org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster Class Reference

Inherits org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.MultiEvent< EventStripe >.

Public Member Functions
	EventCluster (Interval spanningInterval, TimelineEventType type, Set< Long > eventIDs, Set< Long > hashHits, Set< Long > tagged, String description, TimelineEvent.DescriptionLevel lod)
	EventCluster (TimelineEvent event, TimelineEventType type, TimelineEvent.DescriptionLevel lod)
boolean	equals (Object obj)
SortedSet< EventCluster >	getClusters ()
String	getDescription ()
TimelineEvent.DescriptionLevel	getDescriptionLevel ()
long	getEndMillis ()
Set< Long >	getEventIDs ()
Set< Long >	getEventIDsWithHashHits ()
Set< Long >	getEventIDsWithTags ()
TimelineEventType	getEventType ()
Optional< EventStripe >	getParent ()
Optional< EventStripe >	getParentStripe ()
Interval	getSpan ()
long	getStartMillis ()
int	hashCode ()
String	toString ()
EventCluster	withParent (EventStripe parent)

Static Public Member Functions
static EventCluster	merge (EventCluster cluster1, EventCluster cluster2)

Private Member Functions
	EventCluster (Interval spanningInterval, TimelineEventType type, Set< Long > eventIDs, Set< Long > hashHits, Set< Long > tagged, String description, TimelineEvent.DescriptionLevel lod, EventStripe parent)

Private Attributes
final String	description
final Set< Long >	eventIDs
final Set< Long >	hashHits
final TimelineEvent.DescriptionLevel	lod
final EventStripe	parent
final Interval	span
final Set< Long >	tagged
final TimelineEventType	type

Detailed Description

Represents a set of other events clustered together. All the sub events should have the same type and matching descriptions at the designated "zoom level", and be "close together" in time.

Definition at line 40 of file EventCluster.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster ( Interval  spanningInterval, TimelineEventType  type, Set< Long >  eventIDs, Set< Long >  hashHits, Set< Long >  tagged, String  description, TimelineEvent.DescriptionLevel  lod, EventStripe  parent  )

private

Definition at line 128 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.description, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.eventIDs, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashHits, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.parent, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.tagged, and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.type.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.withParent().

org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster	(	Interval	spanningInterval,
		TimelineEventType	type,
		Set< Long >	eventIDs,
		Set< Long >	hashHits,
		Set< Long >	tagged,
		String	description,
		TimelineEvent.DescriptionLevel	lod
	)

Definition at line 143 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.description, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.eventIDs, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashHits, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.tagged, and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.type.

org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster	(	TimelineEvent	event,
		TimelineEventType	type,
		TimelineEvent.DescriptionLevel	lod
	)

Definition at line 149 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.eventIDs, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod, and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.type.

Member Function Documentation

boolean org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals

(

Object

obj

)

Definition at line 264 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.description, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.eventIDs, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod, and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.type.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals().

SortedSet<EventCluster> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getClusters

(

)

Definition at line 244 of file EventCluster.java.

String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescription

(

)

Definition at line 215 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.description.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().

TimelineEvent.DescriptionLevel org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescriptionLevel

(

)

Definition at line 225 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe().

long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEndMillis

(

)

Definition at line 195 of file EventCluster.java.

Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDs

(

)

Definition at line 200 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.eventIDs.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().

Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithHashHits

(

)

Definition at line 205 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashHits.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().

Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithTags

(

)

Definition at line 210 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.tagged.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().

TimelineEventType org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventType

(

)

Definition at line 220 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.type.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().

Optional<EventStripe> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParent

(

)

get the EventStripe (if any) that contains this cluster

Returns

an Optional containg the parent stripe of this cluster, or is empty if the cluster has no parent set.

Definition at line 169 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParentStripe().

Optional<EventStripe> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParentStripe

(

)

get the EventStripe (if any) that contains this cluster

Returns

an Optional containg the parent stripe of this cluster, or is empty if the cluster has no parent set.

Definition at line 180 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParent().

Interval org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getSpan

(

)

Definition at line 185 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.span.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailsViewModel.mergeClustersToStripes().

long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getStartMillis

(

)

Definition at line 190 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters().

int org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashCode

(

)

Definition at line 254 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod.

static EventCluster org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge ( EventCluster  cluster1, EventCluster  cluster2  )

static

merge two event clusters into one new event cluster.

Parameters

cluster1
cluster2

Returns

a new event cluster that is the result of merging the given events clusters

Definition at line 90 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescription(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDs(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithHashHits(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithTags(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventType(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.span, and org.sleuthkit.autopsy.timeline.utils.IntervalUtils.span().

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailsViewModel.mergeClustersToStripes().

String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.toString

(

)

Definition at line 249 of file EventCluster.java.

EventCluster org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.withParent

(

EventStripe

parent

)

return a new EventCluster identical to this one, except with the given EventBundle as the parent.

Parameters

parent

Returns

a new EventCluster identical to this one, except with the given EventBundle as the parent.

Definition at line 238 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe().

Member Data Documentation

final String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.description

private

the common description of all the clustered events

Definition at line 57 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescription().

final Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.eventIDs

private

the set of ids of the clustered events

Definition at line 67 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDs().

final Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashHits

private

the ids of the subset of clustered events that have at least one hash set hit

Definition at line 79 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithHashHits().

final TimelineEvent.DescriptionLevel org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod

private

the description level of detail that the events were clustered at.

Definition at line 62 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescriptionLevel(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashCode(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.withParent().

final EventStripe org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.parent

private

Definition at line 42 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster().

final Interval org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.span

private

the smallest time interval containing all the clustered events

Definition at line 47 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getSpan(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().

final Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.tagged

private

the ids of the subset of clustered events that have at least one tag applied to them

Definition at line 73 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithTags().

final TimelineEventType org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.type

private

the type of all the clustered events

Definition at line 52 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventType().

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/timeline/ui/detailview/datamodel/EventCluster.java