org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary Class Reference

Inherits org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.

Public Member Functions
	AnalysisSummary ()
	AnalysisSummary (SleuthkitCaseProvider provider)
Set< Integer >	getArtifactTypeIdsForRefresh ()
default Set< Case.Events >	getCaseEventUpdates ()
List< Pair< String, Long > >	getHashsetCounts (DataSource dataSource) throws SleuthkitCaseProviderException, TskCoreException
default Set< IngestJobEvent >	getIngestJobEventUpdates ()
List< Pair< String, Long > >	getInterestingItemCounts (DataSource dataSource) throws SleuthkitCaseProviderException, TskCoreException
List< Pair< String, Long > >	getKeywordCounts (DataSource dataSource) throws SleuthkitCaseProviderException, TskCoreException
default boolean	isRefreshRequired (ModuleDataEvent evt)
default boolean	isRefreshRequired (ModuleContentEvent evt)
default boolean	isRefreshRequired (IngestManager.IngestJobEvent evt)
default boolean	isRefreshRequired (AbstractFile evt)
boolean	isRefreshRequired (IngestJobEvent evt)
default boolean	isRefreshRequiredForCaseEvent (PropertyChangeEvent evt)

Public Attributes
Set< IngestJobEvent >	INGEST_JOB_EVENTS

Private Member Functions
List< Pair< String, Long > >	getCountsData (DataSource dataSource, BlackboardAttribute.Type keyType, ARTIFACT_TYPE...artifactTypes) throws SleuthkitCaseProviderException, TskCoreException

Private Attributes
final SleuthkitCaseProvider	provider

Static Private Attributes
static final Set< Integer >	ARTIFACT_UPDATE_TYPE_IDS
static final Set< String >	EXCLUDED_KEYWORD_SEARCH_ITEMS
static final BlackboardAttribute.Type	TYPE_SET_NAME = new BlackboardAttribute.Type(ATTRIBUTE_TYPE.TSK_SET_NAME)

Detailed Description

Providing data for the data source analysis tab.

Definition at line 45 of file AnalysisSummary.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.AnalysisSummary

(

)

Main constructor.

Definition at line 69 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.DEFAULT.

org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.AnalysisSummary

(

SleuthkitCaseProvider

provider

)

Main constructor.

Parameters

provider

The means of obtaining a sleuthkit case.

Definition at line 78 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.provider.

Member Function Documentation

Set<Integer> org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getArtifactTypeIdsForRefresh

(

)

Returns

The set of artifact type id's that should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.

Definition at line 83 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.ARTIFACT_UPDATE_TYPE_IDS.

default Set<Case.Events> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.getCaseEventUpdates ( )

inherited

Returns

The set of Case Events for which data should be updated.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Definition at line 57 of file DefaultUpdateGovernor.java.

List<Pair<String, Long> > org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getCountsData ( DataSource  dataSource, BlackboardAttribute.Type  keyType, ARTIFACT_TYPE...  artifactTypes  ) throws SleuthkitCaseProviderException, TskCoreException

private

Get counts for the artifact of the specified type.

Parameters

dataSource	The datasource.
keyType	The attribute to use as the key type.
artifactTypes	The types of artifacts for which to query.

Returns

A list of key value pairs where the key is the attribute type value and the value is the count of items found. This list is sorted by the count descending max to min.

Exceptions

SleuthkitCaseProviderException
TskCoreException

Definition at line 148 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.get().

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getHashsetCounts(), org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getInterestingItemCounts(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getKeywordCounts().

List<Pair<String, Long> > org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getHashsetCounts

(

DataSource

dataSource

)

throws SleuthkitCaseProviderException, TskCoreException

Gets counts for hashset hits.

Parameters

dataSource

The datasource for which to identify hashset hits.

Returns

The hashset set name with the number of hits in descending order.

Exceptions

SleuthkitCaseProviderException
TskCoreException

Definition at line 97 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getCountsData(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.TYPE_SET_NAME.

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.AnalysisPanel.AnalysisPanel().

default Set<IngestJobEvent> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getIngestJobEventUpdates ( )

inherited

Returns

The set of Ingest Job Events for which data should be updated.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.

Definition at line 52 of file DefaultArtifactUpdateGovernor.java.

References org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.INGEST_JOB_EVENTS.

List<Pair<String, Long> > org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getInterestingItemCounts

(

DataSource

dataSource

)

throws SleuthkitCaseProviderException, TskCoreException

Gets counts for interesting item hits.

