
|
static |
Gets the current case. This method should only be called by clients that can be sure a case is currently open. Some examples of suitable clients are data source processors, ingest modules, and report modules.
Definition at line 610 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows().
Referenced by org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeSearchAction.createAndShowPanel(), org.sleuthkit.autopsy.commonpropertiessearch.AllInterCaseCommonAttributeSearcher.findMatchesByCase(), org.sleuthkit.autopsy.commonpropertiessearch.SingleInterCaseCommonAttributeSearcher.findMatchesByCase(), org.sleuthkit.autopsy.commonpropertiessearch.AllInterCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.commonpropertiessearch.SingleInterCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstance.generateNodes(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelationAttributesFromNode(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentCase(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentSleuthkitCaseDb(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.openCase(), org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.populateCentralRepositoryData(), org.sleuthkit.autopsy.modules.dataSourceIntegrity.DataSourceIntegrityIngestModule.process(), and org.sleuthkit.autopsy.casemodule.ImageFilePanel.validatePanel().
|
static |
Gets the current case, if there is one, or throws an exception if there is no current case. This method should only be called by methods known to run in threads where it is possible that another thread has closed the current case. The exception provides some protection from the consequences of the race condition between the calling thread and a case closing thread, but it is not fool-proof. Background threads calling this method should put all operations in an exception firewall with a try and catch-all block to handle the possibility of bad timing.
TODO (JIRA-3825): Introduce a reference counting scheme for this get case method.
NoCurrentCaseException | if there is no current case. |
Definition at line 638 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.currentCase.
Referenced by org.sleuthkit.autopsy.actions.AddBookmarkTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteContentTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteBlackboardArtifactTagAction.actionPerformed(), org.sleuthkit.autopsy.centralrepository.AddEditCentralRepoCommentAction.actionPerformed(), org.sleuthkit.autopsy.directorytree.ExternalViewerAction.actionPerformed(), org.sleuthkit.autopsy.directorytree.ViewContextAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.Reports.ReportNode.DeleteReportAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag(), org.sleuthkit.autopsy.communications.VisualizationPanel.addNotify(), org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.addTag(), org.sleuthkit.autopsy.actions.AddContentTagAction.addTag(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty(), org.sleuthkit.autopsy.corecomponents.DataContentTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.canProcess(), org.sleuthkit.autopsy.casemodule.events.CommentChangedEvent.CommentChangedEvent(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), org.sleuthkit.autopsy.datamodel.AbstractContentNode< Image >.contentHasVisibleContentChildren(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.copyFileToTempDirectory(), org.sleuthkit.autopsy.timeline.explorernodes.EventNode.createEventNode(), org.sleuthkit.autopsy.ingest.DataSourceIngestJob.createIngestPipelines(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdIngestModule.createInterestingFileHit(), org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Reports.ReportNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.VirtualDirectoryNode.createSheet(), org.sleuthkit.autopsy.datamodel.ImageNode.createSheet(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag(), org.sleuthkit.autopsy.actions.DeleteFileContentTagAction.deleteTag(), org.sleuthkit.autopsy.actions.DeleteFileBlackboardArtifactTagAction.deleteTag(), org.sleuthkit.autopsy.actions.GetTagNameDialog.display(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.display(), org.sleuthkit.autopsy.modules.embeddedfileextractor.ExtractArchiveWithPasswordAction.ExtractAndIngestWorker.doInBackground(), org.sleuthkit.autopsy.corecomponents.DataContentViewerHex.BackgroundFileCopyTask.doInBackground(), org.sleuthkit.autopsy.directorytree.ExtractAction.extractFile(), org.sleuthkit.autopsy.directorytree.ExtractAction.extractFiles(), org.sleuthkit.autopsy.casemodule.LocalFilesDSProcessor.extractLogicalEvidenceFileContents(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.FileTypesByExtObservable(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeCaseSearchResults.filterMetadata(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.ingest.IngestMonitor.MonitorTimerAction.findRootDirectoryForCurrentCase(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationDataSource.fromTSKDataSource(), org.sleuthkit.autopsy.report.caseuco.CaseUcoFormatExporter.generateReport(), org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.modules.stix.STIXReportModule.generateReport(), org.sleuthkit.autopsy.report.CreatePortableCaseModule.generateReport(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAllTagsFromDatabase(), org.sleuthkit.autopsy.actions.AddTagAction.TagMenu.getAndAddTag(), org.sleuthkit.autopsy.coreutils.ImageUtils.getCachedThumbnailLocation(), org.sleuthkit.autopsy.ingest.IngestServices.getCase(), org.sleuthkit.autopsy.ingest.IngestServices.getCaseDatabase(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.casemodule.events.DataSourceNameChangedEvent.getDataSource(), org.sleuthkit.autopsy.ingest.events.DataSourceAnalysisEvent.getDataSource(), org.sleuthkit.autopsy.filesearch.DataSourcePanel.getDataSourceArray(), org.sleuthkit.autopsy.datamodel.utils.DataSourceLoader.getDataSourceMap(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getInstanceFromContent(), org.sleuthkit.autopsy.casemodule.events.ReportAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue(), org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.getOldValue(), org.sleuthkit.autopsy.report.TableReportGenerator.ArtifactData.getOrderedRowDataAsStrings(), org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.getRawArtifactText(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getTagDisplayNames(), org.sleuthkit.autopsy.coreutils.VideoUtils.getVideoFileInTempDir(), org.sleuthkit.autopsy.communications.AccountsBrowser.handleFilterEvent(), org.sleuthkit.autopsy.communications.VisualizationPanel.handleSnapshotEvent(), org.sleuthkit.autopsy.ingest.IngestJobSettingsPanel.IngestJobSettingsPanel(), org.sleuthkit.autopsy.ingest.RunIngestAction.isEnabled(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeCorrelationAttributeInstanceUsingTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstanceFromContent(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstancesFromBlackboardArtifact(), org.sleuthkit.autopsy.actions.GetTagNameDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction(), org.sleuthkit.autopsy.healthmonitor.HealthMonitor.performDatabaseQuery(), org.sleuthkit.autopsy.report.ArtifactSelectionDialog.populateList(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.populateTable(), org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.populateTagData(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.postCorrelatedBadArtifactToBlackboard(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.postCorrelatedPreviousArtifactToBlackboard(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.process(), org.sleuthkit.autopsy.modules.exif.ExifParserFileIngestModule.process(), org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule.process(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule.process(), org.sleuthkit.autopsy.filesearch.DateSearchFilter.CasePropertyChangeListener.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), org.sleuthkit.autopsy.timeline.TimeLineController.AutopsyIngestModuleListener.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.rebuildTree(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.reloadKeys(), org.sleuthkit.autopsy.actions.ReplaceContentTagAction.replaceTag(), org.sleuthkit.autopsy.actions.ReplaceBlackboardArtifactTagAction.replaceTag(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.AnalysisCompleteTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceAddedTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceNameChangedTask.run(), org.sleuthkit.autopsy.report.caseuco.CaseUcoFormatExporter.saveCaseInfo(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.saveToCSV(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayName(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.showTimeline(), org.sleuthkit.autopsy.ingest.IngestManager.startIngestJob(), org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.startUp(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToServiceMonitorEvents(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.tooManyFiles(), org.sleuthkit.autopsy.communications.FiltersPanel.updateDeviceFilter(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagTypeNode.updateDisplayName(), and org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagTypeNode.updateDisplayName().
List<Content> org.sleuthkit.autopsy.casemodule.Case.getDataSources | ( | ) | throws TskCoreException |
Gets the data sources for the case.
org.sleuthkit.datamodel.TskCoreException | if there is a problem querying the case database. |
Definition at line 1495 of file Case.java.
Referenced by org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeSearchAction.createAndShowPanel(), org.sleuthkit.autopsy.casemodule.Case.getTimeZones(), org.sleuthkit.autopsy.casemodule.Case.hasData(), and org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.reloadKeys().
String org.sleuthkit.autopsy.casemodule.Case.getDisplayName | ( | ) |
Gets the case name that can be changed by the user.
Definition at line 1320 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName().
