Autopsy  4.13.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Private Member Functions | Static Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.timeline.EventsModel Class Reference

Classes

class  CacheInvalidatedEvent
 

Public Member Functions

 EventsModel (Case currentCase, ReadOnlyObjectProperty< EventsModelParams > modelParams) throws TskCoreException
 
synchronized ReadOnlyObjectProperty< TimelineLevelOfDetail > descriptionLODProperty ()
 
synchronized ReadOnlyObjectProperty< RootFilterStateeventFilterProperty ()
 
synchronized ReadOnlyObjectProperty< TimelineEventType.HierarchyLevel > eventTypesHierarchyLevelProperty ()
 
synchronized RootFilterState getDefaultEventFilterState ()
 
synchronized TimelineLevelOfDetail getDescriptionLOD ()
 
TimelineEvent getEventById (Long eventID) throws TskCoreException
 
Map< TimelineEventType, Long > getEventCounts (Interval timeRange) throws TskCoreException
 
synchronized RootFilterState getEventFilterState ()
 
List< Long > getEventIDs (Interval timeRange, FilterState<?extends TimelineFilter > filterState) throws TskCoreException
 
List< Long > getEventIDsForArtifact (BlackboardArtifact artifact) throws TskCoreException
 
Set< Long > getEventIDsForFile (AbstractFile file, boolean includeDerivedArtifacts) throws TskCoreException
 
TimelineManager getEventManager ()
 
Set< TimelineEvent > getEventsById (Collection< Long > eventIDs) throws TskCoreException
 
ImmutableList< TimelineEventType > getEventTypes ()
 
synchronized TimelineEventType.HierarchyLevel getEventTypeZoom ()
 
Long getMaxEventTime () throws TskCoreException
 
Long getMinEventTime () throws TskCoreException
 
synchronized EventsModelParams getModelParams ()
 
SleuthkitCase getSleuthkitCase ()
 
Interval getSpanningInterval (DateTimeZone timeZone) throws TskCoreException
 
Interval getSpanningInterval () throws TskCoreException
 
Interval getSpanningInterval (Collection< Long > eventIDs) throws TskCoreException
 
synchronized Interval getTimeRange ()
 
synchronized boolean handleArtifactTagAdded (BlackBoardArtifactTagAddedEvent evt) throws TskCoreException
 
synchronized boolean handleArtifactTagDeleted (BlackBoardArtifactTagDeletedEvent evt) throws TskCoreException
 
synchronized boolean handleContentTagAdded (ContentTagAddedEvent evt) throws TskCoreException
 
synchronized boolean handleContentTagDeleted (ContentTagDeletedEvent evt) throws TskCoreException
 
synchronized void invalidateCaches (Collection< Long > updatedEventIDs) throws TskCoreException
 
synchronized ReadOnlyObjectProperty< EventsModelParamsmodelParamsProperty ()
 
void postRefreshRequest ()
 
synchronized void registerForEvents (Object subscriber)
 
synchronized ReadOnlyObjectProperty< Interval > timeRangeProperty ()
 
synchronized void unRegisterForEvents (Object subscriber)
 
synchronized Set< Long > updateEventsForHashSetHits (Collection< BlackboardArtifact > hashSetHitArtifacts) throws TskCoreException
 

Private Member Functions

Map< TimelineEventType, Long > countEventsByType (EventsModelParams modelParams) throws TskCoreException
 
synchronized void populateDataSourcesCache () throws TskCoreException
 
boolean postTagsAdded (Set< Long > updatedEventIDs)
 
boolean postTagsDeleted (Set< Long > updatedEventIDs)
 

Static Private Member Functions

static DataSourceFilter newDataSourceFilter (Map.Entry< Long, String > dataSourceEntry)
 

Private Attributes

final TimelineManager caseDbEventManager
 
final Case currentCase
 
final ObservableMap< Long, String > datasourceIDsToNamesMap = FXCollections.observableHashMap()
 
final EventBus eventbus = new EventBus("EventsModel_EventBus")
 
final LoadingCache< EventsModelParams, Map< TimelineEventType, Long > > eventCountsCache
 
final ReadOnlyObjectWrapper< TimelineEventType.HierarchyLevel > eventTypesHierarchyLevelProperty = new ReadOnlyObjectWrapper<>(TimelineEventType.HierarchyLevel.CATEGORY)
 
final ReadOnlyObjectWrapper< RootFilterStatefilterStateProperty = new ReadOnlyObjectWrapper<>()
 