Parameters

dataSource

The datasource for which to identify interesting item hits.

Returns

The interesting item set name with the number of hits in descending order.

Exceptions

SleuthkitCaseProviderException
TskCoreException

Definition at line 130 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getCountsData(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.TYPE_SET_NAME.

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.AnalysisPanel.AnalysisPanel().

List<Pair<String, Long> > org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getKeywordCounts

(

DataSource

dataSource

)

throws SleuthkitCaseProviderException, TskCoreException

Gets counts for keyword hits.

Parameters

dataSource

The datasource for which to identify keyword hits.

Returns

The keyword set name with the number of hits in descending order.

Exceptions

SleuthkitCaseProviderException
TskCoreException

Definition at line 111 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getCountsData(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.TYPE_SET_NAME.

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.AnalysisPanel.AnalysisPanel().

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.isRefreshRequired ( ModuleDataEvent  evt )

inherited

Given a module data event, whether or not an update should occur.

Parameters

evt	The ModuleDataEvent that is occurring.

Returns

Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.

Definition at line 38 of file DefaultArtifactUpdateGovernor.java.

References org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getArtifactTypeIdsForRefresh(), and org.sleuthkit.autopsy.ingest.ModuleDataEvent.getBlackboardArtifactType().

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.isRefreshRequired ( ModuleContentEvent  evt )

inherited

Given a module content event, whether or not an update should occur.

Parameters

evt	The ModuleContentEvent.

Returns

Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Implemented in org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.MimeTypeSummary, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TypesSummary.

Definition at line 42 of file DefaultUpdateGovernor.java.

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.isRefreshRequired ( IngestManager.IngestJobEvent  evt )

inherited

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.

Definition at line 47 of file DefaultArtifactUpdateGovernor.java.

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.isRefreshRequired ( AbstractFile  evt )

inherited

Whether or not a newly added AbstractFile should trigger an update.

Parameters

evt	The AbstractFile.

Returns

True if an update should occur.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Implemented in org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.MimeTypeSummary, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TypesSummary.

Definition at line 67 of file DefaultUpdateGovernor.java.

boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.isRefreshRequired ( IngestJobEvent  evt )

inherited

Given an ingest job event, determines whether or not an update should occur.

Parameters

evt	The event.

Returns

Whether or not this event should trigger an update.

Implemented in org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.MimeTypeSummary, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TypesSummary.

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.isRefreshRequiredForCaseEvent ( PropertyChangeEvent  evt )

inherited

Given a case event, whether or not an update should occur.

Parameters

evt	The event.

Returns

Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Definition at line 37 of file DefaultUpdateGovernor.java.

Member Data Documentation

final Set<Integer> org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.ARTIFACT_UPDATE_TYPE_IDS

staticprivate

Initial value:

= new HashSet<>(Arrays.asList(
            ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT.getTypeID(),
            ARTIFACT_TYPE.TSK_INTERESTING_ARTIFACT_HIT.getTypeID(),
            ARTIFACT_TYPE.TSK_HASHSET_HIT.getTypeID(),
            ARTIFACT_TYPE.TSK_KEYWORD_HIT.getTypeID()
    ))

Definition at line 57 of file AnalysisSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getArtifactTypeIdsForRefresh().

final Set<String> org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.EXCLUDED_KEYWORD_SEARCH_ITEMS

staticprivate

Initial value:

= new HashSet<>(Arrays.asList(
            "PHONE NUMBERS",
            "IP ADDRESSES",
            "EMAIL ADDRESSES",
            "URLS",
            "CREDIT CARD NUMBERS"
    ))

Definition at line 49 of file AnalysisSummary.java.

Set<IngestJobEvent> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.INGEST_JOB_EVENTS

inherited

Initial value:

= new HashSet<>(
            Arrays.asList(IngestJobEvent.COMPLETED, IngestJobEvent.CANCELLED))

Definition at line 34 of file DefaultArtifactUpdateGovernor.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getIngestJobEventUpdates().

final SleuthkitCaseProvider org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.provider

private

Definition at line 64 of file AnalysisSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.AnalysisSummary().

final BlackboardAttribute.Type org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.TYPE_SET_NAME = new BlackboardAttribute.Type(ATTRIBUTE_TYPE.TSK_SET_NAME)

staticprivate

Definition at line 47 of file AnalysisSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getHashsetCounts(), org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getInterestingItemCounts(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getKeywordCounts().

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/datasourcesummary/datamodel/AnalysisSummary.java