Inherits org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.

Public Member Functions
void	addNodeProperty (NodeProperty<?> property)

Action[]	getActions (boolean context)

BlackboardArtifact	getArtifact ()

T	getContent ()

List< Content >	getContentChildren ()

int	getContentChildrenCount ()

List< Long >	getContentChildrenIds ()

String	getItemType ()

String	getName ()

String	getSourceName ()

boolean	hasContentChildren ()

boolean	hasVisibleContentChildren ()

boolean	isLeafTypeNode ()

int	read (byte[] buf, long offset, long len) throws TskException

void	setName (String name)

Static Public Member Functions
static boolean	contentHasVisibleContentChildren (Content c)

Protected Member Functions
final void	addCommentProperty (Sheet.Set sheetSet, List< Tag > tags, CorrelationAttributeInstance attribute)

final void	addCountProperty (Sheet.Set sheetSet, CorrelationAttributeInstance attribute)

final void	addScorePropertyAndDescription (Sheet.Set sheetSet, List< Tag > tags)

void	addTagProperty (Sheet.Set sheetSet) throws MissingResourceException

final void	addTagProperty (Sheet.Set sheetSet, List< Tag > tags)

Sheet	createSheet ()

void	finalize () throws Throwable

final List< Tag >	getAllTagsFromDatabase ()

DataResultViewerTable.HasCommentStatus	getCommentProperty (List< Tag > tags, CorrelationAttributeInstance attribute)

final CorrelationAttributeInstance	getCorrelationAttributeInstance ()

Pair< Long, String >	getCountPropertyAndDescription (Type corrAttrType, String attributeValue, String defaultDescription)

Pair< DataResultViewerTable.Score, String >	getScorePropertyAndDescription (List< Tag > tags)

synchronized void	updateSheet (NodeProperty<?>...newProps)

Static Protected Attributes
static final String	NO_DESCR

static final String	VALUE_LOADING

Private Member Functions
	AccountArtifactNode (BlackboardArtifact artifact)

void	updateSheet ()

Private Attributes
final BlackboardArtifact	artifact

Detailed Description

Definition at line 1742 of file Accounts.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.AccountArtifactNode ( BlackboardArtifact artifact )

private

Definition at line 1746 of file Accounts.java.

Member Function Documentation

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty	(	Sheet.Set	sheetSet,
		List< Tag >	tags,
		CorrelationAttributeInstance	attribute
	)

protectedinherited

Adds the other occurrences property for the artifact represented by this node to the node property sheet.

Parameters

sheetSet	The property sheet.
tags	The tags that have been applied to the artifact and its source content.
attribute	The correlation attribute instance to use for the central repository lookup.

Deprecated:: Do not use. The other occurrences property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1235 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty	(	Sheet.Set	sheetSet,
		CorrelationAttributeInstance	attribute
	)

protectedinherited

Adds the count property for the artifact represented by this node to the node property sheet.

Parameters

sheetSet	The property sheet.
attribute	The correlation attribute instance to use for the central repository lookup.

Deprecated:: Do not use. The count property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1213 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addNodeProperty ( NodeProperty<?> property )

inherited

Adds a "custom" property to the property sheet of this node, indepoendent of the artifact this node represents or its source content.

Parameters

property The custom property.

Definition at line 1004 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode().

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addScorePropertyAndDescription	(	Sheet.Set	sheetSet,
		List< Tag >	tags
	)

protectedinherited

Adds the score property for the artifact represented by this node to the node property sheet.

Parameters

sheetSet	The property sheet.
tags	The tags that have been applied to the artifact and its source content.

Deprecated:: Do not use. The score property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1148 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getScorePropertyAndDescription().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty ( Sheet.Set sheetSet ) throws MissingResourceException

protectedinherited

Adds the tags property for the artifact represented by this node to the node property sheet.

Parameters

sheetSet The property sheet.

