Autopsy
4.12.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor, and org.sleuthkit.autopsy.datasourceprocessors.AutoIngestDataSourceProcessor.
Public Member Functions | |
ImageDSProcessor () | |
void | cancel () |
int | canProcess (Path dataSourcePath) throws AutoIngestDataSourceProcessorException |
String | getDataSourceType () |
JPanel | getPanel () |
boolean | isPanelValid () |
void | process (String deviceId, Path dataSourcePath, DataSourceProcessorProgressMonitor progressMonitor, DataSourceProcessorCallback callBack) |
void | reset () |
void | run (DataSourceProcessorProgressMonitor progressMonitor, DataSourceProcessorCallback callback) |
void | run (String deviceId, String imagePath, String timeZone, boolean ignoreFatOrphanFiles, DataSourceProcessorProgressMonitor progressMonitor, DataSourceProcessorCallback callback) |
void | setDataSourceOptions (String imagePath, String timeZone, boolean ignoreFatOrphanFiles) |
Static Public Member Functions | |
static String | getType () |
Private Member Functions | |
void | run (String deviceId, String imagePath, int sectorSize, String timeZone, boolean ignoreFatOrphanFiles, String md5, String sha1, String sha256, DataSourceProcessorProgressMonitor progressMonitor, DataSourceProcessorCallback callback) |
Static Private Member Functions | |
static boolean | isAcceptedByFiler (File file, List< FileFilter > filters) |
Private Attributes | |
AddImageTask | addImageTask |
final ImageFilePanel | configPanel |
String | deviceId |
boolean | ignoreFatOrphanFiles |
String | imagePath |
String | md5 |
int | sectorSize |
boolean | setDataSourceOptionsCalled |
String | sha1 |
String | sha256 |
String | timeZone |
Static Private Attributes | |
static final String | ALL_DESC = NbBundle.getMessage(ImageDSProcessor.class, "ImageDSProcessor.allDesc.text") |
static final List< String > | allExt = new ArrayList<>() |
static final GeneralFilter | allFilter = new GeneralFilter(allExt, ALL_DESC) |
static final String | DATA_SOURCE_TYPE = NbBundle.getMessage(ImageDSProcessor.class, "ImageDSProcessor.dsType.text") |
static final GeneralFilter | encaseFilter = new GeneralFilter(GeneralFilter.ENCASE_IMAGE_EXTS, GeneralFilter.ENCASE_IMAGE_DESC) |
static final List< FileFilter > | filtersList = new ArrayList<>() |
static final GeneralFilter | rawFilter = new GeneralFilter(GeneralFilter.RAW_IMAGE_EXTS, GeneralFilter.RAW_IMAGE_DESC) |
static final GeneralFilter | virtualMachineFilter = new GeneralFilter(GeneralFilter.VIRTUAL_MACHINE_EXTS, GeneralFilter.VIRTUAL_MACHINE_DESC) |
A image file data source processor that implements the DataSourceProcessor service provider interface to allow integration with the add data source wizard. It also provides a run method overload to allow it to be used independently of the wizard.
Definition at line 49 of file ImageDSProcessor.java.
org.sleuthkit.autopsy.casemodule.ImageDSProcessor.ImageDSProcessor | ( | ) |
Constructs an image file data source processor that implements the DataSourceProcessor service provider interface to allow integration with the add data source wizard. It also provides a run method overload to allow it to be used independently of the wizard.
Definition at line 93 of file ImageDSProcessor.java.
References org.sleuthkit.autopsy.casemodule.ImageFilePanel.createInstance().
void org.sleuthkit.autopsy.casemodule.ImageDSProcessor.cancel | ( | ) |
Requests cancellation of the background task that adds a data source to the case database, after the task is started using the run method. This is a "best effort" cancellation, with no guarantees that the case database will be unchanged. If cancellation succeeded, the list of new data sources returned by the background task will be empty.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 259 of file ImageDSProcessor.java.
int org.sleuthkit.autopsy.casemodule.ImageDSProcessor.canProcess | ( | Path | dataSourcePath | ) | throws AutoIngestDataSourceProcessorException |
Indicates whether the DataSourceProcessor is capable of processing the data source. Returns a confidence value. Method can throw an exception for a system level problem. The exception should not be thrown for an issue related to bad input data.
dataSourcePath | Path to the data source. |
Implements org.sleuthkit.autopsy.datasourceprocessors.AutoIngestDataSourceProcessor.