final LoadingCache< Long, TimelineEvent > idsToEventsCache
 
final LoadingCache< Object, Long > maxEventTimeCache
 
final LoadingCache< Object, Long > minEventTimeCache
 
final ReadOnlyObjectWrapper< EventsModelParamsmodelParamsProperty = new ReadOnlyObjectWrapper<>()
 
final ReadOnlyObjectWrapper< TimelineLevelOfDetail > timelineLODProperty = new ReadOnlyObjectWrapper<>(TimelineLevelOfDetail.LOW)
 
final ReadOnlyObjectWrapper< Interval > timeRangeProperty = new ReadOnlyObjectWrapper<>()
 

Static Private Attributes

static final Logger logger = Logger.getLogger(EventsModel.class.getName())
 

Detailed Description

In the timeline implementation of the MVC pattern, this class acts as the model. The views are the event counts view, the event details view and the events list view.

Concurrency Policy: TimelineManager is internally synchronized, so methods that only access the TimelineManager atomically do not need further synchronization. All other member state variables should only be accessed with intrinsic lock of the containing FilteredEventsModel held.

Definition at line 95 of file EventsModel.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.timeline.EventsModel.EventsModel ( Case  currentCase,
ReadOnlyObjectProperty< EventsModelParams modelParams 
) throws TskCoreException

Member Function Documentation

Map<TimelineEventType, Long> org.sleuthkit.autopsy.timeline.EventsModel.countEventsByType ( EventsModelParams  modelParams) throws TskCoreException
private

Gets the count of all events that fit the given model parameters. The counts are organized by event type for the given event types hierarchy level.

Parameters
modelParamsThe model parameters.
Returns
A mapping of event types to event counts at the given event types hierarchy level.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 242 of file EventsModel.java.

synchronized ReadOnlyObjectProperty<TimelineLevelOfDetail> org.sleuthkit.autopsy.timeline.EventsModel.descriptionLODProperty ( )

Gets a read only, observable property for the timeline level of detail model parameter.

Returns
The timeline level of detail model parameter property.

Definition at line 308 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.zooming.ZoomSettingsPane.initialize().

synchronized ReadOnlyObjectProperty<RootFilterState> org.sleuthkit.autopsy.timeline.EventsModel.eventFilterProperty ( )

Gets a read only, observable property for the event filter model parameter.

Returns
The event filter model parameter property.

Definition at line 318 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.filtering.FilterSetPanel.refreshFilterUI().

synchronized ReadOnlyObjectProperty<TimelineEventType.HierarchyLevel> org.sleuthkit.autopsy.timeline.EventsModel.eventTypesHierarchyLevelProperty ( )

Gets a read only, observable property for the event types hierarchy level model parameter.

Returns
The event types hierarchy level model parameter property.

Definition at line 328 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.EventsModel().

synchronized RootFilterState org.sleuthkit.autopsy.timeline.EventsModel.getDefaultEventFilterState ( )

Gets a new instance of the default event filter state model parameter, with data source filters for every data source currently in the data sopurces cache.

Returns
An instance of the default filter state model parameter.

Definition at line 384 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.utils.FilterUtils.createDefaultFileTypesFilter(), and org.sleuthkit.autopsy.timeline.EventsModel.newDataSourceFilter().

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.EventsModel().

synchronized TimelineLevelOfDetail org.sleuthkit.autopsy.timeline.EventsModel.getDescriptionLOD ( )

Gets the time range model parameter.

Returns
The time range model parameter.

Definition at line 355 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.getModelParams(), and org.sleuthkit.autopsy.timeline.zooming.EventsModelParams.getTimelineLOD().

TimelineEvent org.sleuthkit.autopsy.timeline.EventsModel.getEventById ( Long  eventID) throws TskCoreException

Gets an event given its event ID.

Parameters
eventIDThe event ID.
Returns
The event.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 420 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.EventStripeNode.createChildNode(), and org.sleuthkit.autopsy.timeline.EventsModel.getEventsById().

Map<TimelineEventType, Long> org.sleuthkit.autopsy.timeline.EventsModel.getEventCounts ( Interval  timeRange) throws TskCoreException

Gets counts by event type of the events within a given time range.

Parameters
timeRangeThe time range.
Returns
The event counts by type.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 509 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.getEventFilterState(), and org.sleuthkit.autopsy.timeline.EventsModel.getEventTypeZoom().

