Autopsy  4.10.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Protected Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher Class Referenceabstract

Inherits org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeSearcher.

Inherited by org.sleuthkit.autopsy.commonpropertiessearch.AllIntraCaseCommonAttributeSearcher, and org.sleuthkit.autopsy.commonpropertiessearch.SingleIntraCaseCommonAttributeSearcher.

Public Member Functions

CommonAttributeCaseSearchResults findMatchesByCase () throws TskCoreException, NoCurrentCaseException, SQLException, EamDbException
 
CommonAttributeCountSearchResults findMatchesByCount () throws TskCoreException, NoCurrentCaseException, SQLException
 

Protected Member Functions

abstract String buildSqlSelectStatement ()
 

Private Attributes

final Map< Long, String > dataSourceIdToNameMap
 

Static Private Attributes

static final String FILTER_BY_MIME_TYPES_WHERE_CLAUSE = " and mime_type in (%s)"
 

Detailed Description

Generates a List<CommonFilesMetadata> when findMatchesByCount() is called, which organizes files by md5 to prepare to display in viewer.

This entire thing runs on a background thread where exceptions are handled.

Definition at line 46 of file IntraCaseCommonAttributeSearcher.java.

Member Function Documentation

abstract String org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.buildSqlSelectStatement ( )
abstractprotected

Should build a SQL SELECT statement to be passed to SleuthkitCase.executeQuery(sql) which will select the desired file ids and MD5 hashes.

The statement should select obj_id, md5, data_source_obj_id in that order.

Returns
sql string select statement
CommonAttributeCaseSearchResults org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCase ( ) throws TskCoreException, NoCurrentCaseException, SQLException, EamDbException

Definition at line 146 of file IntraCaseCommonAttributeSearcher.java.

CommonAttributeCountSearchResults org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCount ( ) throws TskCoreException, NoCurrentCaseException, SQLException

Generate a meta data object which encapsulates everything need to add the tree table tab to the top component.

Returns
a data object with all of the matched files in a hierarchical format
Exceptions
TskCoreException
NoCurrentCaseException
SQLException

Definition at line 105 of file IntraCaseCommonAttributeSearcher.java.

References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.casemodule.Case.getDisplayName().

Member Data Documentation

final Map<Long, String> org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.dataSourceIdToNameMap
private

Definition at line 50 of file IntraCaseCommonAttributeSearcher.java.

final String org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.FILTER_BY_MIME_TYPES_WHERE_CLAUSE = " and mime_type in (%s)"
staticprivate

Definition at line 48 of file IntraCaseCommonAttributeSearcher.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2018 Basis Technology. Generated on: Fri Mar 22 2019
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.