Autopsy
4.15.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.report.GeneralReportModule.
Classes | |
enum | FeatureColor |
Public Member Functions | |
default void | generateReport (String baseReportDir, ReportProgressPanel progressPanel) |
void | generateReport (String baseReportDir, ReportProgressPanel progressPanel, List< Waypoint > waypointList) |
void | generateReport (GeneralReportSettings settings, ReportProgressPanel progressPanel) |
default ReportModuleSettings | getConfiguration () |
JPanel | getConfigurationPanel () |
default ReportModuleSettings | getDefaultConfiguration () |
String | getDescription () |
String | getName () |
String | getRelativeFilePath () |
default void | setConfiguration (ReportModuleSettings settings) |
boolean | supportsDataSourceSelection () |
Static Public Member Functions | |
static synchronized KMLReport | getDefault () |
Private Member Functions | |
KMLReport () | |
void | addRouteToReport (Route route) |
void | addTrackToReport (Track track) |
void | copyFileUsingStream (AbstractFile inputFile, File outputFile) throws ReadContentInputStreamException, IOException |
String | formatAttribute (String title, String value) |
String | formattedCoordinates (Double latitude, Double longitude) |
String | getFormattedDetails (Waypoint point, String header) |
String | getFormattedDetails (Route route) |
String | getTimeStamp (long timeStamp) |
Element | makeLineString (Double startLatitude, Double startLongitude, Double stopLatitude, Double stopLongitude) |
Element | makePlacemark (String name, FeatureColor color, String description, Long timestamp, Element feature, String coordinates) |
Element | makePlacemarkWithPicture (String name, FeatureColor color, String description, Long timestamp, Element feature, Path path, String coordinates) |
Element | makePoint (Waypoint point) |
Element | makePoint (Double latitude, Double longitude, Double altitude) |
Document | setupReportDocument () |
boolean | shouldFilterFromReport (Content content) throws TskCoreException |
Static Private Member Functions | |
static String | removeLeadingImgAndVol (String uniquePath) |
Private Attributes | |
Case | currentCase |
Element | gpsBookmarksFolder |
Element | gpsExifMetadataFolder |
Element | gpsLastKnownLocationFolder |
Element | gpsRouteFolder |
Element | gpsSearchesFolder |
Element | gpsTrackpointsFolder |
Element | gpsTracksFolder |
final SimpleDateFormat | kmlDateFormat = new SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ssX") |
Namespace | ns |
GeneralReportSettings | settings |
SleuthkitCase | skCase |
List< Waypoint > | waypointList = null |
Static Private Attributes | |
static final String | HTML_PROP_FORMAT = "<b>%s: </b>%s<br>" |
static KMLReport | instance = null |
static final String | KML_STYLE_FILE = "style.kml" |
static final Logger | logger = Logger.getLogger(KMLReport.class.getName()) |
static final String | REPORT_KML = "ReportKML.kml" |
static final String | STYLESHEETS_PATH = "/org/sleuthkit/autopsy/report/stylesheets/" |
Generates a KML file based on geospatial information from the BlackBoard.
Definition at line 67 of file KMLReport.java.
|
private |
Definition at line 111 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.getDefault().
|
private |
Add the given route to the KML report.
route |
Definition at line 477 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.formattedCoordinates(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getAltitude(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.getFormattedDetails(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLabel(), org.sleuthkit.autopsy.geolocation.datamodel.GeoPath.getLabel(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLatitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLongitude(), org.sleuthkit.autopsy.geolocation.datamodel.Route.getRoute(), org.sleuthkit.autopsy.geolocation.datamodel.Route.getTimestamp(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getTimestamp(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.FeatureColor.GREEN, org.sleuthkit.autopsy.report.modules.kml.KMLReport.makeLineString(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePlacemark(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePoint().
|
private |
Add a track to the KML report.
track |
Definition at line 557 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.formattedCoordinates(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.getFormattedDetails(), org.sleuthkit.autopsy.geolocation.datamodel.GeoPath.getLabel(), org.sleuthkit.autopsy.geolocation.datamodel.GeoPath.getPath(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.FeatureColor.GREEN, org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePlacemark(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePoint().
|
private |
Extracts the file to the output folder.
inputFile | The input AbstractFile to copy |
outputFile | the output file |
ReadContentInputStreamException | When a read error occurs. |
IOException | When a general file exception occurs. |
Definition at line 756 of file KMLReport.java.
|
private |
Returns a HTML formatted string with the given title and value.
title | |
value |
Definition at line 866 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.getFormattedDetails().
|
private |
Helper functions for consistently formatting longitude and latitude.
latitude | Double latitude value |
longitude | Double longitude value |
Definition at line 929 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.addRouteToReport(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.addTrackToReport().
|
inherited |
Called to generate the report. Method is responsible for saving the file at the path specified and updating progress via the progressPanel object.
baseReportDir | Base directory that reports are being stored in. Report should go into baseReportDir + getRelativeFilePath(). |
progressPanel | panel to update the report's progress with |
Implemented in org.sleuthkit.autopsy.report.GeneralReportModuleAdapter.
