Autopsy
4.12.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Public Member Functions | |
synchronized void | advance () |
void | applyDefaultFilters () |
synchronized ReadOnlyBooleanProperty | canAdvanceProperty () |
synchronized ReadOnlyBooleanProperty | canRetreatProperty () |
Case | getAutopsyCase () |
FilteredEventsModel | getEventsModel () |
ObservableSet< DetailViewEvent > | getPinnedEvents () |
ObservableList< DescriptionFilterState > | getQuickHideFilters () |
synchronized ObservableList< Long > | getSelectedEventIDs () |
synchronized Interval | getSelectedTimeRange () |
synchronized ReadOnlyListProperty< Task<?> > | getTasks () |
synchronized TimeLineTopComponent | getTopComponent () |
synchronized ViewMode | getViewMode () |
synchronized void | monitorTask (final Task<?> task) |
void | pinEvent (DetailViewEvent event) |
synchronized void | pushDescrLOD (TimelineEvent.DescriptionLevel newLOD) |
synchronized void | pushEventTypeZoom (TimelineEventType.TypeLevel typeZoomeLevel) |
synchronized void | pushFilters (RootFilterState filter) |
synchronized void | pushPeriod (ReadablePeriod period) throws TskCoreException |
synchronized void | pushTimeAndType (Interval timeRange, TimelineEventType.TypeLevel typeZoom) throws TskCoreException |
synchronized boolean | pushTimeRange (Interval timeRange) throws TskCoreException |
synchronized boolean | pushTimeUnit (TimeUnits timeUnit) throws TskCoreException |
synchronized void | pushZoomInTime () throws TskCoreException |
synchronized void | pushZoomOutTime () throws TskCoreException |
synchronized void | registerForEvents (Object listener) |
synchronized void | retreat () |
synchronized ReadOnlyObjectProperty< Interval > | selectedTimeRangeProperty () |
final synchronized void | selectEventIDs (Collection< Long > eventIDs) throws TskCoreException |
void | selectTimeAndType (Interval interval, TimelineEventType type) throws TskCoreException |
void | setStatusMessage (String string) |
synchronized void | setViewMode (ViewMode viewMode) |
void | shutDownTimeLine () |
ReadOnlyStringProperty | statusMessageProperty () |
synchronized ReadOnlyStringProperty | taskMessageProperty () |
synchronized ReadOnlyDoubleProperty | taskProgressProperty () |
synchronized ReadOnlyStringProperty | taskTitleProperty () |
void | unPinEvent (DetailViewEvent event) |
synchronized void | unRegisterForEvents (Object listener) |
synchronized ReadOnlyObjectProperty< ViewMode > | viewModeProperty () |
void | zoomOutToActivity () throws TskCoreException |
Static Public Member Functions | |
static DateTimeZone | getJodaTimeZone () |
static TimeZone | getTimeZone () |
static ZoneId | getTimeZoneID () |
static DateTimeFormatter | getZonedFormatter () |
static synchronized void | setTimeZone (TimeZone timeZone) |
static ReadOnlyObjectProperty< TimeZone > | timeZoneProperty () |
Private Member Functions | |
synchronized void | advance (ZoomState newState) |
void | logFutureException (ListenableFuture<?> future, String errorLogMessage, String errorUserMessage) |
boolean | showFullRange () throws TskCoreException |
void | showInListView (ViewInTimelineRequestedEvent requestEvent) throws TskCoreException |
synchronized void | showWindow () |
Private Attributes | |
final Case | autoCase |
final ReadOnlyObjectWrapper< ZoomState > | currentParams = new ReadOnlyObjectWrapper<>() |
final EventBus | eventbus = new EventBus("TimeLineController_EventBus") |
final ListeningExecutorService | executor |
final FilteredEventsModel | filteredEvents |
final History< ZoomState > | historyManager = new History<>() |
final ZoomState | InitialZoomState |
final ObservableSet< DetailViewEvent > | pinnedEvents = FXCollections.observableSet() |
final ObservableSet< DetailViewEvent > | pinnedEventsUnmodifiable = FXCollections.unmodifiableObservableSet(pinnedEvents) |
final PromptDialogManager | promptDialogManager = new PromptDialogManager(this) |
final ObservableList< DescriptionFilterState > | quickHideFilters = FXCollections.observableArrayList() |
