Autopsy  4.15.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Static Public Member Functions | Protected Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory Class Reference

Inherits org.sleuthkit.autopsy.datamodel.BaseChildFactory< BlackboardArtifact >, and org.sleuthkit.autopsy.datamodel.RefreshThrottler.Refresher.

Public Member Functions

boolean isRefreshRequired (PropertyChangeEvent evt)
void refresh ()

Static Public Member Functions

static void post (String nodeName, Object event) throws NoSuchEventBusException
static void register (String nodeName, Object subscriber)

Protected Member Functions

void addNotify ()
boolean createKeys (List< T > toPopulate)
Node createNodeForKey (BlackboardArtifact key)
List< BlackboardArtifact > makeKeys ()
void onAdd ()
void onRemove ()
void removeNotify ()

Private Attributes

final PropertyChangeListener pcl
final RefreshThrottler refreshThrottler = new RefreshThrottler(this)
final BlackboardArtifact.Type type

Detailed Description

Creates children for a given artifact type

Definition at line 376 of file

Member Function Documentation

void org.sleuthkit.autopsy.datamodel.BaseChildFactory< T extends Content >.addNotify ( )

Definition at line 120 of file

boolean org.sleuthkit.autopsy.datamodel.BaseChildFactory< T extends Content >.createKeys ( List< T >  toPopulate)

For page change events and page size change events we simply return the previously calculated set of keys, otherwise we make a new set of keys.

Definition at line 148 of file

Node org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory.createNodeForKey ( BlackboardArtifact  key)

Definition at line 426 of file

boolean org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory.isRefreshRequired ( PropertyChangeEvent  evt)

Checking for a current case is a stop gap measure until a different way of handling the closing of cases is worked out. Currently, remote events may be received for a case that is already closed.

Even with the check above, it is still possible that the case will be closed in a different thread before this code executes. If that happens, it is possible for the event to have a null oldValue.

Case is closed, do nothing.

Definition at line 459 of file

References org.sleuthkit.autopsy.ingest.IngestManager.IngestModuleEvent.DATA_ADDED, org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory.type.

List<BlackboardArtifact> org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory.makeKeys ( )
void org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory.onAdd ( )
void org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory.onRemove ( )
static void org.sleuthkit.autopsy.datamodel.BaseChildFactory< T extends Content >.post ( String  nodeName,
Object  event 
) throws NoSuchEventBusException

Post the given event for the given node name.

nodeNameThe name of the node.
eventThe event to post.

Definition at line 96 of file

void org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory.refresh ( )

Definition at line 454 of file

static void org.sleuthkit.autopsy.datamodel.BaseChildFactory< T extends Content >.register ( String  nodeName,
Object  subscriber 

Register the given subscriber for the given node name. Will create the event bus for the given node name if it does not exist.

nodeNameThe name of the node.
subscriberThe subscriber to register.

Definition at line 78 of file

void org.sleuthkit.autopsy.datamodel.BaseChildFactory< T extends Content >.removeNotify ( )

Definition at line 125 of file

Member Data Documentation

final PropertyChangeListener org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory.pcl
Initial value:
= (PropertyChangeEvent evt) -> {
String eventType = evt.getPropertyName();
if (eventType.equals(IngestManager.IngestJobEvent.COMPLETED.toString())
|| eventType.equals(IngestManager.IngestJobEvent.CANCELLED.toString())) {
try {
} catch (NoCurrentCaseException notUsed) {

Definition at line 392 of file

final RefreshThrottler org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory.refreshThrottler = new RefreshThrottler(this)

RefreshThrottler is used to limit the number of refreshes performed when CONTENT_CHANGED and DATA_ADDED ingest module events are received.

Definition at line 385 of file

final BlackboardArtifact.Type org.sleuthkit.autopsy.datamodel.ExtractedContent.ArtifactFactory.type

The documentation for this class was generated from the following file:

Copyright © 2012-2020 Basis Technology. Generated on: Mon Jul 6 2020
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.