Autopsy
4.12.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Public Member Functions | |
SingleDetailsViewEvent (long eventID, long dataSourceObjId, long fileObjId, Long artifactID, long time, TimelineEventType type, String fullDescription, String medDescription, String shortDescription, boolean hashHit, boolean tagged) | |
SingleDetailsViewEvent (TimelineEvent singleEvent) | |
boolean | equals (Object obj) |
Optional< Long > | getArtifactID () |
SortedSet< EventCluster > | getClusters () |
long | getDataSourceObjID () |
String | getDescription (TimelineEvent.DescriptionLevel lod) |
String | getDescription () |
TimelineEvent.DescriptionLevel | getDescriptionLevel () |
long | getEndMillis () |
long | getEventID () |
Set< Long > | getEventIDs () |
Set< Long > | getEventIDsWithHashHits () |
Set< Long > | getEventIDsWithTags () |
TimelineEventType | getEventType () |
long | getFileID () |
String | getFullDescription () |
String | getMedDescription () |
Optional< EventStripe > | getParentStripe () |
String | getShortDescription () |
default int | getSize () |
long | getStartMillis () |
long | getTime () |
int | hashCode () |
boolean | isHashHit () |
boolean | isTagged () |
SingleDetailsViewEvent | withParent (MultiEvent<?> newParent) |
Private Attributes | |
final Long | artifactID |
final long | dataSourceObjId |
final ImmutableMap< TimelineEvent.DescriptionLevel, String > | descriptions |
final long | eventID |
final long | fileObjId |
final boolean | hashHit |
MultiEvent<?> | parent = null |
final boolean | tagged |
final long | time |
final TimelineEventType | type |
A single event.
Definition at line 35 of file SingleDetailsViewEvent.java.
org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent | ( | long | eventID, |
long | dataSourceObjId, | ||
long | fileObjId, | ||
Long | artifactID, | ||
long | time, | ||
TimelineEventType | type, | ||
String | fullDescription, | ||
String | medDescription, | ||
String | shortDescription, | ||
boolean | hashHit, | ||
boolean | tagged | ||
) |
eventID | |
dataSourceObjId | |
fileObjId | Object Id of file (could be a data source) that event is associated with |
artifactID | |
time | |
type | |
fullDescription | |
medDescription | |
shortDescription | |
hashHit | |
tagged |
Definition at line 102 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.artifactID, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.dataSourceObjId, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.eventID, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.fileObjId, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.hashHit, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.tagged, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.time, and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.type.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.equals(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.withParent().
org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent | ( | TimelineEvent | singleEvent | ) |
Definition at line 116 of file SingleDetailsViewEvent.java.
boolean org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.equals | ( | Object | obj | ) |
Optional<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getArtifactID | ( | ) |
Get the artifact id of the artifact this event is derived from.
Definition at line 172 of file SingleDetailsViewEvent.java.
SortedSet<EventCluster> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters | ( | ) |
Get the EventClusters that make up this event. May be null for SingleEvents, or return a refernece to this event if it is an EventCluster
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 301 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDs(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithHashHits(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithTags(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFullDescription(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getStartMillis().
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDataSourceObjID | ( | ) |
Get the datasource id of the datasource this event belongs to.
Definition at line 252 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.dataSourceObjId.
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription | ( | TimelineEvent.DescriptionLevel | lod | ) |
Get the description of this event at the give level of detail(LoD).
lod | The level of detail to get. |
Definition at line 243 of file SingleDetailsViewEvent.java.
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription | ( | ) |
Get a description of this event. Implementations may choose what level of description to provide.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 307 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFullDescription().
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFullDescription(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getMedDescription(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getShortDescription().
TimelineEvent.DescriptionLevel org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescriptionLevel | ( | ) |
Get the Description level of detail at which all single events of this event have the same description, ie, what level of detail was used to group these events.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 312 of file SingleDetailsViewEvent.java.
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEndMillis | ( | ) |
Get the start time of this event as milliseconds from the Unix Epoch.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 272 of file SingleDetailsViewEvent.java.
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventID | ( | ) |
Get the event id of this event.
Definition at line 181 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.eventID.
Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDs | ( | ) |
Get the id(s) of this event as a set.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 257 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters().
Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithHashHits | ( | ) |
Get the id(s) of this event that have hash hits associated with them.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 262 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isHashHit().
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters().
Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithTags | ( | ) |
Get the id(s) of this event that have tags associated with them.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 267 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isTagged().
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters().
TimelineEventType org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventType | ( | ) |
Get the EventType of this event.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 205 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.type.
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFileID | ( | ) |
Get the obj id of the file (which could be a data source) this event is derived from.
Definition at line 191 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.fileObjId.
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFullDescription | ( | ) |
Get the full description of this event.
Definition at line 214 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription().
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription().
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getMedDescription | ( | ) |
Get the medium description of this event.
Definition at line 223 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription().
Optional<EventStripe> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getParentStripe | ( | ) |
get the EventStripe (if any) that contains this event, skipping over any intervening event cluster
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 325 of file SingleDetailsViewEvent.java.
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getShortDescription | ( | ) |
Get the short description of this event.
Definition at line 232 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription().
|
inherited |
Get the number of SingleEvents this event contains.
Definition at line 111 of file DetailViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.getEventIDs().
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getStartMillis | ( | ) |
Get the end time of this event as milliseconds from the Unix Epoch.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 277 of file SingleDetailsViewEvent.java.
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getTime | ( | ) |
Get the time of this event (in seconds from the Unix epoch).
Definition at line 200 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.time.
int org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.hashCode | ( | ) |
Definition at line 282 of file SingleDetailsViewEvent.java.
boolean org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isHashHit | ( | ) |
Is the file this event is derived from in any of the configured hash sets.
Definition at line 162 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.hashHit.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithHashHits().
boolean org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isTagged | ( | ) |
Is the file or artifact this event is derived from tagged?
Definition at line 150 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.tagged.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithTags().
SingleDetailsViewEvent org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.withParent | ( | MultiEvent<?> | newParent | ) |
Get a new SingleDetailsViewEvent that is the same as this event, but with the given parent.
newParent | the parent of the new event object. |
Definition at line 139 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.hashHit, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.parent, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.tagged.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.EventStripeNode.createChildNode().
|
private |
The TSK artifact ID of the file this event is derived from. Null, if this event is not derived from an artifact.
Definition at line 48 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
|
private |
The TSK datasource ID of the datasource this event belongs to.
Definition at line 53 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDataSourceObjID(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
|
private |
The three descriptions (full, med, short) stored in a map, keyed by DescriptionLOD (Level of Detail)
Definition at line 68 of file SingleDetailsViewEvent.java.
|
private |
Definition at line 37 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventID(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
|
private |
The TSK object ID of the file (could be data source) this event is derived from.
Definition at line 42 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFileID(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
|
private |
True if the file this event is derived from hits any of the configured hash sets.
Definition at line 74 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isHashHit(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.withParent().
|
private |
Single events may or may not have their parent set, since the parent is a transient property of the current (details) view settings.
Definition at line 85 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.withParent().
|
private |
True if the file or artifact this event is derived from is tagged.
Definition at line 79 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isTagged(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.withParent().
|
private |
The time of this event in second from the Unix epoch.
Definition at line 58 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getTime(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
|
private |
The type of this event.
Definition at line 62 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventType(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
Copyright © 2012-2018 Basis Technology. Generated on: Wed Sep 18 2019
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.