Definition at line 289 of file ImageDSProcessor.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.coreutils.DataSourceUtils.imageHasFileSystem().
String org.sleuthkit.autopsy.casemodule.ImageDSProcessor.getDataSourceType | ( | ) |
Gets a string that describes the type of data sources this processor is able to add to the case database. The string is suitable for display in a type selection UI component (e.g., a combo box).
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 125 of file ImageDSProcessor.java.
JPanel org.sleuthkit.autopsy.casemodule.ImageDSProcessor.getPanel | ( | ) |
Gets the panel that allows a user to select a data source and do any configuration required by the data source. The panel is less than 544 pixels wide and less than 173 pixels high.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 138 of file ImageDSProcessor.java.
References org.sleuthkit.autopsy.casemodule.ImageFilePanel.readSettings(), org.sleuthkit.autopsy.casemodule.ImageFilePanel.reset(), and org.sleuthkit.autopsy.casemodule.ImageFilePanel.select().
|
static |
Gets a string that describes the type of data sources this processor is able to add to the case database. The string is suitable for display in a type selection UI component (e.g., a combo box).
Definition at line 113 of file ImageDSProcessor.java.
|
staticprivate |
Definition at line 279 of file ImageDSProcessor.java.
boolean org.sleuthkit.autopsy.casemodule.ImageDSProcessor.isPanelValid | ( | ) |
Indicates whether the settings in the selection and configuration panel are valid and complete.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 153 of file ImageDSProcessor.java.
References org.sleuthkit.autopsy.casemodule.ImageFilePanel.validatePanel().
void org.sleuthkit.autopsy.casemodule.ImageDSProcessor.process | ( | String | deviceId, |
Path | dataSourcePath, | ||
DataSourceProcessorProgressMonitor | progressMonitor, | ||
DataSourceProcessorCallback | callBack | ||
) |
Adds a data source to the case database using a background task in a separate thread by calling DataSourceProcessor.run() method. Returns as soon as the background task is started. The background task uses a callback object to signal task completion and return results. Method can throw an exception for a system level problem. The exception should not be thrown for an issue related to bad input data.
deviceId | An ASCII-printable identifier for the device associated with the data source that is intended to be unique across multiple cases (e.g., a UUID). |
dataSourcePath | Path to the data source. |
progressMonitor | Progress monitor that will be used by the background task to report progress. |
callBack | Callback that will be used by the background task to return results. |
Implements org.sleuthkit.autopsy.datasourceprocessors.AutoIngestDataSourceProcessor.
Definition at line 312 of file ImageDSProcessor.java.
void org.sleuthkit.autopsy.casemodule.ImageDSProcessor.reset | ( | ) |
Resets the selection and configuration panel for this data source processor.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 270 of file ImageDSProcessor.java.
References org.sleuthkit.autopsy.casemodule.ImageFilePanel.reset().
void org.sleuthkit.autopsy.casemodule.ImageDSProcessor.run | ( | DataSourceProcessorProgressMonitor | progressMonitor, |
DataSourceProcessorCallback | callback | ||
) |
Adds a data source to the case database using a background task in a separate thread and the settings provided by the selection and configuration panel. Returns as soon as the background task is started. The background task uses a callback object to signal task completion and return results.
This method should not be called unless isPanelValid returns true.
progressMonitor | Progress monitor that will be used by the background task to report progress. |
callback | Callback that will be used by the background task to return results. |
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 172 of file ImageDSProcessor.java.
