Classes
class	CacheInvalidatedEvent

Public Member Functions
	EventsModel (Case currentCase, ReadOnlyObjectProperty< EventsModelParams > modelParams) throws TskCoreException

synchronized ReadOnlyObjectProperty< TimelineLevelOfDetail >	descriptionLODProperty ()

synchronized ReadOnlyObjectProperty< RootFilterState >	eventFilterProperty ()

synchronized ReadOnlyObjectProperty< TimelineEventType.HierarchyLevel >	eventTypesHierarchyLevelProperty ()

synchronized RootFilterState	getDefaultEventFilterState ()

synchronized TimelineLevelOfDetail	getDescriptionLOD ()

TimelineEvent	getEventById (Long eventID) throws TskCoreException

Map< TimelineEventType, Long >	getEventCounts (Interval timeRange) throws TskCoreException

synchronized RootFilterState	getEventFilterState ()

List< Long >	getEventIDs (Interval timeRange, FilterState<?extends TimelineFilter > filterState) throws TskCoreException

List< Long >	getEventIDsForArtifact (BlackboardArtifact artifact) throws TskCoreException

Set< Long >	getEventIDsForFile (AbstractFile file, boolean includeDerivedArtifacts) throws TskCoreException

TimelineManager	getEventManager ()

Set< TimelineEvent >	getEventsById (Collection< Long > eventIDs) throws TskCoreException

ImmutableList< TimelineEventType >	getEventTypes ()

synchronized TimelineEventType.HierarchyLevel	getEventTypeZoom ()

Long	getMaxEventTime () throws TskCoreException

Long	getMinEventTime () throws TskCoreException

synchronized EventsModelParams	getModelParams ()

SleuthkitCase	getSleuthkitCase ()

Interval	getSpanningInterval (DateTimeZone timeZone) throws TskCoreException

Interval	getSpanningInterval () throws TskCoreException

Interval	getSpanningInterval (Collection< Long > eventIDs) throws TskCoreException

synchronized Interval	getTimeRange ()

synchronized boolean	handleArtifactTagAdded (BlackBoardArtifactTagAddedEvent evt) throws TskCoreException

synchronized boolean	handleArtifactTagDeleted (BlackBoardArtifactTagDeletedEvent evt) throws TskCoreException

synchronized boolean	handleContentTagAdded (ContentTagAddedEvent evt) throws TskCoreException

synchronized boolean	handleContentTagDeleted (ContentTagDeletedEvent evt) throws TskCoreException

synchronized void	invalidateCaches (Collection< Long > updatedEventIDs) throws TskCoreException

synchronized ReadOnlyObjectProperty< EventsModelParams >	modelParamsProperty ()

void	postRefreshRequest ()

synchronized void	registerForEvents (Object subscriber)

synchronized ReadOnlyObjectProperty< Interval >	timeRangeProperty ()

synchronized void	unRegisterForEvents (Object subscriber)

synchronized Set< Long >	updateEventsForHashSetHits (Collection< BlackboardArtifact > hashSetHitArtifacts) throws TskCoreException

Private Member Functions
Map< TimelineEventType, Long >	countEventsByType (EventsModelParams modelParams) throws TskCoreException

synchronized void	populateDataSourcesCache () throws TskCoreException

boolean	postTagsAdded (Set< Long > updatedEventIDs)

boolean	postTagsDeleted (Set< Long > updatedEventIDs)

Static Private Member Functions
static DataSourceFilter	newDataSourceFilter (Map.Entry< Long, String > dataSourceEntry)

Private Attributes
final TimelineManager	caseDbEventManager

final Case	currentCase

final ObservableMap< Long, String >	datasourceIDsToNamesMap = FXCollections.observableHashMap()

final EventBus	eventbus = new EventBus("EventsModel_EventBus")

final LoadingCache< EventsModelParams, Map< TimelineEventType, Long > >	eventCountsCache

final ReadOnlyObjectWrapper< TimelineEventType.HierarchyLevel >	eventTypesHierarchyLevelProperty = new ReadOnlyObjectWrapper<>(TimelineEventType.HierarchyLevel.CATEGORY)

