org.sleuthkit.autopsy.discovery.search.SearchFiltering Class Reference

Classes
class	ArtifactDateRangeFilter
class	ArtifactTypeFilter
class	DataSourceFilter
class	FileTypeFilter
class	FrequencyFilter
class	HashSetFilter
class	InterestingFileSetFilter
class	KeywordListFilter
class	KnownAccountTypeFilter
class	KnownFilter
class	NotableFilter
class	ObjectDetectionFilter
class	ParentFilter
class	ParentSearchTerm
class	PreviouslyNotableFilter
class	ScoreFilter
class	SizeFilter
class	TagsFilter
class	UserCreatedFilter

Private Member Functions
	SearchFiltering ()

Static Private Member Functions
static String	concatenateNamesForSQL (List< String > setNames)
static String	concatenateSetNamesForDisplay (List< String > setNames)
static List< Result >	getResultList (List< AbstractFilter > filters, String combinedQuery, SleuthkitCase caseDb, CentralRepository centralRepoDb) throws TskCoreException, DiscoveryException

Detailed Description

Run various filters to return a subset of Results from the current case.

Definition at line 54 of file SearchFiltering.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.discovery.search.SearchFiltering.SearchFiltering ( )

private

Private constructor for SearchFiltering class.

Definition at line 1177 of file SearchFiltering.java.

Member Function Documentation

static String org.sleuthkit.autopsy.discovery.search.SearchFiltering.concatenateNamesForSQL ( List< String >  setNames )

staticprivate

Concatenate the set names into an "OR" separated list. This does not do any SQL-escaping.

Parameters

setNames

The List of setNames to concatenate.

Returns

The concatenated list to use in the SQL query.

Definition at line 1163 of file SearchFiltering.java.

Referenced by org.sleuthkit.autopsy.discovery.search.SearchFiltering.KeywordListFilter.getWhereClause(), org.sleuthkit.autopsy.discovery.search.SearchFiltering.HashSetFilter.getWhereClause(), org.sleuthkit.autopsy.discovery.search.SearchFiltering.InterestingFileSetFilter.getWhereClause(), and org.sleuthkit.autopsy.discovery.search.SearchFiltering.ObjectDetectionFilter.getWhereClause().

static String org.sleuthkit.autopsy.discovery.search.SearchFiltering.concatenateSetNamesForDisplay ( List< String >  setNames )

staticprivate

Concatenate the set names into a "," separated list.

Parameters

setNames

The List of setNames to concatenate.

Returns

The concatenated list for display.

Definition at line 1144 of file SearchFiltering.java.

Referenced by org.sleuthkit.autopsy.discovery.search.SearchFiltering.KeywordListFilter.getDesc(), org.sleuthkit.autopsy.discovery.search.SearchFiltering.HashSetFilter.getDesc(), org.sleuthkit.autopsy.discovery.search.SearchFiltering.InterestingFileSetFilter.getDesc(), org.sleuthkit.autopsy.discovery.search.SearchFiltering.ObjectDetectionFilter.getDesc(), and org.sleuthkit.autopsy.discovery.search.SearchFiltering.ScoreFilter.getDesc().

static List<Result> org.sleuthkit.autopsy.discovery.search.SearchFiltering.getResultList ( List< AbstractFilter >  filters, String  combinedQuery, SleuthkitCase  caseDb, CentralRepository  centralRepoDb  ) throws TskCoreException, DiscoveryException

staticprivate

Private helper method for runQueries method to get the ResultFile list.

Parameters

filters	The filters to run.
combinedQuery	The query to get results files for.
caseDb	The case database.
centralRepoDb	The central repo. Can be null as long as no filters need it.

Returns

An ArrayList of Results returned by the query.

Exceptions

TskCoreException
DiscoveryException

Definition at line 106 of file SearchFiltering.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/discovery/search/SearchFiltering.java