References org.sleuthkit.autopsy.casemodule.ImageFilePanel.getContentPaths(), org.sleuthkit.autopsy.casemodule.ImageFilePanel.getNoFatOrphans(), org.sleuthkit.autopsy.casemodule.ImageFilePanel.getSectorSize(), org.sleuthkit.autopsy.casemodule.ImageFilePanel.getTimeZone(), and org.sleuthkit.autopsy.casemodule.ImageFilePanel.storeSettings().
void org.sleuthkit.autopsy.casemodule.ImageDSProcessor.run | ( | String | deviceId, |
String | imagePath, | ||
String | timeZone, | ||
boolean | ignoreFatOrphanFiles, | ||
DataSourceProcessorProgressMonitor | progressMonitor, | ||
DataSourceProcessorCallback | callback | ||
) |
Adds a data source to the case database using a background task in a separate thread and the given settings instead of those provided by the selection and configuration panel. Returns as soon as the background task is started and uses the callback object to signal task completion and return results.
deviceId | An ASCII-printable identifier for the device associated with the data source that is intended to be unique across multiple cases (e.g., a UUID). |
imagePath | Path to the image file. |
timeZone | The time zone to use when processing dates and times for the image, obtained from java.util.TimeZone.getID. |
ignoreFatOrphanFiles | Whether to parse orphans if the image has a FAT filesystem. |
progressMonitor | Progress monitor for reporting progress during processing. |
callback | Callback to call when processing is done. |
Definition at line 217 of file ImageDSProcessor.java.
|
private |
Adds a data source to the case database using a background task in a separate thread and the given settings instead of those provided by the selection and configuration panel. Returns as soon as the background task is started and uses the callback object to signal task completion and return results.
deviceId | An ASCII-printable identifier for the device associated with the data source that is intended to be unique across multiple cases (e.g., a UUID). |
imagePath | Path to the image file. |
sectorSize | The sector size (use '0' for autodetect). |
timeZone | The time zone to use when processing dates and times for the image, obtained from java.util.TimeZone.getID. |
ignoreFatOrphanFiles | Whether to parse orphans if the image has a FAT filesystem. |
md5 | The MD5 hash of the image, may be null. |
sha1 | The SHA-1 hash of the image, may be null. |
sha256 | The SHA-256 hash of the image, may be null. |
progressMonitor | Progress monitor for reporting progress during processing. |
callback | Callback to call when processing is done. |
Definition at line 246 of file ImageDSProcessor.java.
void org.sleuthkit.autopsy.casemodule.ImageDSProcessor.setDataSourceOptions | ( | String | imagePath, |
String | timeZone, | ||
boolean | ignoreFatOrphanFiles | ||
) |
Sets the configuration of the data source processor without using the selection and configuration panel.
imagePath | Path to the image file. |
timeZone | The time zone to use when processing dates and times for the image, obtained from java.util.TimeZone.getID. |
ignoreFatOrphanFiles | Whether to parse orphans if the image has a FAT filesystem. |
Definition at line 336 of file ImageDSProcessor.java.
|
private |
Definition at line 60 of file ImageDSProcessor.java.
|
staticprivate |
Definition at line 56 of file ImageDSProcessor.java.
|
staticprivate |
Definition at line 52 of file ImageDSProcessor.java.
|
staticprivate |
Definition at line 57 of file ImageDSProcessor.java.
|
private |
Definition at line 59 of file ImageDSProcessor.java.
|
staticprivate |
Definition at line 51 of file ImageDSProcessor.java.
|
private |
Definition at line 65 of file ImageDSProcessor.java.
|
staticprivate |
Definition at line 54 of file ImageDSProcessor.java.
|
staticprivate |
Definition at line 58 of file ImageDSProcessor.java.
|
private |
Definition at line 69 of file ImageDSProcessor.java.
|
private |
Definition at line 66 of file ImageDSProcessor.java.
|
private |
Definition at line 70 of file ImageDSProcessor.java.
|
staticprivate |
Definition at line 53 of file ImageDSProcessor.java.
|
private |
Definition at line 67 of file ImageDSProcessor.java.
|
private |
Definition at line 73 of file ImageDSProcessor.java.
|
private |
Definition at line 71 of file ImageDSProcessor.java.
|
private |
Definition at line 72 of file ImageDSProcessor.java.
|
private |
Definition at line 68 of file ImageDSProcessor.java.
|
staticprivate |
Definition at line 55 of file ImageDSProcessor.java.
Copyright © 2012-2018 Basis Technology. Generated on: Wed Sep 18 2019
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.