final ReadOnlyObjectWrapper< RootFilterState >	filterStateProperty = new ReadOnlyObjectWrapper<>()

final LoadingCache< Long, TimelineEvent >	idsToEventsCache

final LoadingCache< Object, Long >	maxEventTimeCache

final LoadingCache< Object, Long >	minEventTimeCache

final ReadOnlyObjectWrapper< EventsModelParams >	modelParamsProperty = new ReadOnlyObjectWrapper<>()

final ReadOnlyObjectWrapper< TimelineLevelOfDetail >	timelineLODProperty = new ReadOnlyObjectWrapper<>(TimelineLevelOfDetail.LOW)

final ReadOnlyObjectWrapper< Interval >	timeRangeProperty = new ReadOnlyObjectWrapper<>()

Static Private Attributes
static final Logger	logger = Logger.getLogger(EventsModel.class.getName())

Detailed Description

In the timeline implementation of the MVC pattern, this class acts as the model. The views are the event counts view, the event details view and the events list view.

Concurrency Policy: TimelineManager is internally synchronized, so methods that only access the TimelineManager atomically do not need further synchronization. All other member state variables should only be accessed with intrinsic lock of the containing FilteredEventsModel held.

Definition at line 95 of file EventsModel.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.timeline.EventsModel.EventsModel	(	Case	currentCase,
		ReadOnlyObjectProperty< EventsModelParams >	modelParams
	)		throws TskCoreException

Constructs the model in the timeline implementation of the MVC pattern.

Parameters

currentCase	The current case.
modelParams	The initial state of the model parameters.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 146 of file EventsModel.java.

Member Function Documentation

Map<TimelineEventType, Long> org.sleuthkit.autopsy.timeline.EventsModel.countEventsByType ( EventsModelParams modelParams ) throws TskCoreException

private

Gets the count of all events that fit the given model parameters. The counts are organized by event type for the given event types hierarchy level.

Parameters

modelParams The model parameters.

Returns: A mapping of event types to event counts at the given event types hierarchy level.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 242 of file EventsModel.java.

synchronized ReadOnlyObjectProperty<TimelineLevelOfDetail> org.sleuthkit.autopsy.timeline.EventsModel.descriptionLODProperty ( )

Gets a read only, observable property for the timeline level of detail model parameter.

Returns: The timeline level of detail model parameter property.

Definition at line 308 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.zooming.ZoomSettingsPane.initialize().

synchronized ReadOnlyObjectProperty<RootFilterState> org.sleuthkit.autopsy.timeline.EventsModel.eventFilterProperty ( )

Gets a read only, observable property for the event filter model parameter.

Returns: The event filter model parameter property.

Definition at line 318 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.filtering.FilterSetPanel.refreshFilterUI().

synchronized ReadOnlyObjectProperty<TimelineEventType.HierarchyLevel> org.sleuthkit.autopsy.timeline.EventsModel.eventTypesHierarchyLevelProperty ( )

Gets a read only, observable property for the event types hierarchy level model parameter.

Returns: The event types hierarchy level model parameter property.

Definition at line 328 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.EventsModel().

synchronized RootFilterState org.sleuthkit.autopsy.timeline.EventsModel.getDefaultEventFilterState ( )

Gets a new instance of the default event filter state model parameter, with data source filters for every data source currently in the data sopurces cache.

Returns: An instance of the default filter state model parameter.

Definition at line 384 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.utils.FilterUtils.createDefaultFileTypesFilter(), and org.sleuthkit.autopsy.timeline.EventsModel.newDataSourceFilter().

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.EventsModel(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineDataSourceUtils.getDataSourceFilterState().

synchronized TimelineLevelOfDetail org.sleuthkit.autopsy.timeline.EventsModel.getDescriptionLOD ( )

Gets the time range model parameter.

Returns: The time range model parameter.

Definition at line 355 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.getModelParams(), and org.sleuthkit.autopsy.timeline.zooming.EventsModelParams.getTimelineLOD().

TimelineEvent org.sleuthkit.autopsy.timeline.EventsModel.getEventById ( Long eventID ) throws TskCoreException

Gets an event given its event ID.

Parameters

eventID The event ID.

