org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree Class Reference

Classes
class	UnpackedNode

Private Member Functions
UnpackedNode	addNode (UnpackedNode parent, List< String > tokenPath, List< byte[]> tokenPathBytes)
void	getAllFileObjectsRec (List< AbstractFile > list, UnpackedNode parent)
void	updateOrAddFileToCaseRec (UnpackedNode node, FileManager fileManager, HashMap< String, ZipFileStatusWrapper > statusMap, String archiveFilePath) throws TskCoreException

Private Attributes
int	nodesProcessed = 0

Detailed Description

Representation of the files in the archive. Used to track of local tree file hierarchy, archive depth, and files created to easily and reliably get parent AbstractFile for unpacked file. So that we don't have to depend on type of traversal of unpacked files handed to us by 7zip unpacker.

Definition at line 1124 of file SevenZipExtractor.java.

Member Function Documentation

UnpackedNode org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.addNode ( UnpackedNode  parent, List< String >  tokenPath, List< byte[]>  tokenPathBytes  )

private

recursive method that traverses the path

Parameters

parent
tokenPath
tokenPathBytes

Returns

Definition at line 1200 of file SevenZipExtractor.java.

void org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.getAllFileObjectsRec ( List< AbstractFile >  list, UnpackedNode  parent  )

private

Definition at line 1253 of file SevenZipExtractor.java.

void org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.updateOrAddFileToCaseRec ( UnpackedNode  node, FileManager  fileManager, HashMap< String, ZipFileStatusWrapper >  statusMap, String  archiveFilePath  ) throws TskCoreException

private

Add derived files to the case if they do not exist, update the derived file data if the new file contains more information than the existing one, and do nothing if the existing information is complete.

Parameters

node	- the UnpackedNode for the file which is being added or updated
fileManager	- the file manager to perform the adding or updating
statusMap	- the map of existing files and their status
archiveFilePath	- the archive file path for the unpacked node

Exceptions

TskCoreException

Definition at line 1285 of file SevenZipExtractor.java.

References org.sleuthkit.autopsy.casemodule.services.FileManager.addDerivedFile(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatus.EXISTS, org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatusWrapper.getFile(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatusWrapper.getStatus(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatusWrapper.setStatus(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatus.SKIP, org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.ZipFileStatus.UPDATE, and org.sleuthkit.autopsy.casemodule.services.FileManager.updateDerivedFile().

Member Data Documentation

int org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.nodesProcessed = 0

private

Definition at line 1127 of file SevenZipExtractor.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/modules/embeddedfileextractor/SevenZipExtractor.java