Definition at line 36 of file GeneralReportModule.java.
Referenced by org.sleuthkit.autopsy.report.GeneralReportModule.generateReport().
void org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport | ( | String | baseReportDir, |
ReportProgressPanel | progressPanel, | ||
List< Waypoint > | waypointList | ||
) |
Generates a body file format report for use with the MAC time tool.
baseReportDir | path to save the report |
progressPanel | panel to update the report's progress |
waypointList |
Definition at line 160 of file KMLReport.java.
References org.sleuthkit.autopsy.report.GeneralReportSettings.setReportDirectoryPath(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.waypointList.
Referenced by org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.reportButtonActionPerformed().
void org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport | ( | GeneralReportSettings | settings, |
ReportProgressPanel | progressPanel | ||
) |
Called to generate the report. Method is responsible for saving the file and updating progress via the progressPanel object. Configuration parameters are passed in the settings class, most notably the directory to save the report. Modules should try to respond to all configuration parameters.
settings | Configuration parameters to customize the report generation process |
progressPanel | panel to update the report's progress with |
Implements org.sleuthkit.autopsy.report.GeneralReportModule.
Definition at line 173 of file KMLReport.java.
References org.sleuthkit.autopsy.casemodule.Case.addReport(), org.sleuthkit.autopsy.report.ReportProgressPanel.ReportStatus.COMPLETE, org.sleuthkit.autopsy.report.ReportProgressPanel.complete(), org.sleuthkit.autopsy.report.ReportProgressPanel.ReportStatus.ERROR, org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getDataSources(), org.sleuthkit.autopsy.report.GeneralReportSettings.getReportDirectoryPath(), org.sleuthkit.autopsy.report.GeneralReportSettings.getSelectedDataSources(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.REPORT_KML, org.sleuthkit.autopsy.report.ReportProgressPanel.setIndeterminate(), org.sleuthkit.autopsy.report.GeneralReportSettings.setSelectedDataSources(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.settings, org.sleuthkit.autopsy.report.modules.kml.KMLReport.setupReportDocument(), org.sleuthkit.autopsy.report.ReportProgressPanel.start(), and org.sleuthkit.autopsy.report.ReportProgressPanel.updateStatusLabel().
|
inherited |
Get current configuration for this report module.
Implemented in org.sleuthkit.autopsy.report.modules.stix.STIXReportModule, org.sleuthkit.autopsy.report.modules.html.HTMLReport, and org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.
Definition at line 79 of file ReportModule.java.
JPanel org.sleuthkit.autopsy.report.modules.kml.KMLReport.getConfigurationPanel | ( | ) |
Returns the configuration panel for the report, which is displayed in the report configuration step of the report wizard.
Implements org.sleuthkit.autopsy.report.ReportModule.
Definition at line 786 of file KMLReport.java.
|
static |
Definition at line 115 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.instance, and org.sleuthkit.autopsy.report.modules.kml.KMLReport.KMLReport().
Referenced by org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.reportButtonActionPerformed().
|
inherited |
Get default configuration for this report module.
Implemented in org.sleuthkit.autopsy.report.modules.stix.STIXReportModule, org.sleuthkit.autopsy.report.modules.html.HTMLReport, and org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.
Definition at line 70 of file ReportModule.java.
Referenced by org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.generateReports().
String org.sleuthkit.autopsy.report.modules.kml.KMLReport.getDescription | ( | ) |
Gets a one-line, user friendly description of the type of report this module generates.
Implements org.sleuthkit.autopsy.report.ReportModule.
Definition at line 780 of file KMLReport.java.
|
private |
Get the nicely formatted details for the given waypoint.
point | Waypoint object |
header | String details header |
Definition at line 830 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.formatAttribute(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getAltitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLabel(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLatitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLongitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getOtherProperties(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getTimestamp(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.getTimeStamp().
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.addRouteToReport(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.addTrackToReport().
|
private |
Returns an HTML formatted string of all the
route |
Definition at line 877 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.formatAttribute(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getAltitude(), org.sleuthkit.autopsy.geolocation.datamodel.GeoPath.getLabel(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLatitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLongitude(), org.sleuthkit.autopsy.geolocation.datamodel.Route.getOtherProperties(), org.sleuthkit.autopsy.geolocation.datamodel.Route.getRoute(), org.sleuthkit.autopsy.geolocation.datamodel.Route.getTimestamp(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.getTimeStamp().
String org.sleuthkit.autopsy.report.modules.kml.KMLReport.getName | ( | ) |
Get the name of the report this module generates.
Implements org.sleuthkit.autopsy.report.ReportModule.
Definition at line 769 of file KMLReport.java.
String org.sleuthkit.autopsy.report.modules.kml.KMLReport.getRelativeFilePath | ( | ) |
Gets the relative path of the report file, if any, generated by this module. The path should be relative to the location that gets passed in to generateReport() (or similar).
Implements org.sleuthkit.autopsy.report.ReportModule.