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.report.CreatePortableCaseModule.createCase(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeCaseSearchResults.filterMetadata(), org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstance.generateNodes(), org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.communications.VisualizationPanel.handleSnapshotEvent(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.populateTable(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport(), and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
String org.sleuthkit.autopsy.casemodule.Case.getExaminer | ( | ) |
Gets the examiner name.
Definition at line 1338 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminer().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase().
String org.sleuthkit.autopsy.casemodule.Case.getExaminerEmail | ( | ) |
Gets the examiner email address.
Definition at line 1356 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminerEmail().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase().
String org.sleuthkit.autopsy.casemodule.Case.getExaminerPhone | ( | ) |
Gets the examiner phone number.
Definition at line 1347 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminerPhone().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase().
String org.sleuthkit.autopsy.casemodule.Case.getExportDirectory | ( | ) |
Gets the full path to the export directory for this case, creating it if it does not exist.
Definition at line 1426 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.directorytree.ExtractAction.getExportDirectory(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.saveToCSV(), and org.sleuthkit.autopsy.directorytree.ExtractAction.updateExportDirectory().
String org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath | ( | ) |
Gets the full path to the log directory for this case, creating it if it does not exist.
Definition at line 1436 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), and org.sleuthkit.autopsy.casemodule.Case.switchLoggingToCaseLogsDirectory().
String org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory | ( | ) |
Gets the full path to the module output directory for this case, creating it if it does not exist.
Definition at line 1466 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.modules.embeddedfileextractor.ExtractArchiveWithPasswordAction.ExtractAndIngestWorker.doInBackground(), org.sleuthkit.autopsy.casemodule.LocalFilesDSProcessor.extractLogicalEvidenceFileContents(), org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath(), org.sleuthkit.autopsy.casemodule.Case.getModulesOutputDirAbsPath(), org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.getRAOutputPath(), and org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp().
String org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath | ( | ) |
Gets the path of the module output directory for this case, relative to the case directory, creating it if it does not exist.
Definition at line 1477 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.
Referenced by org.sleuthkit.autopsy.modules.embeddedfileextractor.ExtractArchiveWithPasswordAction.ExtractAndIngestWorker.doInBackground(), and org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp().
String org.sleuthkit.autopsy.casemodule.Case.getModulesOutputDirAbsPath | ( | ) |
Get module output directory path where modules should save their permanent data.
Definition at line 3009 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory().
|
static |
Get relative (with respect to case dir) module output directory path where modules should save their permanent data. The directory is a subdirectory of this case dir.
String org.sleuthkit.autopsy.casemodule.Case.getName | ( | ) |
Gets the unique and immutable case name.
Definition at line 1311 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName().
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.events.CommentChangedEvent.CommentChangedEvent(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.openCase(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.populateTable(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), and org.sleuthkit.autopsy.report.caseuco.CaseUcoFormatExporter.saveCaseInfo().
|
staticprivate |
Definition at line 1114 of file Case.java.
References org.sleuthkit.autopsy.core.UserPreferences.getAppName(), org.sleuthkit.autopsy.coreutils.Version.getName(), and org.sleuthkit.autopsy.coreutils.Version.getVersion().
Referenced by org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseClosed(), and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
String org.sleuthkit.autopsy.casemodule.Case.getNumber | ( | ) |
Gets the case number.
Definition at line 1329 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseNumber().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase().
|
private |
Gets the path to the specified subdirectory of the case directory, creating it if it does not already exist.
Definition at line 2682 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory().
Referenced by org.sleuthkit.autopsy.casemodule.Case.getCacheDirectory(), org.sleuthkit.autopsy.casemodule.Case.getConfigDirectory(), org.sleuthkit.autopsy.casemodule.Case.getExportDirectory(), org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath(), org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory(), org.sleuthkit.autopsy.casemodule.Case.getReportDirectory(), and org.sleuthkit.autopsy.casemodule.Case.getTempDirectory().
String org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory | ( | ) |
Gets the root case output directory for this case, creating it if it does not exist. If the case is a single-user case, this is the case directory. If the case is a multi-user case, this is a subdirectory of the case directory specific to the host machine.