final ObservableList< Long > | selectedEventIDs = FXCollections.<Long>observableArrayList() |
final ReadOnlyObjectWrapper< Interval > | selectedTimeRange = new ReadOnlyObjectWrapper<>() |
final ReadOnlyStringWrapper | statusMessage = new ReadOnlyStringWrapper() |
final ReadOnlyStringWrapper | taskMessage = new ReadOnlyStringWrapper() |
final ReadOnlyDoubleWrapper | taskProgress = new ReadOnlyDoubleWrapper(-1) |
final ReadOnlyListWrapper< Task<?> > | tasks = new ReadOnlyListWrapper<>(FXCollections.observableArrayList()) |
final ReadOnlyStringWrapper | taskTitle = new ReadOnlyStringWrapper() |
TimeLineTopComponent | topComponent |
final ReadOnlyObjectWrapper< ViewMode > | viewMode = new ReadOnlyObjectWrapper<>(ViewMode.COUNTS) |
Static Private Attributes | |
static final Logger | logger = Logger.getLogger(TimeLineController.class.getName()) |
static final ReadOnlyObjectWrapper< TimeZone > | timeZone = new ReadOnlyObjectWrapper<>(TimeZone.getDefault()) |
Controller in the MVC design along with FilteredEventsModel TimeLineView. Forwards interpreted user gestures form views to model. Provides model to view.
Concurrency Policy:
Since filteredEvents is internally synchronized, only compound access to it needs external synchronization
Definition at line 114 of file TimeLineController.java.
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.advance | ( | ) |
Definition at line 590 of file TimeLineController.java.
|
private |
Definition at line 598 of file TimeLineController.java.
void org.sleuthkit.autopsy.timeline.TimeLineController.applyDefaultFilters | ( | ) |
Definition at line 324 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.actions.ResetFilters.ResetFilters().
synchronized ReadOnlyBooleanProperty org.sleuthkit.autopsy.timeline.TimeLineController.canAdvanceProperty | ( | ) |
Definition at line 249 of file TimeLineController.java.
synchronized ReadOnlyBooleanProperty org.sleuthkit.autopsy.timeline.TimeLineController.canRetreatProperty | ( | ) |
Definition at line 253 of file TimeLineController.java.
Case org.sleuthkit.autopsy.timeline.TimeLineController.getAutopsyCase | ( | ) |
Definition at line 175 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.actions.AddManualEvent.JEventCreationDialog.EventCreationDialogPane.initialize(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport(), and org.sleuthkit.autopsy.timeline.ui.ViewFrame.syncViewMode().
FilteredEventsModel org.sleuthkit.autopsy.timeline.TimeLineController.getEventsModel | ( | ) |
Definition at line 320 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.AbstractTimeLineView.AbstractTimeLineView(), org.sleuthkit.autopsy.timeline.actions.AddManualEvent.addEvent(), org.sleuthkit.autopsy.timeline.ui.detailview.EventStripeNode.createChildNode(), org.sleuthkit.autopsy.timeline.ui.filtering.FilterSetPanel.FilterSetPanel(), org.sleuthkit.autopsy.timeline.actions.ResetFilters.ResetFilters(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport(), org.sleuthkit.autopsy.timeline.actions.ZoomOut.ZoomOut(), org.sleuthkit.autopsy.timeline.zooming.ZoomSettingsPane.ZoomSettingsPane(), and org.sleuthkit.autopsy.timeline.actions.ZoomToEvents.ZoomToEvents().
|
static |
Definition at line 138 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.countsview.EventCountsChart.CountsIntervalSelector.adjustInterval(), org.sleuthkit.autopsy.timeline.ui.countsview.CountsViewPane.CountsUpdateTask.call(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailsViewModel.DetailsViewModel(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailsViewModel.getEventStripes(), org.sleuthkit.autopsy.timeline.TimeLineTopComponent.getResultViewerSummaryString(), org.sleuthkit.autopsy.timeline.zooming.ZoomSettingsPane.initialize(), org.sleuthkit.autopsy.timeline.ui.ViewFrame.refreshHistorgram(), and org.sleuthkit.autopsy.timeline.ui.ViewFrame.refreshTimeUI().
ObservableSet<DetailViewEvent> org.sleuthkit.autopsy.timeline.TimeLineController.getPinnedEvents | ( | ) |
Definition at line 344 of file TimeLineController.java.