Deprecated:: Do not use. The tags property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1166 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty	(	Sheet.Set	sheetSet,
		List< Tag >	tags
	)

protectedinherited

Adds the tags property for the artifact represented by this node to the node property sheet.

Parameters

sheetSet	The property sheet.
tags	The tags that have been applied to the artifact and its source content.

Deprecated:: Do not use. The tags property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1189 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

static boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.contentHasVisibleContentChildren ( Content c )

staticinherited

Return true if the given content object has children. Useful for lazy loading.

Parameters

c	The content object to look for children on

Returns: true if has children

Definition at line 155 of file AbstractContentNode.java.

Sheet org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.createSheet ( )

protected

Definition at line 1766 of file Accounts.java.

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.finalize ( ) throws Throwable

protectedinherited

Unregisters the application event listener when this node is garbage collected, if this finalizer is actually called.

RC: Isn't there some node lifecycle property change event that could be used to unregister the listener instead?

Exceptions

Throwable

Definition at line 410 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener().

Action [] org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.getActions ( boolean context )

Definition at line 1755 of file Accounts.java.

final List<Tag> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAllTagsFromDatabase ( )

protectedinherited

Gets all of the tags applied to the artifact represented by this node and its source content.

Returns: The tags.

Definition at line 773 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), and org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager().

BlackboardArtifact org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getArtifact ( )

inherited

Gets the artifact represented by this node.

Returns: The artifact.

Definition at line 427 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact.

Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.IsLeafItemVisitor.visit(), org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.ShowItemVisitor.visit(), and org.sleuthkit.autopsy.directorytree.DataResultFilterNode.GetPreferredActionsDisplayableItemNodeVisitor.visit().

DataResultViewerTable.HasCommentStatus org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty	(	List< Tag >	tags,
		CorrelationAttributeInstance	attribute
	)

protectedinherited

Computes the value of the comment property ("C" in S, C, O) for the artifact represented by this node.

An icon is displayed in the property sheet if a commented tag has been applied to the artifact or its source content, or if there is a corresponding commented correlation attribute instance in the central repository.

Parameters

tags	The tags applied to the artifact and its source content.
attribute	A correlation attribute instance Ffor the central repository lookup.

Returns: The value of the comment property.

Definition at line 817 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_AND_TAG_COMMENTS, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_COMMENT, org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment(), org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.NO_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_COMMENT, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_NO_COMMENT.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty().

T org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContent ( )

inherited

Return the content data associated with this node

Returns: the content object wrapped by this node

Definition at line 123 of file AbstractContentNode.java.

List<Content> org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildren ( )

inherited

Return children of the underlying content.

Returns: list of content children content.

Definition at line 235 of file AbstractContentNode.java.

int org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildrenCount ( )

inherited

Get count of the underlying content object children.

Useful for lazy loading.

Returns: content children count

Definition at line 257 of file AbstractContentNode.java.

List<Long> org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildrenIds ( )

inherited

Return ids of children of the underlying content. The ids can be treated as keys - useful for lazy loading.

Returns: list of content ids of children content.

Definition at line 215 of file AbstractContentNode.java.

final CorrelationAttributeInstance org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCorrelationAttributeInstance ( )

protectedinherited

Gets the correlation attribute for the MD5 hash of the source file of the artifact represented by this node. The correlation attribute instance can only be returned if the central repository is enabled and the source content is a file.

Returns: The correlation attribute instance, may be null.

Definition at line 793 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.getCorrAttrForFile(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.isEnabled().

Pair<Long, String> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription	(	Type	corrAttrType,
		String	attributeValue,
		String	defaultDescription
	)

protectedinherited

Computes the value of the other occurrences property ("O" in S, C, O) for the artifact represented by this node. The value of the other occurrences property is the number of other data sources this artifact appears in according to a correlation attribute instance lookup in the central repository, plus one for the data source for this instance of the artifact.

Parameters

corrAttrType	The correlation attribute instance type to use for the central repsoitory lookup.
attributeValue	The correlation attribute instane value to use for the central repsoitory lookup.
defaultDescription	A default description.