Definition at line 1386 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.coreutils.NetworkUtils.getLocalHostName(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory(), and org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction().
|
static |
Gets a PropertyChangeSupport object. The PropertyChangeSupport object returned is not used by instances of this class and does not have any PropertyChangeListeners.
String org.sleuthkit.autopsy.casemodule.Case.getReportDirectory | ( | ) |
Gets the full path to the reports directory for this case, creating it if it does not exist.
Definition at line 1446 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.communications.VisualizationPanel.createReport(), org.sleuthkit.autopsy.communications.VisualizationPanel.handleSnapshotEvent(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.run(), and org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport().
Services org.sleuthkit.autopsy.casemodule.Case.getServices | ( | ) |
Gets the case services manager.
Definition at line 1284 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseServices.
Referenced by org.sleuthkit.autopsy.actions.AddBookmarkTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteContentTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteBlackboardArtifactTagAction.actionPerformed(), org.sleuthkit.autopsy.report.CreatePortableCaseModule.addArtifactsToPortableCase(), org.sleuthkit.autopsy.report.CreatePortableCaseModule.addFilesToPortableCase(), org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.addTag(), org.sleuthkit.autopsy.actions.AddContentTagAction.addTag(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdIngestModule.createInterestingFileHit(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagNodeFactory.createKeys(), org.sleuthkit.autopsy.actions.DeleteFileContentTagAction.deleteTag(), org.sleuthkit.autopsy.actions.DeleteFileBlackboardArtifactTagAction.deleteTag(), org.sleuthkit.autopsy.actions.GetTagNameDialog.display(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.display(), org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAllTagsFromDatabase(), org.sleuthkit.autopsy.actions.AddTagAction.TagMenu.getAndAddTag(), org.sleuthkit.autopsy.report.TableReportGenerator.ArtifactData.getOrderedRowDataAsStrings(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getTagDisplayNames(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleArtifactTagDeleted(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleContentTagDeleted(), org.sleuthkit.autopsy.actions.GetTagNameDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.postCorrelatedBadArtifactToBlackboard(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.postCorrelatedPreviousArtifactToBlackboard(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.process(), org.sleuthkit.autopsy.modules.exif.ExifParserFileIngestModule.process(), org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule.process(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule.process(), org.sleuthkit.autopsy.actions.ReplaceContentTagAction.replaceTag(), org.sleuthkit.autopsy.actions.ReplaceBlackboardArtifactTagAction.replaceTag(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.startUp(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagTypeNode.updateDisplayName(), and org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagTypeNode.updateDisplayName().
SleuthkitCase org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase | ( | ) |
Gets the case database.
Definition at line 1275 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseDb.
Referenced by org.sleuthkit.autopsy.directorytree.ViewContextAction.actionPerformed(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.addEmailArtifact(), org.sleuthkit.autopsy.communications.VisualizationPanel.addNotify(), org.sleuthkit.autopsy.datamodel.AbstractContentNode< Image >.contentHasVisibleContentChildren(), org.sleuthkit.autopsy.report.CreatePortableCaseModule.copyArtifact(), org.sleuthkit.autopsy.timeline.explorernodes.EventNode.createEventNode(), org.sleuthkit.autopsy.ingest.DataSourceIngestJob.createIngestPipelines(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdIngestModule.createInterestingFileHit(), org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.createKeys(), org.sleuthkit.autopsy.datamodel.VirtualDirectoryNode.createSheet(), org.sleuthkit.autopsy.datamodel.ImageNode.createSheet(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet(), org.sleuthkit.autopsy.timeline.db.EventsRepository.EventsRepository(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationDataSource.fromTSKDataSource(), org.sleuthkit.autopsy.report.caseuco.CaseUcoFormatExporter.generateReport(), org.sleuthkit.autopsy.