ObservableList<DescriptionFilterState> org.sleuthkit.autopsy.timeline.TimeLineController.getQuickHideFilters | ( | ) |
synchronized ObservableList<Long> org.sleuthkit.autopsy.timeline.TimeLineController.getSelectedEventIDs | ( | ) |
Get an ObservableList of selected event IDs
Definition at line 227 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.listvew.ListViewPane.ListUpdateTask.call(), and org.sleuthkit.autopsy.timeline.TimeLineTopComponent.TimeLineTopComponent().
synchronized Interval org.sleuthkit.autopsy.timeline.TimeLineController.getSelectedTimeRange | ( | ) |
Get the selected time range.
Definition at line 245 of file TimeLineController.java.
synchronized ReadOnlyListProperty<Task<?> > org.sleuthkit.autopsy.timeline.TimeLineController.getTasks | ( | ) |
Definition at line 179 of file TimeLineController.java.
|
static |
Definition at line 146 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.actions.AddManualEvent.JEventCreationDialog.EventCreationDialogPane.initialize().
|
static |
Definition at line 130 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.ViewFrame.epochMillisToLocalDateTime(), org.sleuthkit.autopsy.timeline.actions.AddManualEvent.JEventCreationDialog.EventCreationDialogPane.EventCreationDialogPane(), and org.sleuthkit.autopsy.timeline.ui.ViewFrame.localDateTimeToEpochMilli().
synchronized TimeLineTopComponent org.sleuthkit.autopsy.timeline.TimeLineController.getTopComponent | ( | ) |
Definition at line 491 of file TimeLineController.java.
synchronized ViewMode org.sleuthkit.autopsy.timeline.TimeLineController.getViewMode | ( | ) |
Get the currently active ViewMode.
Definition at line 277 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.ViewFrame.syncViewMode().
|
static |
Definition at line 134 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.DetailsChart.DetailIntervalSelector.formatSpan(), org.sleuthkit.autopsy.timeline.explorernodes.EventNode.getDateTimeString(), org.sleuthkit.autopsy.timeline.TimeLineTopComponent.getResultViewerSummaryString(), and org.sleuthkit.autopsy.timeline.ShowInTimelineDialog.DateTimeTableCell< X >.updateItem().
|
private |
Definition at line 803 of file TimeLineController.java.
References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Message.error().
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.monitorTask | ( | final Task<?> | task | ) |
submit a task for execution and add it to the list of tasks whose progress is monitored and displayed in the progress bar
task |
Definition at line 648 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.AbstractTimeLineView.refresh(), and org.sleuthkit.autopsy.timeline.ui.ViewFrame.refreshHistorgram().
void org.sleuthkit.autopsy.timeline.TimeLineController.pinEvent | ( | DetailViewEvent | event | ) |
Definition at line 336 of file TimeLineController.java.
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.pushDescrLOD | ( | TimelineEvent.DescriptionLevel | newLOD | ) |
Definition at line 557 of file TimeLineController.java.
References org.sleuthkit.autopsy.timeline.zooming.ZoomState.hasDescrLOD(), and org.sleuthkit.autopsy.timeline.zooming.ZoomState.withDescrLOD().
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.pushEventTypeZoom | ( | TimelineEventType.TypeLevel | typeZoomeLevel | ) |
Definition at line 495 of file TimeLineController.java.
References org.sleuthkit.autopsy.timeline.zooming.ZoomState.hasTypeZoomLevel(), and org.sleuthkit.autopsy.timeline.zooming.ZoomState.withTypeZoomLevel().
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.pushFilters | ( | RootFilterState | filter | ) |
Definition at line 581 of file TimeLineController.java.
References org.sleuthkit.autopsy.timeline.zooming.ZoomState.hasFilterState(), and org.sleuthkit.autopsy.timeline.zooming.ZoomState.withFilterState().
Referenced by org.sleuthkit.autopsy.timeline.ui.filtering.FilterSetPanel.applyFilters().
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.pushPeriod | ( | ReadablePeriod | period | ) | throws TskCoreException |
Request a time range the same length as the given period and centered around the middle of the currently viewed time range.
period | The period of time to show around the current center of the view. |
Definition at line 449 of file TimeLineController.java.
References org.sleuthkit.autopsy.timeline.utils.IntervalUtils.getIntervalAroundMiddle().