Returns: The event.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 420 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.EventStripeNode.createChildNode(), and org.sleuthkit.autopsy.timeline.EventsModel.getEventsById().

Map<TimelineEventType, Long> org.sleuthkit.autopsy.timeline.EventsModel.getEventCounts ( Interval timeRange ) throws TskCoreException

Gets counts by event type of the events within a given time range.

Parameters

timeRange The time range.

Returns: The event counts by type.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 509 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.getEventFilterState(), and org.sleuthkit.autopsy.timeline.EventsModel.getEventTypeZoom().

Referenced by org.sleuthkit.autopsy.timeline.ui.countsview.CountsViewPane.CountsUpdateTask.call(), and org.sleuthkit.autopsy.timeline.ui.ViewFrame.refreshHistorgram().

synchronized RootFilterState org.sleuthkit.autopsy.timeline.EventsModel.getEventFilterState ( )

Gets the event filter model parameter.

Returns: The event filter model parameter.

Definition at line 364 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.zooming.EventsModelParams.getEventFilterState(), and org.sleuthkit.autopsy.timeline.EventsModel.getModelParams().

Referenced by org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.ListViewModel.getCombinedEvents(), org.sleuthkit.autopsy.timeline.EventsModel.getEventCounts(), org.sleuthkit.autopsy.timeline.EventsModel.getEventIDs(), and org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval().

List<Long> org.sleuthkit.autopsy.timeline.EventsModel.getEventIDs	(	Interval	timeRange,
		FilterState<?extends TimelineFilter >	filterState
	)		throws TskCoreException

Gets a list of event IDs for a given time range and a given events filter.

Parameters

timeRange	The time range.
filterState	A filter state object for the events filter.

Returns: The events.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 458 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.ui.filtering.datamodel.RootFilterState.getActiveFilter(), org.sleuthkit.autopsy.timeline.EventsModel.getEventFilterState(), org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval(), and org.sleuthkit.autopsy.timeline.ui.filtering.datamodel.RootFilterState.intersect().

List<Long> org.sleuthkit.autopsy.timeline.EventsModel.getEventIDsForArtifact ( BlackboardArtifact artifact ) throws TskCoreException

Gets a set of event IDs associated with a given artifact.

Parameters

artifact The artifact.

Returns: The event IDs.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 495 of file EventsModel.java.

Set<Long> org.sleuthkit.autopsy.timeline.EventsModel.getEventIDsForFile	(	AbstractFile	file,
		boolean	includeDerivedArtifacts
	)		throws TskCoreException

Gets a set of event IDs associated with a given file.

Parameters

file	The file.
includeDerivedArtifacts	If true, also gets the event IDs of events associated with artifacts for which the file is the source file.

Returns: The event IDs.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 481 of file EventsModel.java.

TimelineManager org.sleuthkit.autopsy.timeline.EventsModel.getEventManager ( )

Gets the case database events manager.

Returns: The case database events manager.

Definition at line 258 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.caseDbEventManager.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailsViewModel.DetailsViewModel(), and org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.ListViewModel.ListViewModel().

Set<TimelineEvent> org.sleuthkit.autopsy.timeline.EventsModel.getEventsById ( Collection< Long > eventIDs ) throws TskCoreException

Gets a set of events given their event IDs.

Parameters

eventIDs The event IDs.

Returns: THe events.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 438 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.getEventById().

ImmutableList<TimelineEventType> org.sleuthkit.autopsy.timeline.EventsModel.getEventTypes ( )

Gets a list of the event types from the case database.

Returns: The list of event types.

Definition at line 758 of file EventsModel.java.

synchronized TimelineEventType.HierarchyLevel org.sleuthkit.autopsy.timeline.EventsModel.getEventTypeZoom ( )

Gets the event types hierarchy level model model parameter.

Returns: The event types hierarchy level model model parameter.

Definition at line 373 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.zooming.EventsModelParams.getEventTypesHierarchyLevel(), and org.sleuthkit.autopsy.timeline.EventsModel.getModelParams().

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.getEventCounts().

Long org.sleuthkit.autopsy.timeline.EventsModel.getMaxEventTime ( ) throws TskCoreException

Gets the maximum event time in the case database, in seconds since the UNIX epoch.