ingest.IngestServices.getCaseDatabase(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentSleuthkitCaseDb(), org.sleuthkit.autopsy.casemodule.events.DataSourceNameChangedEvent.getDataSource(), org.sleuthkit.autopsy.ingest.events.DataSourceAnalysisEvent.getDataSource(), org.sleuthkit.autopsy.filesearch.DataSourcePanel.getDataSourceArray(), org.sleuthkit.autopsy.datamodel.utils.DataSourceLoader.getDataSourceMap(), org.sleuthkit.autopsy.report.CreatePortableCaseModule.getNewArtifactTypeId(), org.sleuthkit.autopsy.casemodule.events.ReportAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue(), org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.getOldValue(), org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.getRawArtifactText(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleArtifactTagDeleted(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleContentTagDeleted(), org.sleuthkit.autopsy.communications.AccountsBrowser.handleFilterEvent(), org.sleuthkit.autopsy.ingest.IngestJobSettingsPanel.IngestJobSettingsPanel(), org.sleuthkit.autopsy.timeline.db.EventsRepository.invalidateCaches(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeCorrelationAttributeInstanceUsingTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstancesFromBlackboardArtifact(), org.sleuthkit.autopsy.healthmonitor.HealthMonitor.performDatabaseQuery(), org.sleuthkit.autopsy.report.ArtifactSelectionDialog.populateList(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.populateTable(), org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.populateTagData(), org.sleuthkit.autopsy.modules.dataSourceIntegrity.DataSourceIntegrityIngestModule.process(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.reloadKeys(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.report.CreatePortableCaseModule.saveHighestIds(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayName(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.tooManyFiles(), org.sleuthkit.autopsy.communications.FiltersPanel.updateDeviceFilter(), org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened(), and org.sleuthkit.autopsy.communications.snapshot.CommSnapShotReportWriter.writeSnapShotHTMLFile().
String org.sleuthkit.autopsy.casemodule.Case.getTempDirectory | ( | ) |
Gets the full path to the temp directory for this case, creating it if it does not exist.
Definition at line 1406 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.directorytree.ExternalViewerAction.actionPerformed(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.copyFileToTempDirectory(), org.sleuthkit.autopsy.casemodule.Case.deleteTempfilesFromCaseDirectory(), org.sleuthkit.autopsy.corecomponents.DataContentViewerHex.BackgroundFileCopyTask.doInBackground(), org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.getRATempPath(), and org.sleuthkit.autopsy.coreutils.VideoUtils.getVideoFileInTempDir().
String org.sleuthkit.autopsy.casemodule.Case.getTextIndexName | ( | ) |
Gets the name of the legacy keyword search index for the case. Not for general use.
Definition at line 1528 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getTextIndexName().
Set<TimeZone> org.sleuthkit.autopsy.casemodule.Case.getTimeZone | ( | ) |
Gets the time zone(s) of the image data source(s) in this case.
Definition at line 3046 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getTimeZones().
Set<TimeZone> org.sleuthkit.autopsy.casemodule.Case.getTimeZones | ( | ) |
Gets the time zone(s) of the image data source(s) in this case.
Definition at line 1506 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getDataSources().
Referenced by org.sleuthkit.autopsy.casemodule.Case.getTimeZone().
boolean org.sleuthkit.autopsy.casemodule.Case.hasData | ( | ) |
Queries whether or not the case has data, i.e., whether or not at least one data source has been added to the case.
Definition at line 1538 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getDataSources(), and org.sleuthkit.autopsy.casemodule.Case.hasDataSources.
Referenced by org.sleuthkit.autopsy.corecomponents.DataContentTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose(), org.sleuthkit.autopsy.ingest.RunIngestAction.isEnabled(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.rebuildTree(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.showTimeline(), and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
|
static |
Invokes the startup dialog window.
Definition at line 2909 of file Case.java.
References org.sleuthkit.autopsy.casemodule.StartupWindowProvider.getInstance(), and org.sleuthkit.autopsy.casemodule.StartupWindowProvider.open().
|
static |
Checks if a case, the current case, is open at the time it is called.
Definition at line 599 of file Case.java.
Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.addIngestJobEventsListener(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.cbUseCentralRepoActionPerformed(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeSearchAction.createAndShowPanel(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.customizeComponents(), org.sleuthkit.autopsy.casemodule.Case.existsCurrentCase(), org.sleuthkit.autopsy.allcasessearch.AllCasesSearchAction.isEnabled(), org.sleuthkit.autopsy.diagnostics.PerformancePanelAction.isEnabled(), org.sleuthkit.autopsy.actions.ShowIngestProgressSnapshotAction.isEnabled(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeSearchAction.isEnabled(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.isEnabled(), org.sleuthkit.autopsy.actions.OpenOutputFolderAction.isEnabled(), org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.load(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.IngestJobEventPropertyChangeListener.propertyChange(), and org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.storeGroupItemsInTreeByDataSource().
|
static |
void org.sleuthkit.autopsy.casemodule.Case.notifyAddingDataSource | ( | UUID | eventId | ) |
Notifies case event subscribers that a data source is being added to the case.
This should not be called from the event dispatch thread (EDT)
eventId | A unique identifier for the event. This UUID must be used to call notifyFailedAddingDataSource or notifyNewDataSource after the data source is added. |
Definition at line 1559 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagAdded | ( | BlackboardArtifactTag | newTag | ) |
Notifies case event subscribers that an artifact tag has been added.
This should not be called from the event dispatch thread (EDT)
newTag | new BlackboardArtifactTag added |
Definition at line 1664 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagDeleted | ( | BlackboardArtifactTag | deletedTag | ) |
Notifies case event subscribers that an artifact tag has been deleted.
This should not be called from the event dispatch thread (EDT)
deletedTag | BlackboardArtifactTag deleted |
Definition at line 1675 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyCentralRepoCommentChanged | ( | long | contentId, |
String | newComment | ||
) |
Notifies case event subscribers that a central repository comment has been changed.
This should not be called from the event dispatch thread (EDT)
contentId | the objectId for the Content which has had its central repo comment changed |
newComment | the new value of the comment |
Definition at line 1649 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.centralrepository.AddEditCentralRepoCommentAction.actionPerformed().
void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagAdded | ( | ContentTag | newTag | ) |
Notifies case event subscribers that a content tag has been added.
This should not be called from the event dispatch thread (EDT)
newTag | new ContentTag added |
Definition at line 1612 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagDeleted | ( | ContentTag | deletedTag | ) |
Notifies case event subscribers that a content tag has been deleted.
This should not be called from the event dispatch thread (EDT)
deletedTag | ContentTag deleted |
Definition at line 1623 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceAdded | ( | Content | dataSource, |
UUID | addingDataSourceEventId | ||
) |
Notifies case event subscribers that a data source has been added to the case database.
This should not be called from the event dispatch thread (EDT)
dataSource | The data source. |
addingDataSourceEventId | The unique identifier for the corresponding adding data source event (see notifyAddingDataSource). |
Definition at line 1588 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.Case.addImage(), and org.sleuthkit.autopsy.datasourceprocessors.AddDataSourceCallback.done().
void org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceNameChanged | ( | Content | dataSource, |
String | newName | ||
) |
Notifies case event subscribers that a data source has been added to the case database.
This should not be called from the event dispatch thread (EDT)
dataSource | The data source. |
newName | The new name for the data source |
Definition at line 1601 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
void org.sleuthkit.autopsy.casemodule.Case.notifyFailedAddingDataSource | ( | UUID | addingDataSourceEventId | ) |
Notifies case event subscribers that a data source failed to be added to the case.
This should not be called from the event dispatch thread (EDT)
addingDataSourceEventId | The unique identifier for the corresponding adding data source event (see notifyAddingDataSource). |
Definition at line 1573 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.datasourceprocessors.AddDataSourceCallback.done().
void org.sleuthkit.autopsy.casemodule.Case.notifyTagDefinitionChanged | ( | String | changedTagName | ) |
Notifies case event subscribers that a tag definition has changed.