Referenced by org.sleuthkit.autopsy.timeline.ui.countsview.CountsViewPane.CountsUpdateTask.call(), and org.sleuthkit.autopsy.timeline.ui.ViewFrame.refreshHistorgram().

synchronized RootFilterState org.sleuthkit.autopsy.timeline.EventsModel.getEventFilterState ( )
List<Long> org.sleuthkit.autopsy.timeline.EventsModel.getEventIDs ( Interval  timeRange,
FilterState<?extends TimelineFilter >  filterState 
) throws TskCoreException

Gets a list of event IDs for a given time range and a given events filter.

Parameters
timeRangeThe time range.
filterStateA filter state object for the events filter.
Returns
The events.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 458 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.ui.filtering.datamodel.RootFilterState.getActiveFilter(), org.sleuthkit.autopsy.timeline.EventsModel.getEventFilterState(), org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval(), and org.sleuthkit.autopsy.timeline.ui.filtering.datamodel.RootFilterState.intersect().

List<Long> org.sleuthkit.autopsy.timeline.EventsModel.getEventIDsForArtifact ( BlackboardArtifact  artifact) throws TskCoreException

Gets a set of event IDs associated with a given artifact.

Parameters
artifactThe artifact.
Returns
The event IDs.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 495 of file EventsModel.java.

Set<Long> org.sleuthkit.autopsy.timeline.EventsModel.getEventIDsForFile ( AbstractFile  file,
boolean  includeDerivedArtifacts 
) throws TskCoreException

Gets a set of event IDs associated with a given file.

Parameters
fileThe file.
includeDerivedArtifactsIf true, also gets the event IDs of events associated with artifacts for which the file is the source file.
Returns
The event IDs.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 481 of file EventsModel.java.

TimelineManager org.sleuthkit.autopsy.timeline.EventsModel.getEventManager ( )
Set<TimelineEvent> org.sleuthkit.autopsy.timeline.EventsModel.getEventsById ( Collection< Long >  eventIDs) throws TskCoreException

Gets a set of events given their event IDs.

Parameters
eventIDsThe event IDs.
Returns
THe events.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 438 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.getEventById().

ImmutableList<TimelineEventType> org.sleuthkit.autopsy.timeline.EventsModel.getEventTypes ( )

Gets a list of the event types from the case database.

Returns
The list of event types.

Definition at line 747 of file EventsModel.java.

synchronized TimelineEventType.HierarchyLevel org.sleuthkit.autopsy.timeline.EventsModel.getEventTypeZoom ( )

Gets the event types hierarchy level model model parameter.

Returns
The event types hierarchy level model model parameter.

Definition at line 373 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.zooming.EventsModelParams.getEventTypesHierarchyLevel(), and org.sleuthkit.autopsy.timeline.EventsModel.getModelParams().

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.getEventCounts().

Long org.sleuthkit.autopsy.timeline.EventsModel.getMaxEventTime ( ) throws TskCoreException

Gets the maximum event time in the case database, in seconds since the UNIX epoch.

Returns
The maximum event time.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 590 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval().

Long org.sleuthkit.autopsy.timeline.EventsModel.getMinEventTime ( ) throws TskCoreException

Gets the minimum event time in the case database, in seconds since the UNIX epoch.

Returns
The minimum event time.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 573 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval().

synchronized EventsModelParams org.sleuthkit.autopsy.timeline.EventsModel.getModelParams ( )
SleuthkitCase org.sleuthkit.autopsy.timeline.EventsModel.getSleuthkitCase ( )
Interval org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval ( DateTimeZone  timeZone) throws TskCoreException
Interval org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval ( ) throws TskCoreException

Gets the spanning interval for all of the events in the case database.

Returns
The spanning interval.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 546 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.getMaxEventTime(), and org.sleuthkit.autopsy.timeline.EventsModel.getMinEventTime().

Interval org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval ( Collection< Long >  eventIDs) throws TskCoreException

Gets the spanning interval for a collection of events.

Parameters
eventIDsThe event IDs of the events.
Returns
The spanning interval.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 560 of file EventsModel.java.

synchronized Interval org.sleuthkit.autopsy.timeline.EventsModel.getTimeRange ( )
synchronized boolean org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagAdded ( BlackBoardArtifactTagAddedEvent  evt) throws TskCoreException

Updates the events model for an artifact tag added event and publishes a tag added event via the model's event bus.