Returns: The maximum event time.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 590 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval().

Long org.sleuthkit.autopsy.timeline.EventsModel.getMinEventTime ( ) throws TskCoreException

Gets the minimum event time in the case database, in seconds since the UNIX epoch.

Returns: The minimum event time.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 573 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval().

synchronized EventsModelParams org.sleuthkit.autopsy.timeline.EventsModel.getModelParams ( )

Gets the current model parameters.

Returns: The current model parameters.

Definition at line 337 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.DetailViewPane.DetailsUpdateTask.call(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.createReport(), org.sleuthkit.autopsy.timeline.EventsModel.getDescriptionLOD(), org.sleuthkit.autopsy.timeline.EventsModel.getEventFilterState(), org.sleuthkit.autopsy.timeline.EventsModel.getEventTypeZoom(), and org.sleuthkit.autopsy.timeline.EventsModel.getTimeRange().

SleuthkitCase org.sleuthkit.autopsy.timeline.EventsModel.getSleuthkitCase ( )

Gets the case database.

Returns: The case database.

Definition at line 267 of file EventsModel.java.

References org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().

Referenced by org.sleuthkit.autopsy.timeline.actions.AddManualEvent.addEvent(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailsViewModel.DetailsViewModel().

Interval org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval ( DateTimeZone timeZone ) throws TskCoreException

Gets the spanning interval for the events that fall within the time range and event filter model parameters, in terms of a given time zone.

Parameters

timeZone The time zone.

Returns: The spanning interval.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 534 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.getEventFilterState(), org.sleuthkit.autopsy.timeline.EventsModel.getTimeRange(), and org.sleuthkit.autopsy.timeline.EventsModel.modelParamsProperty().

Interval org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval ( ) throws TskCoreException

Gets the spanning interval for all of the events in the case database.

Returns: The spanning interval.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 546 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.getMaxEventTime(), and org.sleuthkit.autopsy.timeline.EventsModel.getMinEventTime().

Interval org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval ( Collection< Long > eventIDs ) throws TskCoreException

Gets the spanning interval for a collection of events.

Parameters

eventIDs The event IDs of the events.

Returns: The spanning interval.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 560 of file EventsModel.java.

synchronized Interval org.sleuthkit.autopsy.timeline.EventsModel.getTimeRange ( )

Gets the time range model parameter.

Returns: The time range model parameter.

Definition at line 346 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.getModelParams(), and org.sleuthkit.autopsy.timeline.zooming.EventsModelParams.getTimeRange().

synchronized boolean org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagAdded ( BlackBoardArtifactTagAddedEvent evt ) throws TskCoreException

Updates the events model for an artifact tag added event and publishes a tag added event via the model's event bus.

Parameters

evt	The event.

Returns: If a tags added event was published via the model's event bus.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 630 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches(), and org.sleuthkit.autopsy.timeline.EventsModel.postTagsAdded().

synchronized boolean org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagDeleted ( BlackBoardArtifactTagDeletedEvent evt ) throws TskCoreException

Updates the events model for an artifact tag deleted event and publishes a tag deleted event via the model's event bus.

Parameters

evt	The event.

Returns: If a tags deleted event was published via the model's event bus.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 683 of file EventsModel.java.

References org.sleuthkit.autopsy.casemodule.events.BlackBoardArtifactTagDeletedEvent.DeletedBlackboardArtifactTagInfo.getArtifactID(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches(), and org.sleuthkit.autopsy.timeline.EventsModel.postTagsDeleted().

synchronized boolean org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagAdded ( ContentTagAddedEvent evt ) throws TskCoreException

Updates the events model for a content tag added event and publishes a tag added event via the model's event bus.

Parameters

evt	The event.

Returns: If a tags added event was published via the model's event bus.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 609 of file EventsModel.java.

References org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches(), and org.sleuthkit.autopsy.timeline.EventsModel.postTagsAdded().

synchronized boolean org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagDeleted ( ContentTagDeletedEvent evt ) throws TskCoreException

Updates the events model for a content tag deleted event and publishes a tag deleted event via the model's event bus.

Parameters

evt	The event.