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.pushTimeAndType | ( | Interval | timeRange, |
TimelineEventType.TypeLevel | typeZoom | ||
) | throws TskCoreException |
Definition at line 567 of file TimeLineController.java.
References org.sleuthkit.autopsy.timeline.zooming.ZoomState.hasTimeRange(), org.sleuthkit.autopsy.timeline.zooming.ZoomState.hasTypeZoomLevel(), org.sleuthkit.autopsy.timeline.zooming.ZoomState.withTimeAndType(), org.sleuthkit.autopsy.timeline.zooming.ZoomState.withTimeRange(), and org.sleuthkit.autopsy.timeline.zooming.ZoomState.withTypeZoomLevel().
synchronized boolean org.sleuthkit.autopsy.timeline.TimeLineController.pushTimeRange | ( | Interval | timeRange | ) | throws TskCoreException |
Set the new interval to view, and record it in the history. The interval will be clamped to the span of events in the current case.
timeRange | The Interval to view. |
Definition at line 513 of file TimeLineController.java.
References org.sleuthkit.autopsy.timeline.zooming.ZoomState.hasTimeRange(), and org.sleuthkit.autopsy.timeline.zooming.ZoomState.withTimeRange().
Referenced by org.sleuthkit.autopsy.timeline.ui.ViewFrame.PickerListener.invalidated(), and org.sleuthkit.autopsy.timeline.ui.IntervalSelector< DateTime >.zoomToSelectedInterval().
synchronized boolean org.sleuthkit.autopsy.timeline.TimeLineController.pushTimeUnit | ( | TimeUnits | timeUnit | ) | throws TskCoreException |
Change the view by setting a new time range that is the length of timeUnit and centered at the current center.
timeUnit | The unit of time to view |
org.sleuthkit.datamodel.TskCoreException |
Definition at line 549 of file TimeLineController.java.
References org.sleuthkit.autopsy.timeline.zooming.TimeUnits.FOREVER, and org.sleuthkit.autopsy.timeline.utils.IntervalUtils.getIntervalAroundMiddle().
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.pushZoomInTime | ( | ) | throws TskCoreException |
Definition at line 463 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.actions.ZoomIn.ZoomIn().
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.pushZoomOutTime | ( | ) | throws TskCoreException |
Definition at line 455 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.actions.ZoomOut.ZoomOut().
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.registerForEvents | ( | Object | listener | ) |
Register the given object to receive events.
listener | The object to register. Must implement public methods annotated with Subscribe. |
Definition at line 705 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.ViewFrame.syncViewMode().
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.retreat | ( | ) |
Definition at line 594 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.listvew.ListViewPane.ListUpdateTask.cancelled(), and org.sleuthkit.autopsy.timeline.ui.detailview.DetailViewPane.DetailsUpdateTask.cancelled().
synchronized ReadOnlyObjectProperty<Interval> org.sleuthkit.autopsy.timeline.TimeLineController.selectedTimeRangeProperty | ( | ) |
Get a read only observable view of the selected time range.
Definition at line 236 of file TimeLineController.java.
final synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.selectEventIDs | ( | Collection< Long > | eventIDs | ) | throws TskCoreException |
Select the given event IDs and set their spanning interval as the selected time range.
eventIDs | The eventIDs to select |
Definition at line 608 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.DetailViewPane.DetailViewPane().
void org.sleuthkit.autopsy.timeline.TimeLineController.selectTimeAndType | ( | Interval | interval, |
TimelineEventType | type | ||
) | throws TskCoreException |
Definition at line 613 of file TimeLineController.java.
References org.sleuthkit.autopsy.coreutils.LoggedTask< T >.succeeded().
void org.sleuthkit.autopsy.timeline.TimeLineController.setStatusMessage | ( | String | string | ) |
Definition at line 160 of file TimeLineController.java.
|
static |
Definition at line 718 of file TimeLineController.java.
References org.sleuthkit.autopsy.timeline.TimeLineController.timeZone.
Referenced by org.sleuthkit.autopsy.timeline.ui.TimeZonePanel.initialize().
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.setViewMode | ( | ViewMode | viewMode | ) |
Set a new ViewMode as the active one.
viewMode | The new ViewMode to set. |
Definition at line 266 of file TimeLineController.java.
|
private |
Show the entire range of the timeline.
