Autopsy
4.17.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.report.GeneralReportModule.
Classes | |
enum | FeatureColor |
Public Member Functions | |
default void | generateReport (String baseReportDir, ReportProgressPanel progressPanel) |
void | generateReport (String baseReportDir, ReportProgressPanel progressPanel, List< Waypoint > waypointList) |
void | generateReport (GeneralReportSettings settings, ReportProgressPanel progressPanel) |
default ReportModuleSettings | getConfiguration () |
JPanel | getConfigurationPanel () |
default ReportModuleSettings | getDefaultConfiguration () |
String | getDescription () |
String | getName () |
String | getRelativeFilePath () |
default void | setConfiguration (ReportModuleSettings settings) |
boolean | supportsDataSourceSelection () |
Static Public Member Functions | |
static synchronized KMLReport | getDefault () |
Private Member Functions | |
KMLReport () | |
void | addAreaToReport (Area area) |
void | addRouteToReport (Route route) |
void | addTrackToReport (Track track) |
void | copyFileUsingStream (AbstractFile inputFile, File outputFile) throws ReadContentInputStreamException, IOException |
String | formatAttribute (String title, String value) |
String | formattedCoordinates (Double latitude, Double longitude) |
String | getFormattedDetails (Waypoint point, String header) |
String | getFormattedDetails (Route route) |
String | getTimeStamp (long timeStamp) |
Element | makeLineString (Double startLatitude, Double startLongitude, Double stopLatitude, Double stopLongitude) |
Element | makePlacemark (String name, FeatureColor color, String description, Long timestamp, Element feature, String coordinates) |
Element | makePlacemarkWithPicture (String name, FeatureColor color, String description, Long timestamp, Element feature, Path path, String coordinates) |
Element | makePoint (Waypoint point) |
Element | makePoint (Double latitude, Double longitude, Double altitude) |
Element | makePolygon (List< Waypoint > waypoints) |
Document | setupReportDocument () |
boolean | shouldFilterFromReport (Content content) throws TskCoreException |
Static Private Member Functions | |
static String | removeLeadingImgAndVol (String uniquePath) |
Private Attributes | |
Case | currentCase |
Element | gpsAreasFolder |
Element | gpsBookmarksFolder |
Element | gpsExifMetadataFolder |
Element | gpsLastKnownLocationFolder |
Element | gpsRouteFolder |
Element | gpsSearchesFolder |
Element | gpsTrackpointsFolder |
Element | gpsTracksFolder |
final SimpleDateFormat | kmlDateFormat = new SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ssX") |
Namespace | ns |
GeneralReportSettings | settings |
SleuthkitCase | skCase |
List< Waypoint > | waypointList = null |
Static Private Attributes | |
static final String | HTML_PROP_FORMAT = "<b>%s: </b>%s<br>" |
static KMLReport | instance = null |
static final String | KML_STYLE_FILE = "style.kml" |
static final Logger | logger = Logger.getLogger(KMLReport.class.getName()) |
static final String | REPORT_KML = "ReportKML.kml" |
static final String | STYLESHEETS_PATH = "/org/sleuthkit/autopsy/report/stylesheets/" |
Generates a KML file based on geospatial information from the BlackBoard.
Definition at line 68 of file KMLReport.java.
|
private |
Definition at line 113 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.getDefault().
|
private |
Add a area to the KML report.
area |
Definition at line 624 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.formattedCoordinates(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.getFormattedDetails(), org.sleuthkit.autopsy.geolocation.datamodel.GeoPath.getLabel(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLatitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLongitude(), org.sleuthkit.autopsy.geolocation.datamodel.GeoPath.getPath(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getTimestamp(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.FeatureColor.GREEN, org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePlacemark(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePolygon().
|
private |
Add the given route to the KML report.
route |
Definition at line 492 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.formattedCoordinates(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getAltitude(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.getFormattedDetails(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLabel(), org.sleuthkit.autopsy.geolocation.datamodel.GeoPath.getLabel(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLatitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLongitude(), org.sleuthkit.autopsy.geolocation.datamodel.Route.getRoute(), org.sleuthkit.autopsy.geolocation.datamodel.Route.getTimestamp(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getTimestamp(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.FeatureColor.GREEN, org.sleuthkit.autopsy.report.modules.kml.KMLReport.makeLineString(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePlacemark(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePoint().