Parameters
evtThe event.
Returns
If a tags added event was published via the model's event bus.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 630 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches(), and org.sleuthkit.autopsy.timeline.EventsModel.postTagsAdded().

synchronized boolean org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagDeleted ( BlackBoardArtifactTagDeletedEvent  evt) throws TskCoreException

Updates the events model for an artifact tag deleted event and publishes a tag deleted event via the model's event bus.

Parameters
evtThe event.
Returns
If a tags deleted event was published via the model's event bus.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 672 of file EventsModel.java.

References org.sleuthkit.autopsy.casemodule.events.BlackBoardArtifactTagDeletedEvent.DeletedBlackboardArtifactTagInfo.getArtifactID(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches(), and org.sleuthkit.autopsy.timeline.EventsModel.postTagsDeleted().

synchronized boolean org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagAdded ( ContentTagAddedEvent  evt) throws TskCoreException

Updates the events model for a content tag added event and publishes a tag added event via the model's event bus.

Parameters
evtThe event.
Returns
If a tags added event was published via the model's event bus.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 609 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches(), and org.sleuthkit.autopsy.timeline.EventsModel.postTagsAdded().

synchronized boolean org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagDeleted ( ContentTagDeletedEvent  evt) throws TskCoreException

Updates the events model for a content tag deleted event and publishes a tag deleted event via the model's event bus.

Parameters
evtThe event.
Returns
If a tags deleted event was published via the model's event bus.
Exceptions
TskCoreExceptionIf there is an error reading model data from the case database.

Definition at line 651 of file EventsModel.java.

References org.sleuthkit.autopsy.casemodule.events.ContentTagDeletedEvent.DeletedContentTagInfo.getContentID(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches(), and org.sleuthkit.autopsy.timeline.EventsModel.postTagsDeleted().

synchronized void org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches ( Collection< Long >  updatedEventIDs) throws TskCoreException

Invalidates all of the the model caches and publishes a caches invalidated event. Optionally, a collection of event IDs may be supplied, in which case only the corresponding entries in the event IDs cache are invalidated.

Parameters
updatedEventIDsEither null or a collection of the event IDs.
Exceptions
TskCoreException

Definition at line 784 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.populateDataSourcesCache().

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagAdded(), org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagDeleted(), org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagAdded(), org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagDeleted(), and org.sleuthkit.autopsy.timeline.EventsModel.updateEventsForHashSetHits().

synchronized ReadOnlyObjectProperty<EventsModelParams> org.sleuthkit.autopsy.timeline.EventsModel.modelParamsProperty ( )

Gets the model parameters property.

Returns
A read only, observable property for the current model parameters.

Definition at line 277 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval().

static DataSourceFilter org.sleuthkit.autopsy.timeline.EventsModel.newDataSourceFilter ( Map.Entry< Long, String >  dataSourceEntry)
staticprivate

Makes a new data source filter from a given entry in the cache of data source object IDs to data source names.

Parameters
dataSourceEntryThe cache entry.
Returns
A new DataSourceFilter.

Definition at line 133 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.getDefaultEventFilterState().

synchronized void org.sleuthkit.autopsy.timeline.EventsModel.populateDataSourcesCache ( ) throws TskCoreException
private

Populates the map of data source object IDs to data source names from the data source data in the case database.

Definition at line 211 of file EventsModel.java.

References org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.EventsModel(), and org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches().

void org.sleuthkit.autopsy.timeline.EventsModel.postRefreshRequest ( )

Posts a refresh requested event to all registered subscribers.

Definition at line 738 of file EventsModel.java.

boolean org.sleuthkit.autopsy.timeline.EventsModel.postTagsAdded ( Set< Long >  updatedEventIDs)
private

Post a TagsAddedEvent to all registered subscribers, if the given set of updated event IDs is not empty.

Parameters
updatedEventIDsThe set of event ids to be included in the TagsAddedEvent.
Returns
True if an event was posted.

Definition at line 691 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagAdded(), and org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagAdded().

boolean org.sleuthkit.autopsy.timeline.EventsModel.postTagsDeleted ( Set< Long >  updatedEventIDs)
private

Post a TagsDeletedEvent to all registered subscribers, if the given set of updated event IDs is not empty.

Parameters
updatedEventIDsThe set of event ids to be included in the TagsDeletedEvent.
Returns
True if an event was posted.

