Autopsy  4.15.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Protected Member Functions | Private Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher Class Reference

Inherits SwingWorker< Object, Void >.

Protected Member Functions

Object doInBackground () throws Exception

Private Member Functions

QueryResults filterResults (QueryResults queryResult)
void finalizeSearcher ()
void updateKeywords ()

Private Attributes

boolean finalRun = false
SearchJobInfo job
List< String > keywordListNames
List< KeywordListkeywordLists
List< Keywordkeywords
Map< Keyword, KeywordListkeywordToList
final Logger logger = Logger.getLogger(IngestSearchRunner.Searcher.class.getName())
AggregateProgressHandle progressGroup

Detailed Description

Searcher responsible for searching the current index and writing results to blackboard and the inbox. Also, posts results to listeners as Ingest data events. Searches entire index, and keeps track of only new results to report and save. Runs as a background thread.

Definition at line 445 of file

Member Function Documentation

Object org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.doInBackground ( ) throws Exception
QueryResults org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.filterResults ( QueryResults  queryResult)

This method filters out all of the hits found in earlier periodic searches and returns only the results found by the most recent search.

This method will only return hits for objects for which we haven't previously seen a hit for the keyword.

queryResultThe results returned by a keyword search.
A unique set of hits found by the most recent search for objects that have not previously had a hit. The hits will be for the lowest numbered chunk associated with the object.

Definition at line 644 of file

References org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.SearchJobInfo.addKeywordResults(), and org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.SearchJobInfo.currentKeywordResults().

Referenced by org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.doInBackground().

void org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.finalizeSearcher ( )

Performs the cleanup that needs to be done right AFTER doInBackground() returns without relying on done() method that is not guaranteed to run.

Definition at line 620 of file

Referenced by org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.doInBackground().

void org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.updateKeywords ( )

Sync-up the updated keywords from the currently used lists in the XML

Definition at line 598 of file

References org.sleuthkit.autopsy.keywordsearch.KeywordList.getKeywords().

Referenced by org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.doInBackground().

Member Data Documentation

boolean org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.finalRun = false

Definition at line 457 of file

SearchJobInfo org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.job

Searcher has private copies/snapshots of the lists and keywords

Definition at line 450 of file

List<String> org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.keywordListNames

Definition at line 452 of file

List<KeywordList> org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.keywordLists

Definition at line 453 of file

List<Keyword> org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.keywords

Definition at line 451 of file

Map<Keyword, KeywordList> org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.keywordToList

Definition at line 454 of file

final Logger org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.logger = Logger.getLogger(IngestSearchRunner.Searcher.class.getName())

Definition at line 456 of file

AggregateProgressHandle org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.progressGroup

Definition at line 455 of file

The documentation for this class was generated from the following file:

Copyright © 2012-2020 Basis Technology. Generated on: Mon Jul 6 2020
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.