Inherits Serializable.

Classes
class	AbstractTextCondition

class	CaseInsensitiveMultiValueStringComparisionMatcher

class	CaseInsensitivePartialStringComparisionMatcher

class	CaseInsensitiveStringComparisionMatcher

class	DateCondition

class	ExtensionCondition

interface	FileAttributeCondition

interface	FileNameCondition

class	FileSizeCondition

class	FullNameCondition

class	MetaTypeCondition

class	MimeTypeCondition

class	ParentPathCondition

class	RegexMatcher

interface	TextCondition

interface	TextMatcher

Public Member Functions
	Rule (String ruleName, FileNameCondition fileNameCondition, MetaTypeCondition metaTypeCondition, ParentPathCondition pathCondition, MimeTypeCondition mimeTypeCondition, FileSizeCondition fileSizeCondition, DateCondition dateCondition)

DateCondition	getDateCondition ()

FileNameCondition	getFileNameCondition ()

FileSizeCondition	getFileSizeCondition ()

MetaTypeCondition	getMetaTypeCondition ()

MimeTypeCondition	getMimeTypeCondition ()

String	getName ()

ParentPathCondition	getPathCondition ()

String	getUuid ()

boolean	isSatisfied (AbstractFile file)

String	toString ()

Private Attributes
final List< FileAttributeCondition >	conditions = new ArrayList<>()

final DateCondition	dateCondition

final FileNameCondition	fileNameCondition

final FileSizeCondition	fileSizeCondition

final MetaTypeCondition	metaTypeCondition

final MimeTypeCondition	mimeTypeCondition

final ParentPathCondition	pathCondition

final String	ruleName

final String	uuid

Static Private Attributes
static final long	serialVersionUID = 1L

Detailed Description

A set membership rule for an interesting files set. The immutability of a rule object allows it to be safely published to multiple threads.

Definition at line 163 of file FilesSet.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule	(	String	ruleName,
		FileNameCondition	fileNameCondition,
		MetaTypeCondition	metaTypeCondition,
		ParentPathCondition	pathCondition,
		MimeTypeCondition	mimeTypeCondition,
		FileSizeCondition	fileSizeCondition,
		DateCondition	dateCondition
	)

Construct an interesting files set membership rule.

Parameters

ruleName	The name of the rule. Can be empty string.
fileNameCondition	A file name condition, may be null.
metaTypeCondition	A file meta-type condition.
pathCondition	A file path condition, may be null.
mimeTypeCondition	A file mime type condition, may be null.
fileSizeCondition	A file size condition, may be null.
dateCondition	A file date created or modified condition, may be null

Definition at line 188 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.dateCondition, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileNameCondition, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileSizeCondition, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.metaTypeCondition, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.mimeTypeCondition, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.pathCondition, and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ruleName.

Member Function Documentation

DateCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getDateCondition ( )

Definition at line 265 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.dateCondition.

FileNameCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileNameCondition ( )

Get the file name condition for the rule.

Returns: A file name condition. Can be null.

Definition at line 243 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileNameCondition.

FileSizeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileSizeCondition ( )

Returns: the file size condition. Can be null.

Definition at line 327 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileSizeCondition.

MetaTypeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMetaTypeCondition ( )

Get the meta-type condition for the rule.

Returns: A meta-type condition. Can be null.

Definition at line 252 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.metaTypeCondition.

MimeTypeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMimeTypeCondition ( )

Returns: the mime type condition. Can be null.

Definition at line 320 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.mimeTypeCondition.

String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getName ( )

Get the name of the rule.

Returns: A name string.

Definition at line 234 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ruleName.

ParentPathCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getPathCondition ( )

Get the path condition for the rule.

Returns: A path condition, may be null.

Definition at line 261 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.pathCondition.

String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getUuid ( )

Returns: the ruleUUID

Definition at line 313 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.uuid.

boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.isSatisfied ( AbstractFile file )

Determines whether or not a file satisfies the rule.

Parameters

file	The file to test.

Returns: True if the rule is satisfied, false otherwise.

Definition at line 276 of file FilesSet.java.

String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.toString ( )

Definition at line 290 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.getComparator(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.DateCondition.getDaysIncluded(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.MimeTypeCondition.getMimeType(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.SIZE_UNIT.getName(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.getSizeValue(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.COMPARATOR.getSymbol(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.AbstractTextCondition.getTextToMatch(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.getUnit().

Member Data Documentation

final List<FileAttributeCondition> org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.conditions = new ArrayList<>()

private

Definition at line 174 of file FilesSet.java.

final DateCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.dateCondition

private

Definition at line 173 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getDateCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final FileNameCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileNameCondition

private

Definition at line 168 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileNameCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final FileSizeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileSizeCondition

private

Definition at line 172 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileSizeCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final MetaTypeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.metaTypeCondition

private

Definition at line 169 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMetaTypeCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final MimeTypeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.mimeTypeCondition

private

Definition at line 171 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMimeTypeCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final ParentPathCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.pathCondition

private

Definition at line 170 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getPathCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ruleName

private

Definition at line 167 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getName(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final long org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.serialVersionUID = 1L

staticprivate

Definition at line 165 of file FilesSet.java.

final String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.uuid

private

Definition at line 166 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getUuid().

The documentation for this class was generated from the following file:

/home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/modules/interestingitems/FilesSet.java

Classes

Public Member Functions

Private Attributes

Static Private Attributes

Detailed Description

Constructor & Destructor Documentation

Member Function Documentation

Member Data Documentation