This should not be called from the event dispatch thread (EDT)
changedTagName | the name of the tag definition which was changed |
Definition at line 1634 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish(), and org.sleuthkit.autopsy.casemodule.Case.Events.TAG_DEFINITION_CHANGED.
|
private |
Opens this case by creating a task running in the same non-UI thread that will be used to close the case. If the case is a single-user case, this supports cancelling creation of the case by cancelling the task. If the case is a multi-user case, this ensures ensures that case directory lock held as long as the case is open is released in the same thread in which it was acquired, as is required by the coordination service.
isNewCase | True for a new case, false otherwise. |
CaseActionException | If there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 1860 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.acquireExclusiveCaseResourcesLock(), org.sleuthkit.autopsy.casemodule.Case.acquireSharedCaseDirLock(), org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.actionPerformed(), org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.Case.releaseSharedCaseDirLock(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.setCaseActionFuture(), org.sleuthkit.autopsy.coreutils.ThreadUtils.shutDownTaskExecutor(), org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.progress.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), and org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction().
|
private |
Opens the case database and services for this case.
isNewCase | True for a new case, false otherwise. |
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 1983 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.checkForUserCancellation(), org.sleuthkit.autopsy.casemodule.Case.close(), org.sleuthkit.autopsy.casemodule.Case.createCaseDatabase(), org.sleuthkit.autopsy.casemodule.Case.createCaseDirectoryIfDoesNotExist(), org.sleuthkit.autopsy.casemodule.Case.createCaseNodeData(), org.sleuthkit.autopsy.casemodule.Case.deleteTempfilesFromCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), org.sleuthkit.autopsy.casemodule.Case.openCaseDataBase(), org.sleuthkit.autopsy.casemodule.Case.openCaseLevelServices(), org.sleuthkit.autopsy.casemodule.Case.openCommunicationChannels(), org.sleuthkit.autopsy.casemodule.Case.saveCaseMetadataToFile(), org.sleuthkit.autopsy.casemodule.Case.switchLoggingToCaseLogsDirectory(), and org.sleuthkit.autopsy.casemodule.Case.updateCaseNodeData().
|
static |
Opens an existing Autopsy case and makes it the current case.
caseMetadataFilePath | The path of the case metadata (.aut) file. |
CaseActionException | if there is a problem opening the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2885 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
private |
Allows any registered application-level services to open resources specific to this case.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2332 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.checkForUserCancellation(), org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getDisplayName(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.casemodule.Case.logger, org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.setCaseActionFuture(), org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.setCaseContext(), org.sleuthkit.autopsy.coreutils.ThreadUtils.shutDownTaskExecutor(), and org.sleuthkit.autopsy.progress.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
static |
Opens an existing case and makes it the current case.
IMPORTANT: This method should not be called in the event dispatch thread (EDT).
caseMetadataFilePath | The path of the case metadata (.aut) file. |
CaseActionException | If there is a problem opening the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 581 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.Case(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.UserPreferences.getIsMultiUserModeEnabled(), org.sleuthkit.autopsy.casemodule.Case.metadata, and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.
Referenced by org.sleuthkit.autopsy.keywordsearch.multicase.MultiCaseKeywordSearchNode.OpenCaseAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.open().
|
staticprivate |
Opens a new or existing case as the current case.
newCurrentCase | The case. |
isNewCase | True for a new case, false otherwise. |
CaseActionException | If there is a problem creating the case. |
CaseActionCancelledException | If creating the case is cancelled. |
Definition at line 826 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseActionSerializationLock, org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, org.sleuthkit.autopsy.casemodule.Case.currentCase, org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Message.error(), org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getDisplayName(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.casemodule.Case.open(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.publishLocally(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
|
private |
Updates the node data for an existing case directory lock coordination service node and opens an existing case database.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2282 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDatabaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.core.UserPreferences.getIsMultiUserModeEnabled(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE.
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
private |
Opens the case-level services: the files manager, tags manager and blackboard.
progressIndicator | A progress indicator. |
Definition at line 2310 of file Case.java.
References org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
private |
If this case is a multi-user case, sets up for communication with other application nodes.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2440 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.checkForUserCancellation(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, org.sleuthkit.autopsy.events.AutopsyEventPublisher.openRemoteEventChannel(), and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
static |
Check if file exists and is a normal file.
filePath | The file path. |
|
private |
Releases a shared case directory lock for the current case.
caseDir | The full path of the case directory. |
Definition at line 2665 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseDirLock.