Returns: If a tags deleted event was published via the model's event bus.

Exceptions

TskCoreException If there is an error reading model data from the case database.

Definition at line 651 of file EventsModel.java.

References org.sleuthkit.autopsy.casemodule.events.ContentTagDeletedEvent.DeletedContentTagInfo.getContentID(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches(), and org.sleuthkit.autopsy.timeline.EventsModel.postTagsDeleted().

synchronized void org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches ( Collection< Long > updatedEventIDs ) throws TskCoreException

Invalidates all of the the model caches and publishes a caches invalidated event. Optionally, a collection of event IDs may be supplied, in which case only the corresponding entries in the event IDs cache are invalidated.

Parameters

updatedEventIDs Either null or a collection of the event IDs.

Exceptions

TskCoreException

Definition at line 795 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagAdded(), org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagDeleted(), org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagAdded(), org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagDeleted(), and org.sleuthkit.autopsy.timeline.EventsModel.updateEventsForHashSetHits().

synchronized ReadOnlyObjectProperty<EventsModelParams> org.sleuthkit.autopsy.timeline.EventsModel.modelParamsProperty ( )

Gets the model parameters property.

Returns: A read only, observable property for the current model parameters.

Definition at line 277 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval().

static DataSourceFilter org.sleuthkit.autopsy.timeline.EventsModel.newDataSourceFilter ( Map.Entry< Long, String > dataSourceEntry )

staticprivate

Makes a new data source filter from a given entry in the cache of data source object IDs to data source names.

Parameters

dataSourceEntry The cache entry.

Returns: A new DataSourceFilter.

Definition at line 133 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.getDefaultEventFilterState().

synchronized void org.sleuthkit.autopsy.timeline.EventsModel.populateDataSourcesCache ( ) throws TskCoreException

private

Populates the map of data source object IDs to data source names from the data source data in the case database.

Definition at line 211 of file EventsModel.java.

References org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.EventsModel().

void org.sleuthkit.autopsy.timeline.EventsModel.postRefreshRequest ( )

Posts a refresh requested event to all registered subscribers.

Definition at line 749 of file EventsModel.java.

boolean org.sleuthkit.autopsy.timeline.EventsModel.postTagsAdded ( Set< Long > updatedEventIDs )

private

Post a TagsAddedEvent to all registered subscribers, if the given set of updated event IDs is not empty.

Parameters

updatedEventIDs The set of event ids to be included in the TagsAddedEvent.

Returns: True if an event was posted.

Definition at line 702 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagAdded(), and org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagAdded().

boolean org.sleuthkit.autopsy.timeline.EventsModel.postTagsDeleted ( Set< Long > updatedEventIDs )

private

Post a TagsDeletedEvent to all registered subscribers, if the given set of updated event IDs is not empty.

Parameters

updatedEventIDs The set of event ids to be included in the TagsDeletedEvent.

Returns: True if an event was posted.

Definition at line 719 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagDeleted(), and org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagDeleted().

synchronized void org.sleuthkit.autopsy.timeline.EventsModel.registerForEvents ( Object subscriber )

Register the given object to receive events.

Parameters

subscriber The object to register. Must implement public methods annotated with Subscribe.

Definition at line 733 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.AbstractTimeLineView.AbstractTimeLineView(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailsViewModel.DetailsViewModel().

synchronized ReadOnlyObjectProperty<Interval> org.sleuthkit.autopsy.timeline.EventsModel.timeRangeProperty ( )

Gets a read only, observable property for the time range model parameter.

Returns: The time range model parameter property.

Definition at line 289 of file EventsModel.java.

References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), and org.sleuthkit.autopsy.timeline.EventsModel.getSpanningInterval().

synchronized void org.sleuthkit.autopsy.timeline.EventsModel.unRegisterForEvents ( Object subscriber )

Un-register the given object, so it no longer receives events.

Parameters

subscriber The object to un-register.

Definition at line 742 of file EventsModel.java.

synchronized Set<Long> org.sleuthkit.autopsy.timeline.EventsModel.updateEventsForHashSetHits ( Collection< BlackboardArtifact > hashSetHitArtifacts ) throws TskCoreException

Sets the hash set hits flag for the events associated with the source files for a collection of hash set hit artifacts.

