Autopsy  4.16.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Private Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask Class Reference

Inherits Runnable.

Classes

class  AnalysisStartupException
 
class  DoNothingDSPProgressMonitor
 
class  IngestJobEventListener
 

Public Member Functions

void run ()
 

Private Member Functions

 JobProcessingTask ()
 
void analyze (AutoIngestDataSource dataSource, String ingestProfileName) throws AnalysisStartupException, InterruptedException
 
Path createCaseFolderPath (Path caseFoldersPath, String caseName)
 
Path findCaseDirectory (Path folderToSearch, String caseName)
 
String getOutputDirPath (Case caseForJob)
 
FilesSet getSelectedFilter (String filterName)
 
IngestProfiles.IngestProfile getSelectedProfile (String ingestProfileName)
 
void logDataSourceProcessorResult (AutoIngestDataSource dataSource)
 
void openCase (String baseCaseName, String rootOutputDirectory, CaseType caseType) throws CaseActionException
 
void runDataSourceProcessor (Case caseForJob, AutoIngestDataSource dataSource) throws InterruptedException, AutoIngestDataSourceProcessor.AutoIngestDataSourceProcessorException
 

Private Attributes

final Object ingestLock
 

Detailed Description

Definition at line 103 of file CommandLineIngestManager.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.JobProcessingTask ( )
private

Member Function Documentation

void org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.analyze ( AutoIngestDataSource  dataSource,
String  ingestProfileName 
) throws AnalysisStartupException, InterruptedException
private

Analyzes the data source content returned by the data source processor using the configured set of data source level and file level analysis modules. If an ingest profile is specified, load that profile (profile = ingest context + ingest filter) for ingest. Otherwise use baseline configuration.

Parameters
dataSourceThe data source to analyze.
ingestProfileNameName of ingest profile to use (optional)
Exceptions
AnalysisStartupExceptionif there is an error analyzing the data source.
InterruptedExceptionif the thread running the job processing task is interrupted while blocked, i.e., if auto ingest is shutting down.

Definition at line 498 of file CommandLineIngestManager.java.

References org.sleuthkit.autopsy.ingest.IngestManager.addIngestJobEventListener(), org.sleuthkit.autopsy.ingest.IngestManager.beginIngestJob(), org.sleuthkit.autopsy.commandlineingest.UserPreferences.getCommandLineModeIngestModuleContextString(), org.sleuthkit.autopsy.datasourceprocessors.AutoIngestDataSource.getContent(), org.sleuthkit.autopsy.ingest.IngestManager.getInstance(), org.sleuthkit.autopsy.ingest.IngestJobStartResult.getJob(), org.sleuthkit.autopsy.ingest.IngestJobStartResult.getModuleErrors(), org.sleuthkit.autopsy.datasourceprocessors.AutoIngestDataSource.getPath(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.getSelectedFilter(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.getSelectedProfile(), org.sleuthkit.autopsy.ingest.IngestJob.getSnapshot(), org.sleuthkit.autopsy.ingest.IngestJobStartResult.getStartupException(), org.sleuthkit.autopsy.ingest.IngestJobSettings.getWarnings(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.INGEST_JOB_EVENTS_OF_INTEREST, org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.ingestLock, org.sleuthkit.autopsy.ingest.IngestJob.CancellationReason.NOT_CANCELLED, org.sleuthkit.autopsy.ingest.IngestManager.removeIngestJobEventListener(), org.sleuthkit.autopsy.ingest.IngestJobSettings.setFileFilter(), and org.sleuthkit.autopsy.ingest.IngestJob.CancellationReason.USER_CANCELLED.

Referenced by org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.run().

Path org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.createCaseFolderPath ( Path  caseFoldersPath,
String  caseName 
)
private

Creates a case folder path. Does not create the folder described by the path.

Parameters
caseFoldersPathThe root case folders path.
caseNameThe name of the case.
Returns
A case folder path with a time stamp suffix.

Definition at line 645 of file CommandLineIngestManager.java.

References org.sleuthkit.autopsy.coreutils.TimeStampUtils.createTimeStamp().

Referenced by org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.openCase().

Path org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.findCaseDirectory ( Path  folderToSearch,
String  caseName 
)
private

Searches a given folder for the most recently modified case folder for a case.

Parameters
folderToSearchThe folder to be searched.
caseNameThe name of the case for which a case folder is to be found.
Returns
The path of the case folder, or null if it is not found.

Definition at line 660 of file CommandLineIngestManager.java.

Referenced by org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.openCase().

String org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.getOutputDirPath ( Case  caseForJob)
private

Returns full path to directory where command outputs should be saved.

Parameters
caseForJobCase object
Returns
Full path to directory where command outputs should be saved

Definition at line 685 of file CommandLineIngestManager.java.

References org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), and org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.LOG_DIR_NAME.

Referenced by org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.run().

FilesSet org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.getSelectedFilter ( String  filterName)
private

Gets the specified file filter from the list of all existing file filters (custom and standard).

Parameters
filterNameName of the file filter
Returns
FilesSet object, or NULL if the filter doesn't exist

Definition at line 622 of file CommandLineIngestManager.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSetsManager.getCustomFileIngestFilters(), org.sleuthkit.autopsy.modules.interestingitems.FilesSetsManager.getInstance(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSetsManager.getStandardFileIngestFilters().

Referenced by org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.analyze().

IngestProfiles.IngestProfile org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.getSelectedProfile ( String  ingestProfileName)
private

Gets the specified ingest profile from the list of all existing ingest profiles.

Parameters
ingestProfileNameIngest profile name
Returns
IngestProfile object, or NULL if the profile doesn't exist

Definition at line 600 of file CommandLineIngestManager.java.

References org.sleuthkit.autopsy.ingest.IngestProfiles.getIngestProfiles().

Referenced by org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.analyze().

void org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.logDataSourceProcessorResult ( AutoIngestDataSource  dataSource)
private
void org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.openCase ( String  baseCaseName,
String  rootOutputDirectory,
CaseType  caseType 
) throws CaseActionException
private
void org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.run ( )
void org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.runDataSourceProcessor ( Case  caseForJob,
AutoIngestDataSource  dataSource 
) throws InterruptedException, AutoIngestDataSourceProcessor.AutoIngestDataSourceProcessorException
private

Member Data Documentation

final Object org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.ingestLock
private

The documentation for this class was generated from the following file:

Copyright © 2012-2020 Basis Technology. Generated on: Tue Sep 22 2020
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.