Autopsy
4.12.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.
Public Member Functions | |
void | addNodeProperty (NodeProperty<?> np) |
Action[] | getActions (boolean context) |
BlackboardArtifact | getArtifact () |
T | getContent () |
List< Content > | getContentChildren () |
int | getContentChildrenCount () |
List< Long > | getContentChildrenIds () |
String | getItemType () |
String | getName () |
String | getSourceName () |
boolean | hasContentChildren () |
boolean | hasVisibleContentChildren () |
boolean | isLeafTypeNode () |
int | read (byte[] buf, long offset, long len) throws TskException |
void | setName (String name) |
Static Public Member Functions | |
static boolean | contentHasVisibleContentChildren (Content c) |
Protected Member Functions | |
final void | addCommentProperty (Sheet.Set sheetSet, List< Tag > tags, CorrelationAttributeInstance attribute) |
final void | addCountProperty (Sheet.Set sheetSet, CorrelationAttributeInstance attribute) |
final void | addScorePropertyAndDescription (Sheet.Set sheetSet, List< Tag > tags) |
void | addTagProperty (Sheet.Set sheetSet) throws MissingResourceException |
final void | addTagProperty (Sheet.Set sheetSet, List< Tag > tags) |
Sheet | createSheet () |
void | finalize () throws Throwable |
final List< Tag > | getAllTagsFromDatabase () |
DataResultViewerTable.HasCommentStatus | getCommentProperty (List< Tag > tags, CorrelationAttributeInstance attribute) |
final CorrelationAttributeInstance | getCorrelationAttributeInstance () |
Pair< Long, String > | getCountPropertyAndDescription (Type attributeType, String attributeValue, String defaultDescription) |
Pair< DataResultViewerTable.Score, String > | getScorePropertyAndDescription (List< Tag > tags) |
synchronized void | updateSheet (NodeProperty<?>...newProps) |
Static Protected Attributes | |
static final String | NO_DESCR |
static final String | VALUE_LOADING |
Private Member Functions | |
AccountArtifactNode (BlackboardArtifact artifact) | |
void | updateSheet () |
Private Attributes | |
final BlackboardArtifact | artifact |
Definition at line 1643 of file Accounts.java.
|
private |
Definition at line 1647 of file Accounts.java.
|
protectedinherited |
Used by (subclasses of) BlackboardArtifactNode to add the comment property to their sheets.
sheetSet | the modifiable Sheet.Set to add the property to |
tags | the list of tags associated with the file |
attribute | the correlation attribute associated with this artifact's associated file, null if central repo is not enabled |
Definition at line 616 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
protectedinherited |
Used by (subclasses of) BlackboardArtifactNode to add the Occurrences property to their sheets.
sheetSet | the modifiable Sheet.Set to add the property to |
attribute | correlation attribute instance |
Definition at line 754 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription().
|
inherited |
Add an additional custom node property to that node before it is displayed
np | NodeProperty to add |
Definition at line 815 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode().
|
protectedinherited |
Used by (subclasses of) BlackboardArtifactNode to add the Score property to their sheets.
sheetSet | the modifiable Sheet.Set to add the property to |
tags | the list of tags associated with the file |
Definition at line 674 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getScorePropertyAndDescription().
|
protectedinherited |
Used by (subclasses of) BlackboardArtifactNode to add the tags property to their sheets.
sheetSet | the modifiable Sheet.Set returned by Sheet.get(Sheet.PROPERTIES) |
Definition at line 557 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
protectedinherited |
Used by (subclasses of) BlackboardArtifactNode to add the tags property to their sheets.
sheetSet | the modifiable Sheet.Set returned by Sheet.get(Sheet.PROPERTIES) |
tags | the list of tags which should appear as the value for the property |
Definition at line 580 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
staticinherited |
Return true if the given content object has children. Useful for lazy loading.
c | The content object to look for children on |
Definition at line 155 of file AbstractContentNode.java.
|
protected |
Definition at line 1667 of file Accounts.java.
|
protectedinherited |
The finalizer removes event listeners as the BlackboardArtifactNode is being garbage collected. Yes, we know that finalizers are considered to be "bad" but since the alternative also relies on garbage collection being run and we know that finalize will be called when the object is being GC'd it seems like this is a reasonable solution.