Referenced by org.sleuthkit.autopsy.casemodule.Case.close(), and org.sleuthkit.autopsy.casemodule.Case.open().
|
static |
Removes a subscriber to specific case events.
eventName | The event the subscriber is no longer interested in. |
subscriber | The subscriber (PropertyChangeListener) to remove. |
Definition at line 462 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().
Referenced by org.sleuthkit.autopsy.casemodule.Case.removePropertyChangeListener().
|
static |
Removes a subscriber to specific case events.
eventNames | The event the subscriber is no longer interested in. |
subscriber | The subscriber (PropertyChangeListener) to remove. |
Definition at line 472 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().
|
static |
Removes a subscriber to specific case events.
eventTypes | The events the subscriber is no longer interested in. |
subscriber | The subscriber (PropertyChangeListener) to remove. |
Definition at line 482 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().
Referenced by org.sleuthkit.autopsy.datamodel.VolumeNode.removeListeners(), org.sleuthkit.autopsy.datamodel.ImageNode.removeListeners(), org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.removeListeners(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< SpecialDirectory >.removeListeners(), org.sleuthkit.autopsy.datamodel.FileSize.FileSizeRootChildren.FileSizeRootChildrenObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.DeletedContent.DeletedContentsChildren.DeletedContentsChildrenObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.removeListeners(), org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.removeNotify(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.ExtractedContent.TypeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ViewModeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.removeNotify(), and org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.removeNotify().
|
static |
Removes a subscriber to all case events. To remove a subscription to only specific events, use one of the overloads of removeEventSubscriber.
listener | The subscriber (PropertyChangeListener) to remove. |
Definition at line 412 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.removeEventSubscriber().
Referenced by org.sleuthkit.autopsy.timeline.TimeLineController.shutDownTimeLine(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.Installer.uninstalled().
|
private |
Saves teh case metadata to a file.SHould not be called until the case directory has been created.
progressIndicator | A progress indicator. |
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2137 of file Case.java.
References org.sleuthkit.autopsy.progress.ProgressIndicator.progress().
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
private |
Switches from writing log messages to the application logs to the logs subdirectory of the case directory.
progressIndicator | A progress indicator. |
Definition at line 2117 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), and org.sleuthkit.autopsy.coreutils.Logger.setLogDirectory().
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
private |
Updates the node data for the case directory lock coordination service node.
CaseActionException | If there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 2187 of file Case.java.
References org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.getNodeData(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.setLastAccessDate(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.setNodeData(), and org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.toArray().
Referenced by org.sleuthkit.autopsy.casemodule.Case.open().
|
staticprivate |
Definition at line 1214 of file Case.java.
References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.clear(), org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.closeCoreWindows(), org.sleuthkit.autopsy.casemodule.Case.getNameForTitle(), and org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI.
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase().
|
staticprivate |
Update the GUI to to reflect the current case.
Definition at line 1127 of file Case.java.
References org.sleuthkit.autopsy.coreutils.DriveUtils.driveExists(), org.sleuthkit.autopsy.casemodule.Case.getDisplayName(), org.sleuthkit.autopsy.casemodule.Case.getNameForTitle(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org.sleuthkit.autopsy.casemodule.Case.hasData(), org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.openCoreWindows(), and org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI.
Referenced by org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
private |
Definition at line 150 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().
|
private |
Definition at line 149 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.acquireSharedCaseDirLock(), and org.sleuthkit.autopsy.casemodule.Case.releaseSharedCaseDirLock().
|
private |
|
private |
Definition at line 152 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getServices().
|
private |
|
staticprivate |
|
staticprivate |
Definition at line 146 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
private |
Definition at line 153 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.hasData().
|
staticprivate |
|
staticprivate |
Definition at line 142 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(), and org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources().
|
staticprivate |
|
private |
Definition at line 147 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
staticprivate |
Definition at line 131 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.createCaseDatabase(), and org.sleuthkit.autopsy.casemodule.Case.createPortableCase().
|
staticprivate |
Copyright © 2012-2018 Basis Technology. Generated on: Fri Mar 22 2019
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.