|
private |
Add a track to the KML report.
track |
Definition at line 572 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.formattedCoordinates(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.getFormattedDetails(), org.sleuthkit.autopsy.geolocation.datamodel.GeoPath.getLabel(), org.sleuthkit.autopsy.geolocation.datamodel.GeoPath.getPath(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.FeatureColor.GREEN, org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePlacemark(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePoint().
|
private |
Extracts the file to the output folder.
inputFile | The input AbstractFile to copy |
outputFile | the output file |
ReadContentInputStreamException | When a read error occurs. |
IOException | When a general file exception occurs. |
Definition at line 856 of file KMLReport.java.
|
private |
Returns a HTML formatted string with the given title and value.
title | |
value |
Definition at line 966 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.getFormattedDetails().
|
private |
Helper functions for consistently formatting longitude and latitude.
latitude | Double latitude value |
longitude | Double longitude value |
Definition at line 1029 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.addAreaToReport(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.addRouteToReport(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.addTrackToReport().
|
inherited |
Called to generate the report. Method is responsible for saving the file at the path specified and updating progress via the progressPanel object.
baseReportDir | Base directory that reports are being stored in. Report should go into baseReportDir + getRelativeFilePath(). |
progressPanel | panel to update the report's progress with |
Implemented in org.sleuthkit.autopsy.report.GeneralReportModuleAdapter.
Definition at line 36 of file GeneralReportModule.java.
Referenced by org.sleuthkit.autopsy.report.GeneralReportModule.generateReport().
void org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport | ( | String | baseReportDir, |
ReportProgressPanel | progressPanel, | ||
List< Waypoint > | waypointList | ||
) |
Generates a body file format report for use with the MAC time tool.
baseReportDir | path to save the report |
progressPanel | panel to update the report's progress |
waypointList |
Definition at line 163 of file KMLReport.java.
References org.sleuthkit.autopsy.report.GeneralReportSettings.setReportDirectoryPath(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.waypointList.
Referenced by org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.reportButtonActionPerformed().
void org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport | ( | GeneralReportSettings | settings, |
ReportProgressPanel | progressPanel | ||
) |
Called to generate the report. Method is responsible for saving the file and updating progress via the progressPanel object. Configuration parameters are passed in the settings class, most notably the directory to save the report. Modules should try to respond to all configuration parameters.
settings | Configuration parameters to customize the report generation process |
progressPanel | panel to update the report's progress with |
Implements org.sleuthkit.autopsy.report.GeneralReportModule.
Definition at line 176 of file KMLReport.java.
References org.sleuthkit.autopsy.casemodule.Case.addReport(), org.sleuthkit.autopsy.report.ReportProgressPanel.ReportStatus.COMPLETE, org.sleuthkit.autopsy.report.ReportProgressPanel.complete(), org.sleuthkit.autopsy.report.ReportProgressPanel.ReportStatus.ERROR, org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getDataSources(), org.sleuthkit.autopsy.report.GeneralReportSettings.getReportDirectoryPath(), org.sleuthkit.autopsy.report.GeneralReportSettings.getSelectedDataSources(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.REPORT_KML, org.sleuthkit.autopsy.report.ReportProgressPanel.setIndeterminate(), org.sleuthkit.autopsy.report.GeneralReportSettings.setSelectedDataSources(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.settings, org.sleuthkit.autopsy.report.modules.kml.KMLReport.setupReportDocument(), org.sleuthkit.autopsy.report.ReportProgressPanel.start(), and org.sleuthkit.autopsy.report.ReportProgressPanel.updateStatusLabel().
|
inherited |
Get current configuration for this report module.
Implemented in org.sleuthkit.autopsy.report.modules.stix.STIXReportModule, org.sleuthkit.autopsy.report.modules.html.HTMLReport, and org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.
Definition at line 79 of file ReportModule.java.