Returns: The value of the occurrences property as a data sources count and a description string.

Definition at line 953 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getCountUniqueCaseDataSourceTuplesHavingTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.Type.getDisplayName(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getInstance().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getItemType ( )

inherited

Definition at line 1119 of file BlackboardArtifactNode.java.

String org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getName ( )

inherited

Definition at line 133 of file AbstractContentNode.java.

Pair<DataResultViewerTable.Score, String> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getScorePropertyAndDescription ( List< Tag > tags )

protectedinherited

Computes the value of the score property ("S" in S, C, O) for the artifact represented by this node. The score property indicates whether the artifact or its source content is notable or interesting.

IMPORTANT: Notability takes precedence when computing the score.

A red icon will be displayed in the property sheet if the hash of the source file has been found in a notable hash set or if either the artifact or its source content has been tagged with a notable tag. A yellow icon will be displayed if the source file belongs to an interesting file set or either the artifact or its source content has been tagged with a non-notable tag.

Parameters

tags	The tags that have been applied to the artifact and its source content.

Returns: The value of the score property as an enum element and a description string for dislpay in a tool tip.

Definition at line 867 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getInstance(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getKnownBadFileHashSets(), org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.Score.INTERESTING_SCORE, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.Score.NO_SCORE, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.Score.NOTABLE_SCORE.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addScorePropertyAndDescription().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSourceName ( )

inherited

Gets the name of the source content of the artifact represented by this node.

Returns: The source content name.

Definition at line 482 of file BlackboardArtifactNode.java.

boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.hasContentChildren ( )

inherited

Return true if the underlying content object has children Useful for lazy loading.

Returns: true if has children

Definition at line 195 of file AbstractContentNode.java.

boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.hasVisibleContentChildren ( )

inherited

Return true if the underlying content object has children Useful for lazy loading.

Returns: true if has children

Definition at line 143 of file AbstractContentNode.java.

boolean org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.isLeafTypeNode ( )

inherited

Definition at line 1114 of file BlackboardArtifactNode.java.

int org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.read	(	byte[]	buf,
		long	offset,
		long	len
	)		throws TskException

inherited

Reads the content of this node (of the underlying content object).

Parameters

buf	buffer to read into
offset	the starting offset in the content object
len	the length to read

Returns: the bytes read

Exceptions

TskException exception thrown if the requested part of content could not be read

Definition at line 283 of file AbstractContentNode.java.

void org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.setName ( String name )

inherited

Definition at line 128 of file AbstractContentNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::BlackboardArtifactNode().

synchronized void org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.updateSheet ( NodeProperty<?>... newProps )

protectedinherited

Updates the values of the properties in the current property sheet with the new properties being passed in. Only if that property exists in the current sheet will it be applied. That way, we allow for subclasses to add their own (or omit some!) properties and we will not accidentally disrupt their UI.

Race condition if not synchronized. Only one update should be applied at a time.

Parameters

newProps New file property instances to be updated in the current sheet.

Definition at line 300 of file AbstractContentNode.java.

void org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.updateSheet ( )

private

Definition at line 1792 of file Accounts.java.

Member Data Documentation

final BlackboardArtifact org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.artifact

private

Definition at line 1744 of file Accounts.java.

final String org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.NO_DESCR

staticprotectedinherited

Default no description string

Definition at line 75 of file AbstractContentNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addCommentProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addTagProperty(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createSheet().

final String org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.VALUE_LOADING

staticprotectedinherited

Definition at line 76 of file AbstractContentNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createSheet().

The documentation for this class was generated from the following file:

/home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/datamodel/accounts/Accounts.java

Public Member Functions

Static Public Member Functions

Protected Member Functions

Static Protected Attributes

Private Member Functions

Private Attributes

Detailed Description

Constructor & Destructor Documentation

Member Function Documentation

Member Data Documentation