Definition at line 351 of file TimeLineController.java.
|
private |
Show the events and the amount of time indicated in the given ViewInTimelineRequestedEvent in the List View.
requestEvent | Contains the ID of the requested events and the timerange to show. |
Definition at line 365 of file TimeLineController.java.
References org.sleuthkit.autopsy.timeline.ViewMode.LIST.
|
private |
Show the timeline TimeLineTopComponent. This method will construct a new instance of TimeLineTopComponent if necessary.
Definition at line 476 of file TimeLineController.java.
void org.sleuthkit.autopsy.timeline.TimeLineController.shutDownTimeLine | ( | ) |
"Shut down" Timeline. Remove all the case and ingest listers. Close the timeline window.
Definition at line 384 of file TimeLineController.java.
ReadOnlyStringProperty org.sleuthkit.autopsy.timeline.TimeLineController.statusMessageProperty | ( | ) |
Status is a string that will be displayed in the status bar as a kind of user hint/information when it is not empty
Definition at line 156 of file TimeLineController.java.
synchronized ReadOnlyStringProperty org.sleuthkit.autopsy.timeline.TimeLineController.taskMessageProperty | ( | ) |
Definition at line 187 of file TimeLineController.java.
synchronized ReadOnlyDoubleProperty org.sleuthkit.autopsy.timeline.TimeLineController.taskProgressProperty | ( | ) |
Definition at line 183 of file TimeLineController.java.
synchronized ReadOnlyStringProperty org.sleuthkit.autopsy.timeline.TimeLineController.taskTitleProperty | ( | ) |
Definition at line 191 of file TimeLineController.java.
|
static |
Definition at line 142 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.AbstractTimeLineView.AbstractTimeLineView(), and org.sleuthkit.autopsy.timeline.TimeLineTopComponent.TimeLineTopComponent().
void org.sleuthkit.autopsy.timeline.TimeLineController.unPinEvent | ( | DetailViewEvent | event | ) |
Definition at line 340 of file TimeLineController.java.
synchronized void org.sleuthkit.autopsy.timeline.TimeLineController.unRegisterForEvents | ( | Object | listener | ) |
Un-register the given object, so it no longer receives events.
listener | The object to un-register. |
Definition at line 714 of file TimeLineController.java.
synchronized ReadOnlyObjectProperty<ViewMode> org.sleuthkit.autopsy.timeline.TimeLineController.viewModeProperty | ( | ) |
Definition at line 257 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.zooming.ZoomSettingsPane.initialize(), and org.sleuthkit.autopsy.timeline.TimeLineTopComponent.TimeLineTopComponent().
void org.sleuthkit.autopsy.timeline.TimeLineController.zoomOutToActivity | ( | ) | throws TskCoreException |
Definition at line 328 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.actions.ZoomToEvents.ZoomToEvents().
|
private |
Definition at line 163 of file TimeLineController.java.
|
private |
Definition at line 211 of file TimeLineController.java.
|
private |
Definition at line 128 of file TimeLineController.java.
|
private |
Definition at line 120 of file TimeLineController.java.
|
private |
Definition at line 202 of file TimeLineController.java.
|
private |
Definition at line 208 of file TimeLineController.java.
|
private |
Definition at line 205 of file TimeLineController.java.
|
staticprivate |
Definition at line 116 of file TimeLineController.java.
|
private |
Definition at line 333 of file TimeLineController.java.
|
private |
Definition at line 334 of file TimeLineController.java.
|
private |
Definition at line 220 of file TimeLineController.java.
|
private |
Definition at line 166 of file TimeLineController.java.
|
private |
Definition at line 215 of file TimeLineController.java.
|
private |
Definition at line 218 of file TimeLineController.java.
|
private |
Definition at line 126 of file TimeLineController.java.
|
private |
Definition at line 124 of file TimeLineController.java.
|
private |
Definition at line 123 of file TimeLineController.java.
|
private |
Definition at line 122 of file TimeLineController.java.
|
private |
Definition at line 125 of file TimeLineController.java.
|
staticprivate |
Definition at line 118 of file TimeLineController.java.
Referenced by org.sleuthkit.autopsy.timeline.TimeLineController.setTimeZone().
|
private |
Definition at line 196 of file TimeLineController.java.
|
private |
Definition at line 199 of file TimeLineController.java.
Copyright © 2012-2018 Basis Technology. Generated on: Wed Sep 18 2019
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.