Throwable |
Definition at line 227 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.removeListeners().
Action [] org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.getActions | ( | boolean | context | ) |
Definition at line 1656 of file Accounts.java.
|
protectedinherited |
Get all tags from the case database relating to the artifact and the file it is associated with.
Definition at line 536 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), and org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager().
|
inherited |
Definition at line 236 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact.
Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.IsLeafItemVisitor.visit(), org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.ShowItemVisitor.visit(), and org.sleuthkit.autopsy.directorytree.DataResultFilterNode.GetPreferredActionsDisplayableItemNodeVisitor.visit().
|
protectedinherited |
Gets the comment property for the node
tags | the list of tags associated with the file |
attribute | the correlation attribute associated with this artifact's associated file, null if central repo is not enabled |
Definition at line 633 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_AND_TAG_COMMENTS, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_COMMENT, org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment(), org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.NO_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_COMMENT, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_NO_COMMENT.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty().
|
inherited |
Return the content data associated with this node
Definition at line 123 of file AbstractContentNode.java.
|
inherited |
Return children of the underlying content.
Definition at line 235 of file AbstractContentNode.java.
|
inherited |
Get count of the underlying content object children.
Useful for lazy loading.
Definition at line 257 of file AbstractContentNode.java.
|
inherited |
Return ids of children of the underlying content. The ids can be treated as keys - useful for lazy loading.
Definition at line 215 of file AbstractContentNode.java.
|
protectedinherited |
Gets the correlation attribute for the associated file
Definition at line 592 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getInstanceFromContent(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.isEnabled().
|
protectedinherited |
Gets the Occurrences property for the node.
attributeType | the type of the attribute to count |
attributeValue | the value of the attribute to count |
defaultDescription | a description to use when none is determined by the getCountPropertyAndDescription method |
Definition at line 772 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.Type.getDisplayName(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getInstance().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty().
|
inherited |
Definition at line 938 of file BlackboardArtifactNode.java.
|
inherited |
Definition at line 133 of file AbstractContentNode.java.
|
protectedinherited |
Get the score property for the node.
tags | the list of tags associated with the file |
Definition at line 687 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getInstance(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getKnownBadFileHashSets(), org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.Score.INTERESTING_SCORE, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.Score.NO_SCORE, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.Score.NOTABLE_SCORE.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addScorePropertyAndDescription().
|
inherited |
Return the name of the associated source file/content
Definition at line 327 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
|
inherited |
Return true if the underlying content object has children Useful for lazy loading.
Definition at line 195 of file AbstractContentNode.java.
|
inherited |
Return true if the underlying content object has children Useful for lazy loading.
Definition at line 143 of file AbstractContentNode.java.
|
inherited |
Definition at line 933 of file BlackboardArtifactNode.java.
|
inherited |
Reads the content of this node (of the underlying content object).
buf | buffer to read into |
offset | the starting offset in the content object |
len | the length to read |
TskException | exception thrown if the requested part of content could not be read |
Definition at line 283 of file AbstractContentNode.java.
|
inherited |
Definition at line 128 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::BlackboardArtifactNode().
|
protectedinherited |
Updates the values of the properties in the current property sheet with the new properties being passed in. Only if that property exists in the current sheet will it be applied. That way, we allow for subclasses to add their own (or omit some!) properties and we will not accidentally disrupt their UI.
Race condition if not synchronized. Only one update should be applied at a time.
newProps | New file property instances to be updated in the current sheet. |
Definition at line 300 of file AbstractContentNode.java.
|
private |
Definition at line 1693 of file Accounts.java.
|
private |
Definition at line 1645 of file Accounts.java.
|
staticprotectedinherited |
Default no description string
Definition at line 75 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addCommentProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addTagProperty(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createSheet().
|
staticprotectedinherited |
Definition at line 76 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createSheet().
Copyright © 2012-2018 Basis Technology. Generated on: Wed Sep 18 2019
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.