JPanel org.sleuthkit.autopsy.report.modules.kml.KMLReport.getConfigurationPanel | ( | ) |
Returns the configuration panel for the report, which is displayed in the report configuration step of the report wizard.
Implements org.sleuthkit.autopsy.report.ReportModule.
Definition at line 886 of file KMLReport.java.
|
static |
Definition at line 117 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.instance, and org.sleuthkit.autopsy.report.modules.kml.KMLReport.KMLReport().
Referenced by org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.reportButtonActionPerformed().
|
inherited |
Get default configuration for this report module.
Implemented in org.sleuthkit.autopsy.report.modules.stix.STIXReportModule, org.sleuthkit.autopsy.report.modules.html.HTMLReport, and org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.
Definition at line 70 of file ReportModule.java.
Referenced by org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.generateReports().
String org.sleuthkit.autopsy.report.modules.kml.KMLReport.getDescription | ( | ) |
Gets a one-line, user friendly description of the type of report this module generates.
Implements org.sleuthkit.autopsy.report.ReportModule.
Definition at line 880 of file KMLReport.java.
|
private |
Get the nicely formatted details for the given waypoint.
point | Waypoint object |
header | String details header |
Definition at line 930 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.formatAttribute(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getAltitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLabel(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLatitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLongitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getOtherProperties(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getTimestamp(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.getTimeStamp().
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.addAreaToReport(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.addRouteToReport(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.addTrackToReport().
|
private |
Returns an HTML formatted string of all the
route |
Definition at line 977 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.formatAttribute(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getAltitude(), org.sleuthkit.autopsy.geolocation.datamodel.GeoPath.getLabel(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLatitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLongitude(), org.sleuthkit.autopsy.geolocation.datamodel.Route.getOtherProperties(), org.sleuthkit.autopsy.geolocation.datamodel.Route.getRoute(), org.sleuthkit.autopsy.geolocation.datamodel.Route.getTimestamp(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.getTimeStamp().
String org.sleuthkit.autopsy.report.modules.kml.KMLReport.getName | ( | ) |
Get the name of the report this module generates.
Implements org.sleuthkit.autopsy.report.ReportModule.
Definition at line 869 of file KMLReport.java.
String org.sleuthkit.autopsy.report.modules.kml.KMLReport.getRelativeFilePath | ( | ) |
Gets the relative path of the report file, if any, generated by this module. The path should be relative to the location that gets passed in to generateReport() (or similar).
Implements org.sleuthkit.autopsy.report.ReportModule.
Definition at line 875 of file KMLReport.java.
|
private |
Format a point time stamp (in seconds) to the report format.
timeStamp | The timestamp in epoch seconds. |
Definition at line 652 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.getFormattedDetails(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePlacemark(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.makePlacemarkWithPicture().
|
private |
Create a LineString for use in a Placemark. Note in this method, start and stop altitudes get ignored, as Google Earth apparently has trouble using altitudes for LineStrings, though the parameters are still in the call.
If null values are pass for the latitudes or longitudes a line will not be drawn.
startLatitude | Starting latitude |
startLongitude | Starting longitude |
stopLatitude | Ending latitude |
stopLongitude | Ending longitude |
Definition at line 720 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.addRouteToReport().
|
private |
Make a Placemark for use in displaying features. Takes a coordinate-bearing feature (Point, LineString, etc) and places it in the Placemark element.
name | Placemark name |
color | Placemark color |
description | Description for the info bubble on the map |
timestamp | Placemark timestamp |
feature | The feature to show. Could be Point, LineString, etc. |
coordinates | The coordinates to display in the list view snippet |
Definition at line 779 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.FeatureColor.getColor(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.getTimeStamp().
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.addAreaToReport(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.addRouteToReport(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.addTrackToReport().
|
private |
Make a Placemark for use in displaying features. Takes a coordinate-bearing feature (Point, LineString, etc) and places it in the Placemark element.
name | Placemark file name |
color | Placemark color |
description | Description for the info bubble on the map |
timestamp | Placemark timestamp |
feature | The feature to show. Could be Point, LineString, etc. |
path | The path to the file in the source image |
coordinates | The coordinates to display in the list view snippet |
Definition at line 817 of file KMLReport.java.
