Autopsy  4.15.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Static Private Member Functions | Static Private Attributes | List of all members
org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader Class Reference

Inherits Runnable.

Public Member Functions

void run ()
 

Static Private Member Functions

static void addCustomFile (Map< String, FilesSet > dest, FilesSet srcFilesSet)
 
static void copyOnNewer (Map< String, FilesSet > src, Map< String, FilesSet > dest)
 
static void copyOnNewer (Map< String, FilesSet > src, Map< String, FilesSet > dest, boolean appendCustom)
 
static Map< String, FilesSetreadStandardFileXML ()
 

Static Private Attributes

static final String CONFIG_DIR = "InterestingFileSetRules"
 
static final FilenameFilter DEFAULT_XML_FILTER
 
static final Logger LOGGER = Logger.getLogger(StandardInterestingFilesSetsLoader.class.getName())
 

Detailed Description

When the interesting items module loads, this runnable loads standard interesting file set rules.

Definition at line 38 of file StandardInterestingFilesSetsLoader.java.

Member Function Documentation

static void org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.addCustomFile ( Map< String, FilesSet dest,
FilesSet  srcFilesSet 
)
staticprivate

Adds an entry to the destination map where the name will be the same as the key with " (custom)" appended.

Parameters
destThe destination map.
srcFilesSetThe FilesSet to append as custom. A non-readonly filesset must be provided.

Definition at line 193 of file StandardInterestingFilesSetsLoader.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.getName().

Referenced by org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.copyOnNewer().

static void org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.copyOnNewer ( Map< String, FilesSet src,
Map< String, FilesSet dest 
)
staticprivate

Copies the entries in the src map to the destination map if the src item has a newer version than what is in dest or no equivalent entry exists within the dest map.

Parameters
srcThe source map.
destThe destination map.

Definition at line 141 of file StandardInterestingFilesSetsLoader.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.readStandardFileXML(), and org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.run().

static void org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.copyOnNewer ( Map< String, FilesSet src,
Map< String, FilesSet dest,
boolean  appendCustom 
)
staticprivate

Copies the entries in the src map to the destination map if the src item has a newer version than what is in dest or no equivalent entry exists within the dest map.

Parameters
srcThe source map.
destThe destination map.
appendCustomOn conflict, if one of the items is readonly and one is not, this flag can be set so the item that is not readonly will have " (custom)" appended.

Definition at line 156 of file StandardInterestingFilesSetsLoader.java.

References org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.addCustomFile().

static Map<String, FilesSet> org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.readStandardFileXML ( )
staticprivate

Reads xml definitions for each file found in the standard interesting file set config directory and marks the files set as a standard interesting file if it isn't already.

Returns
The mapping of files set keys to the file sets.

Definition at line 85 of file StandardInterestingFilesSetsLoader.java.

References org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.copyOnNewer(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.getName().

Referenced by org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.run().

void org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.run ( )

Member Data Documentation

final String org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.CONFIG_DIR = "InterestingFileSetRules"
staticprivate

Definition at line 42 of file StandardInterestingFilesSetsLoader.java.

final FilenameFilter org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.DEFAULT_XML_FILTER
staticprivate
Initial value:
= new FilenameFilter() {
@Override
public boolean accept(File dir, String name) {
return name.endsWith(".xml");
}
}

Definition at line 44 of file StandardInterestingFilesSetsLoader.java.

final Logger org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.LOGGER = Logger.getLogger(StandardInterestingFilesSetsLoader.class.getName())
staticprivate

Definition at line 40 of file StandardInterestingFilesSetsLoader.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2020 Basis Technology. Generated on: Mon Jul 6 2020
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.