Autopsy  4.18.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Public Attributes | Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary Class Reference

Inherits org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.

Public Member Functions

 ContainerSummary ()
 
 ContainerSummary (SleuthkitCaseProvider provider)
 
Set< Integer > getArtifactTypeIdsForRefresh ()
 
default Set< Case.Events > getCaseEventUpdates ()
 
String getDataSourceType (DataSource dataSource) throws SleuthkitCaseProvider.SleuthkitCaseProviderException, TskCoreException, SQLException
 
default Set< IngestJobEvent > getIngestJobEventUpdates ()
 
String getOperatingSystems (DataSource dataSource) throws SleuthkitCaseProvider.SleuthkitCaseProviderException, TskCoreException, SQLException
 
Long getSizeOfUnallocatedFiles (DataSource currentDataSource) throws SleuthkitCaseProvider.SleuthkitCaseProviderException, TskCoreException, SQLException
 
default boolean isRefreshRequired (ModuleDataEvent evt)
 
default boolean isRefreshRequired (IngestManager.IngestJobEvent evt)
 
boolean isRefreshRequired (ModuleContentEvent evt)
 
boolean isRefreshRequired (AbstractFile file)
 
boolean isRefreshRequired (IngestJobEvent evt)
 
default boolean isRefreshRequiredForCaseEvent (PropertyChangeEvent evt)
 

Public Attributes

Set< IngestJobEvent > INGEST_JOB_EVENTS
 

Private Member Functions

String getConcattedAttrValue (long dataSourceId, int artifactTypeId, int attributeTypeId) throws SleuthkitCaseProvider.SleuthkitCaseProviderException, TskCoreException, SQLException
 
String getConcattedStringsResult (String query, String valueParam, String separator) throws SleuthkitCaseProvider.SleuthkitCaseProviderException, TskCoreException, SQLException
 

Private Attributes

final SleuthkitCaseProvider provider
 

Static Private Attributes

static final Set< Integer > ARTIFACT_UPDATE_TYPE_IDS
 

Detailed Description

Provides methods to query for data source overview details.

Definition at line 38 of file ContainerSummary.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.ContainerSummary ( )
org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.ContainerSummary ( SleuthkitCaseProvider  provider)

Main constructor.

Parameters
providerThe means of obtaining a sleuthkit case.

Definition at line 59 of file ContainerSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.provider.

Member Function Documentation

Set<Integer> org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getArtifactTypeIdsForRefresh ( )
default Set<Case.Events> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.getCaseEventUpdates ( )
inherited
Returns
The set of Case Events for which data should be updated.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Definition at line 57 of file DefaultUpdateGovernor.java.

String org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getConcattedAttrValue ( long  dataSourceId,
int  artifactTypeId,
int  attributeTypeId 
) throws SleuthkitCaseProvider.SleuthkitCaseProviderException, TskCoreException, SQLException
private

Generates a concatenated string value based on the text value of a particular attribute in a particular artifact for a specific data source.

Parameters
dataSourceIdThe data source id.
artifactTypeIdThe artifact type id.
attributeTypeIdThe attribute type id.
Returns
The concatenated value or null if the query could not be executed.
Exceptions
SleuthkitCaseProviderException
TskCoreException
SQLException

Definition at line 220 of file ContainerSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getConcattedStringsResult().

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getDataSourceType(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getOperatingSystems().

String org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getConcattedStringsResult ( String  query,
String  valueParam,
String  separator 
) throws SleuthkitCaseProvider.SleuthkitCaseProviderException, TskCoreException, SQLException
private

Generates a string which is a concatenation of the value received from the result set.

Parameters
queryThe query.
valueParamThe parameter for the value in the result set.
separatorThe string separator used in concatenation.
Returns
The concatenated string or null if the query could not be executed.
Exceptions
SleuthkitCaseProviderException
TskCoreException
SQLException

Definition at line 184 of file ContainerSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.get().

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getConcattedAttrValue().

