org.sleuthkit.autopsy.datamodel.KeywordHits Class Reference

Inherits org.sleuthkit.autopsy.datamodel.AutopsyVisitableItem.

Classes
class	DetachableObserverChildFactory
class	HitsFactory
class	KeywordResults
class	KWHitsNodeBase
class	ListFactory
class	ListNode
class	RegExpInstanceNode
class	RegExpInstancesFactory
class	RootNode
class	TermFactory
class	TermNode

Public Member Functions
	KeywordHits (SleuthkitCase skCase, long objId)

Static Public Attributes
static final String	NAME = BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getLabel()

Private Member Functions
BlackboardArtifactNode	createBlackboardArtifactNode (BlackboardArtifact art)

Static Private Member Functions
static boolean	isOnlyDefaultInstance (List< String > instances)

Private Attributes
final long	filteringDSObjId
final KeywordResults	keywordResults
SleuthkitCase	skCase

Static Private Attributes
static final String	DEFAULT_INSTANCE_NAME = "DEFAULT_INSTANCE_NAME"
static final Set< IngestManager.IngestJobEvent >	INGEST_JOB_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestJobEvent.COMPLETED, IngestManager.IngestJobEvent.CANCELLED)
static final Set< IngestManager.IngestModuleEvent >	INGEST_MODULE_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestModuleEvent.DATA_ADDED)
static final String	KEYWORD_HIT_ATTRIBUTES_QUERY
static final String	KEYWORD_HITS = KeywordHits_kwHits_text()
static final Logger	logger = Logger.getLogger(KeywordHits.class.getName())
static final String	SIMPLE_LITERAL_SEARCH = KeywordHits_simpleLiteralSearch_text()
static final String	SIMPLE_REGEX_SEARCH = KeywordHits_singleRegexSearch_text()

Detailed Description

Keyword hits node support

Definition at line 62 of file KeywordHits.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordHits	(	SleuthkitCase	skCase,
		long	objId
	)

Constructor

Parameters

skCase	Case DB
objId	Object id of the data source

Definition at line 123 of file KeywordHits.java.

References org.sleuthkit.autopsy.datamodel.KeywordHits.skCase.

Member Function Documentation

BlackboardArtifactNode org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode ( BlackboardArtifact  art )

private

Create a blackboard node for the given Keyword Hit artifact

Parameters

art

Returns

Node or null on error

Definition at line 855 of file KeywordHits.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addNodeProperty(), and org.sleuthkit.autopsy.datamodel.ContentUtils.getStringTime().

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.HitsFactory.createNodeForKey().

static boolean org.sleuthkit.autopsy.datamodel.KeywordHits.isOnlyDefaultInstance ( List< String >  instances )

staticprivate

Definition at line 103 of file KeywordHits.java.

Member Data Documentation

final String org.sleuthkit.autopsy.datamodel.KeywordHits.DEFAULT_INSTANCE_NAME = "DEFAULT_INSTANCE_NAME"

staticprivate

String used in the instance MAP so that exact matches and substring can fit into the same data structure as regexps, even though they don't use instances.

Definition at line 85 of file KeywordHits.java.

final long org.sleuthkit.autopsy.datamodel.KeywordHits.filteringDSObjId

private

Definition at line 78 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordResults.update().

final Set<IngestManager.IngestJobEvent> org.sleuthkit.autopsy.datamodel.KeywordHits.INGEST_JOB_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestJobEvent.COMPLETED, IngestManager.IngestJobEvent.CANCELLED)

staticprivate

Definition at line 65 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.addNotify().

final Set<IngestManager.IngestModuleEvent> org.sleuthkit.autopsy.datamodel.KeywordHits.INGEST_MODULE_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestModuleEvent.DATA_ADDED)

staticprivate

Definition at line 66 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.addNotify().

final String org.sleuthkit.autopsy.datamodel.KeywordHits.KEYWORD_HIT_ATTRIBUTES_QUERY

staticprivate

Initial value:

= "SELECT blackboard_attributes.value_text, "
            + "blackboard_attributes.value_int32, "
            + "blackboard_attributes.artifact_id, " 
            + "blackboard_attributes.attribute_type_id "
            + "FROM blackboard_attributes, blackboard_artifacts "
            + "WHERE blackboard_attributes.artifact_id = blackboard_artifacts.artifact_id "
            + " AND blackboard_artifacts.artifact_type_id = " + BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getTypeID() 
            + " AND (attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_SET_NAME.getTypeID()
            + " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD.getTypeID()
            + " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD_SEARCH_TYPE.getTypeID()
            + " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD_REGEXP.getTypeID()
            + ")"

query attributes table for the ones that we need for the tree

Definition at line 90 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordResults.update().

final String org.sleuthkit.autopsy.datamodel.KeywordHits.KEYWORD_HITS = KeywordHits_kwHits_text()

staticprivate

Definition at line 68 of file KeywordHits.java.

final KeywordResults org.sleuthkit.autopsy.datamodel.KeywordHits.keywordResults

private

Definition at line 77 of file KeywordHits.java.

final Logger org.sleuthkit.autopsy.datamodel.KeywordHits.logger = Logger.getLogger(KeywordHits.class.getName())

staticprivate

Definition at line 64 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.NAME = BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getLabel()

static

Definition at line 74 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.SIMPLE_LITERAL_SEARCH = KeywordHits_simpleLiteralSearch_text()

staticprivate

Definition at line 70 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.SIMPLE_REGEX_SEARCH = KeywordHits_singleRegexSearch_text()

staticprivate

Definition at line 72 of file KeywordHits.java.

SleuthkitCase org.sleuthkit.autopsy.datamodel.KeywordHits.skCase

private

Definition at line 76 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordHits().

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/datamodel/KeywordHits.java