Definition at line 775 of file KMLReport.java.
|
private |
Format a point time stamp (in seconds) to the report format.
timeStamp | The timestamp in epoch seconds. |
Definition at line 581 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.getFormattedDetails(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePlacemark(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePlacemarkWithPicture().
|
private |
Create a LineString for use in a Placemark. Note in this method, start and stop altitudes get ignored, as Google Earth apparently has trouble using altitudes for LineStrings, though the parameters are still in the call.
If null values are pass for the latitudes or longitudes a line will not be drawn.
startLatitude | Starting latitude |
startLongitude | Starting longitude |
stopLatitude | Ending latitude |
stopLongitude | Ending longitude |
Definition at line 649 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.addRouteToReport().
|
private |
Make a Placemark for use in displaying features. Takes a coordinate-bearing feature (Point, LineString, etc) and places it in the Placemark element.
name | Placemark name |
color | Placemark color |
description | Description for the info bubble on the map |
timestamp | Placemark timestamp |
feature | The feature to show. Could be Point, LineString, etc. |
coordinates | The coordinates to display in the list view snippet |
Definition at line 679 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.FeatureColor.getColor(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.getTimeStamp().
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.addRouteToReport(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.addTrackToReport().
|
private |
Make a Placemark for use in displaying features. Takes a coordinate-bearing feature (Point, LineString, etc) and places it in the Placemark element.
name | Placemark file name |
color | Placemark color |
description | Description for the info bubble on the map |
timestamp | Placemark timestamp |
feature | The feature to show. Could be Point, LineString, etc. |
path | The path to the file in the source image |
coordinates | The coordinates to display in the list view snippet |
Definition at line 717 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.FeatureColor.getColor(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.getTimeStamp().
|
private |
Create the point for the given artifact.
point | Artifact point. |
Definition at line 592 of file KMLReport.java.
References org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getAltitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLatitude(), and org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLongitude().
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.addRouteToReport(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.addTrackToReport().
|
private |
Create a Point for use in a Placemark. Note in this method altitude is ignored, as Google Earth apparently has trouble using altitudes for LineStrings, though the parameters are still in the call.
latitude | point latitude |
longitude | point longitude |
altitude | point altitude. Currently ignored. |
Definition at line 607 of file KMLReport.java.
|
staticprivate |
This is a smash-n-grab from AbstractFile.createNonUniquePath(String). This method is intended to be removed when img_ and vol_ are no longer added to images and volumes respectively, OR when AbstractFile is sorted out with respect to this.
uniquePath | The path to sanitize. |
Definition at line 800 of file KMLReport.java.
|
inherited |
Set report module configuration.
settings | Object which contains report module settings. |
Implemented in org.sleuthkit.autopsy.report.modules.stix.STIXReportModule, org.sleuthkit.autopsy.report.modules.html.HTMLReport, and org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.
Definition at line 88 of file ReportModule.java.
Referenced by org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.generateReports().
|
private |
Do all of the setting up of elements needed for the report.
Definition at line 270 of file KMLReport.java.
References org.sleuthkit.autopsy.ingest.IngestManager.getInstance(), org.sleuthkit.autopsy.report.ReportBranding.getReportTitle(), and org.sleuthkit.autopsy.ingest.IngestManager.isIngestRunning().
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport().
|
private |
Indicates if the content should be filtered from the report.
Definition at line 940 of file KMLReport.java.
References org.sleuthkit.autopsy.report.GeneralReportSettings.getSelectedDataSources().
boolean org.sleuthkit.autopsy.report.modules.kml.KMLReport.supportsDataSourceSelection | ( | ) |
Determines if the module supports report generation on a subset of data sources in a case. Defaults to false. The data source selections are stored in the GeneralReportSettings instance.
Implements org.sleuthkit.autopsy.report.GeneralReportModule.
Definition at line 168 of file KMLReport.java.
|
private |
Definition at line 74 of file KMLReport.java.
|
private |
Definition at line 81 of file KMLReport.java.
|
private |
Definition at line 80 of file KMLReport.java.
|
private |
Definition at line 82 of file KMLReport.java.
|
private |
Definition at line 83 of file KMLReport.java.
|
private |
Definition at line 84 of file KMLReport.java.
|
private |
Definition at line 85 of file KMLReport.java.
|
private |
Definition at line 86 of file KMLReport.java.
|
staticprivate |
Definition at line 78 of file KMLReport.java.
|
staticprivate |
Definition at line 73 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.getDefault().
|
staticprivate |
Definition at line 70 of file KMLReport.java.
|
private |
Definition at line 76 of file KMLReport.java.
|
staticprivate |
Definition at line 69 of file KMLReport.java.
|
private |
Definition at line 77 of file KMLReport.java.
|
staticprivate |
Definition at line 71 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport().
|
private |
Definition at line 88 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport().
|
private |
Definition at line 75 of file KMLReport.java.
|
staticprivate |
Definition at line 72 of file KMLReport.java.
|
private |
Definition at line 90 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport().
Copyright © 2012-2020 Basis Technology. Generated on: Mon Jul 6 2020
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.