String org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getDataSourceType ( DataSource  dataSource) throws SleuthkitCaseProvider.SleuthkitCaseProviderException, TskCoreException, SQLException

Retrieves the concatenation of data source usage for a particular data source.

Parameters
dataSourceThe data source.
Returns
The concatenated value or null if the query could not be executed.
Exceptions
SleuthkitCaseProviderException
TskCoreException
SQLException

Definition at line 157 of file ContainerSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getConcattedAttrValue().

default Set<IngestJobEvent> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getIngestJobEventUpdates ( )
inherited
String org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getOperatingSystems ( DataSource  dataSource) throws SleuthkitCaseProvider.SleuthkitCaseProviderException, TskCoreException, SQLException

Retrieves the concatenation of operating system attributes for a particular data source.

Parameters
dataSourceThe data source.
Returns
The concatenated value or null if the query could not be executed.
Exceptions
SleuthkitCaseProviderException
TskCoreException
SQLException

Definition at line 132 of file ContainerSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getConcattedAttrValue().

Long org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getSizeOfUnallocatedFiles ( DataSource  currentDataSource) throws SleuthkitCaseProvider.SleuthkitCaseProviderException, TskCoreException, SQLException

Gets the size of unallocated files in a particular datasource.

Parameters
currentDataSourceThe data source.
Returns
The size or null if the query could not be executed.
Exceptions
SleuthkitCaseProviderException
TskCoreException
SQLException

Definition at line 89 of file ContainerSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.get().

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.isRefreshRequired ( ModuleDataEvent  evt)
inherited

Given a module data event, whether or not an update should occur.

Parameters
evtThe ModuleDataEvent that is occurring.
Returns
Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.

Definition at line 38 of file DefaultArtifactUpdateGovernor.java.

References org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getArtifactTypeIdsForRefresh(), and org.sleuthkit.autopsy.ingest.ModuleDataEvent.getBlackboardArtifactType().

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.isRefreshRequired ( IngestManager.IngestJobEvent  evt)
inherited
boolean org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.isRefreshRequired ( ModuleContentEvent  evt)

Given a module content event, whether or not an update should occur.

Parameters
evtThe ModuleContentEvent.
Returns
Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.

Definition at line 64 of file ContainerSummary.java.

boolean org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.isRefreshRequired ( AbstractFile  evt)

Whether or not a newly added AbstractFile should trigger an update.

Parameters
evtThe AbstractFile.
Returns
True if an update should occur.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.

Definition at line 69 of file ContainerSummary.java.

boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.isRefreshRequired ( IngestJobEvent  evt)
inherited

Given an ingest job event, determines whether or not an update should occur.

Parameters
evtThe event.
Returns
Whether or not this event should trigger an update.

Implemented in org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.MimeTypeSummary, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TypesSummary.

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.isRefreshRequiredForCaseEvent ( PropertyChangeEvent  evt)
inherited

Given a case event, whether or not an update should occur.

Parameters
evtThe event.
Returns
Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Definition at line 37 of file DefaultUpdateGovernor.java.

Member Data Documentation

final Set<Integer> org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.ARTIFACT_UPDATE_TYPE_IDS
staticprivate
Initial value:
= new HashSet<>(Arrays.asList(
BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_INFO.getTypeID(),
BlackboardArtifact.ARTIFACT_TYPE.TSK_DATA_SOURCE_USAGE.getTypeID()
))

Definition at line 40 of file ContainerSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.getArtifactTypeIdsForRefresh().

Set<IngestJobEvent> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.INGEST_JOB_EVENTS
inherited
Initial value:
= new HashSet<>(
Arrays.asList(IngestJobEvent.COMPLETED, IngestJobEvent.CANCELLED))

Definition at line 34 of file DefaultArtifactUpdateGovernor.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getIngestJobEventUpdates().

final SleuthkitCaseProvider org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary.provider
private

The documentation for this class was generated from the following file:

Copyright © 2012-2021 Basis Technology. Generated on: Thu Jul 8 2021
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.