Parameters

hashSetHitArtifacts The hash set hit artifacts.

Returns: The event IDs of the updated events.

Exceptions

TskCoreException If there is an error reading model data from or writing model data to the case database.

Definition at line 773 of file EventsModel.java.

References org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), and org.sleuthkit.autopsy.timeline.EventsModel.invalidateCaches().

Member Data Documentation

final TimelineManager org.sleuthkit.autopsy.timeline.EventsModel.caseDbEventManager

private

Definition at line 100 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.getEventManager().

final Case org.sleuthkit.autopsy.timeline.EventsModel.currentCase

private

Definition at line 99 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.EventsModel.EventsModel().

final ObservableMap<Long, String> org.sleuthkit.autopsy.timeline.EventsModel.datasourceIDsToNamesMap = FXCollections.observableHashMap()

private

Definition at line 119 of file EventsModel.java.

final EventBus org.sleuthkit.autopsy.timeline.EventsModel.eventbus = new EventBus("EventsModel_EventBus")

private

Definition at line 98 of file EventsModel.java.

final LoadingCache<EventsModelParams, Map<TimelineEventType, Long> > org.sleuthkit.autopsy.timeline.EventsModel.eventCountsCache

private

Definition at line 123 of file EventsModel.java.

final ReadOnlyObjectWrapper<TimelineEventType.HierarchyLevel> org.sleuthkit.autopsy.timeline.EventsModel.eventTypesHierarchyLevelProperty = new ReadOnlyObjectWrapper<>(TimelineEventType.HierarchyLevel.CATEGORY)

private

Definition at line 113 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.zooming.ZoomSettingsPane.initialize().

final ReadOnlyObjectWrapper<RootFilterState> org.sleuthkit.autopsy.timeline.EventsModel.filterStateProperty = new ReadOnlyObjectWrapper<>()

private

Definition at line 111 of file EventsModel.java.

final LoadingCache<Long, TimelineEvent> org.sleuthkit.autopsy.timeline.EventsModel.idsToEventsCache

private

Definition at line 122 of file EventsModel.java.

final Logger org.sleuthkit.autopsy.timeline.EventsModel.logger = Logger.getLogger(EventsModel.class.getName())

staticprivate

Definition at line 97 of file EventsModel.java.

final LoadingCache<Object, Long> org.sleuthkit.autopsy.timeline.EventsModel.maxEventTimeCache

private

Definition at line 120 of file EventsModel.java.

final LoadingCache<Object, Long> org.sleuthkit.autopsy.timeline.EventsModel.minEventTimeCache

private

Definition at line 121 of file EventsModel.java.

final ReadOnlyObjectWrapper<EventsModelParams> org.sleuthkit.autopsy.timeline.EventsModel.modelParamsProperty = new ReadOnlyObjectWrapper<>()

private

Definition at line 110 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.AbstractTimeLineView.AbstractTimeLineView(), org.sleuthkit.autopsy.timeline.actions.ZoomOut.ZoomOut(), and org.sleuthkit.autopsy.timeline.actions.ZoomToEvents.ZoomToEvents().

final ReadOnlyObjectWrapper<TimelineLevelOfDetail> org.sleuthkit.autopsy.timeline.EventsModel.timelineLODProperty = new ReadOnlyObjectWrapper<>(TimelineLevelOfDetail.LOW)

private

Definition at line 114 of file EventsModel.java.

final ReadOnlyObjectWrapper<Interval> org.sleuthkit.autopsy.timeline.EventsModel.timeRangeProperty = new ReadOnlyObjectWrapper<>()

private

Definition at line 112 of file EventsModel.java.

Referenced by org.sleuthkit.autopsy.timeline.zooming.ZoomSettingsPane.initialize(), and org.sleuthkit.autopsy.timeline.actions.ZoomOut.ZoomOut().

The documentation for this class was generated from the following file:

/home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/timeline/EventsModel.java

Classes

Public Member Functions

Private Member Functions

Static Private Member Functions

Private Attributes

Static Private Attributes

Detailed Description

Constructor & Destructor Documentation

Member Function Documentation

Member Data Documentation