References org.sleuthkit.autopsy.report.modules.kml.KMLReport.FeatureColor.getColor(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.getTimeStamp().
|
private |
Create the point for the given artifact.
point | Artifact point. |
Definition at line 663 of file KMLReport.java.
References org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getAltitude(), org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLatitude(), and org.sleuthkit.autopsy.geolocation.datamodel.Waypoint.getLongitude().
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.addRouteToReport(), and org.sleuthkit.autopsy.report.modules.kml.KMLReport.addTrackToReport().
|
private |
Create a Point for use in a Placemark. Note in this method altitude is ignored, as Google Earth apparently has trouble using altitudes for LineStrings, though the parameters are still in the call.
latitude | point latitude |
longitude | point longitude |
altitude | point altitude. Currently ignored. |
Definition at line 678 of file KMLReport.java.
|
private |
Create a Polygon for use in a Placemark.
waypoints | The waypoints making up the outline. |
Definition at line 743 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.addAreaToReport().
|
staticprivate |
This is a smash-n-grab from AbstractFile.createNonUniquePath(String). This method is intended to be removed when img_ and vol_ are no longer added to images and volumes respectively, OR when AbstractFile is sorted out with respect to this.
uniquePath | The path to sanitize. |
Definition at line 900 of file KMLReport.java.
|
inherited |
Set report module configuration.
settings | Object which contains report module settings. |
Implemented in org.sleuthkit.autopsy.report.modules.stix.STIXReportModule, org.sleuthkit.autopsy.report.modules.html.HTMLReport, and org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.
Definition at line 88 of file ReportModule.java.
Referenced by org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.generateReports().
|
private |
Do all of the setting up of elements needed for the report.
Definition at line 278 of file KMLReport.java.
References org.sleuthkit.autopsy.ingest.IngestManager.getInstance(), org.sleuthkit.autopsy.report.ReportBranding.getReportTitle(), and org.sleuthkit.autopsy.ingest.IngestManager.isIngestRunning().
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport().
|
private |
Indicates if the content should be filtered from the report.
Definition at line 1040 of file KMLReport.java.
References org.sleuthkit.autopsy.report.GeneralReportSettings.getSelectedDataSources().
boolean org.sleuthkit.autopsy.report.modules.kml.KMLReport.supportsDataSourceSelection | ( | ) |
Determines if the module supports report generation on a subset of data sources in a case. Defaults to false. The data source selections are stored in the GeneralReportSettings instance.
Implements org.sleuthkit.autopsy.report.GeneralReportModule.
Definition at line 171 of file KMLReport.java.
|
private |
Definition at line 75 of file KMLReport.java.
|
private |
Definition at line 88 of file KMLReport.java.
|
private |
Definition at line 82 of file KMLReport.java.
|
private |
Definition at line 81 of file KMLReport.java.
|
private |
Definition at line 83 of file KMLReport.java.
|
private |
Definition at line 84 of file KMLReport.java.
|
private |
Definition at line 85 of file KMLReport.java.
|
private |
Definition at line 86 of file KMLReport.java.
|
private |
Definition at line 87 of file KMLReport.java.
|
staticprivate |
Definition at line 79 of file KMLReport.java.
|
staticprivate |
Definition at line 74 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.getDefault().
|
staticprivate |
Definition at line 71 of file KMLReport.java.
|
private |
Definition at line 77 of file KMLReport.java.
|
staticprivate |
Definition at line 70 of file KMLReport.java.
|
private |
Definition at line 78 of file KMLReport.java.
|
staticprivate |
Definition at line 72 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport().
|
private |
Definition at line 90 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport().
|
private |
Definition at line 76 of file KMLReport.java.
|
staticprivate |
Definition at line 73 of file KMLReport.java.
|
private |
Definition at line 92 of file KMLReport.java.
Referenced by org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport().
Copyright © 2012-2021 Basis Technology. Generated on: Tue Jan 19 2021
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.