Definition at line 708 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagDeleted(), and org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagDeleted().

synchronized void org.sleuthkit.autopsy.timeline.EventsModel.registerForEvents ( Object  subscriber)

Register the given object to receive events.

Parameters
subscriberThe object to register. Must implement public methods annotated with Subscribe.

Definition at line 722 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.AbstractTimeLineView.AbstractTimeLineView(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailsViewModel.DetailsViewModel().

synchronized ReadOnlyObjectProperty<Interval> org.sleuthkit.autopsy.timeline.EventsModel.timeRangeProperty ( )

Gets a read only, observable property for the time range model parameter.

Returns
The time range model parameter property.

Definition at line 289 of file EventsModel.java.

References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), and org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval().

synchronized void org.sleuthkit.autopsy.timeline.EventsModel.unRegisterForEvents ( Object  subscriber)

Un-register the given object, so it no longer receives events.

Parameters
subscriberThe object to un-register.

Definition at line 731 of file EventsModel.java.

synchronized Set<Long> org.sleuthkit.autopsy.timeline.EventsModel.updateEventsForHashSetHits ( Collection< BlackboardArtifact >  hashSetHitArtifacts) throws TskCoreException

Sets the hash set hits flag for the events associated with the source files for a collection of hash set hit artifacts.

Parameters
hashSetHitArtifactsThe hash set hit artifacts.
Returns
The event IDs of the updated events.
Exceptions
TskCoreExceptionIf there is an error reading model data from or writing model data to the case database.

Definition at line 762 of file EventsModel.java.

References org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), and org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches().

Member Data Documentation

final TimelineManager org.sleuthkit.autopsy.timeline.EventsModel.caseDbEventManager
private
final Case org.sleuthkit.autopsy.timeline.EventsModel.currentCase
private
final ObservableMap<Long, String> org.sleuthkit.autopsy.timeline.EventsModel.datasourceIDsToNamesMap = FXCollections.observableHashMap()
private

Definition at line 119 of file EventsModel.java.

final EventBus org.sleuthkit.autopsy.timeline.EventsModel.eventbus = new EventBus("EventsModel_EventBus")
private

Definition at line 98 of file EventsModel.java.

final LoadingCache<EventsModelParams, Map<TimelineEventType, Long> > org.sleuthkit.autopsy.timeline.EventsModel.eventCountsCache
private

Definition at line 123 of file EventsModel.java.

final ReadOnlyObjectWrapper<TimelineEventType.HierarchyLevel> org.sleuthkit.autopsy.timeline.EventsModel.eventTypesHierarchyLevelProperty = new ReadOnlyObjectWrapper<>(TimelineEventType.HierarchyLevel.CATEGORY)
private
final ReadOnlyObjectWrapper<RootFilterState> org.sleuthkit.autopsy.timeline.EventsModel.filterStateProperty = new ReadOnlyObjectWrapper<>()
private

Definition at line 111 of file EventsModel.java.

final LoadingCache<Long, TimelineEvent> org.sleuthkit.autopsy.timeline.EventsModel.idsToEventsCache
private

Definition at line 122 of file EventsModel.java.

final Logger org.sleuthkit.autopsy.timeline.EventsModel.logger = Logger.getLogger(EventsModel.class.getName())
staticprivate

Definition at line 97 of file EventsModel.java.

final LoadingCache<Object, Long> org.sleuthkit.autopsy.timeline.EventsModel.maxEventTimeCache
private

Definition at line 120 of file EventsModel.java.

final LoadingCache<Object, Long> org.sleuthkit.autopsy.timeline.EventsModel.minEventTimeCache
private

Definition at line 121 of file EventsModel.java.

final ReadOnlyObjectWrapper<EventsModelParams> org.sleuthkit.autopsy.timeline.EventsModel.modelParamsProperty = new ReadOnlyObjectWrapper<>()
private
final ReadOnlyObjectWrapper<TimelineLevelOfDetail> org.sleuthkit.autopsy.timeline.EventsModel.timelineLODProperty = new ReadOnlyObjectWrapper<>(TimelineLevelOfDetail.LOW)
private

Definition at line 114 of file EventsModel.java.

final ReadOnlyObjectWrapper<Interval> org.sleuthkit.autopsy.timeline.EventsModel.timeRangeProperty = new ReadOnlyObjectWrapper<>()
private

The documentation for this class was generated from the following file:

Copyright © 2012-2019 Basis Technology. Generated on: Tue Jan 7 2020
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.