Autopsy  4.19.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Private Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask Class Reference

Inherits Runnable.

Public Member Functions

void run ()

Private Member Functions

 BlackboardTagTask (CentralRepository db, PropertyChangeEvent evt)
void handleTagAdded (BlackBoardArtifactTagAddedEvent evt)
void handleTagChange (Content content, BlackboardArtifact bbArtifact)
void handleTagDeleted (BlackBoardArtifactTagDeletedEvent evt)
boolean isKnownFile (Content content)
void setArtifactKnownStatus (BlackboardArtifact bbArtifact, TskData.FileKnown knownStatus)

Private Attributes

final CentralRepository dbManager
final PropertyChangeEvent event

Detailed Description

Definition at line 333 of file

Constructor & Destructor Documentation

org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.BlackboardTagTask ( CentralRepository  db,
PropertyChangeEvent  evt 

Definition at line 338 of file

Member Function Documentation

void org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.handleTagAdded ( BlackBoardArtifactTagAddedEvent  evt)

Definition at line 394 of file

void org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.handleTagChange ( Content  content,
BlackboardArtifact  bbArtifact 

When a tag is added or deleted, check if there are other notable tags for the item. If there are, set known status as notable. If not set status as unknown.

contentThe content for the tag that was added or deleted.
bbArtifactThe artifact for the tag that was added or deleted.

Definition at line 413 of file

References, org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), and

void org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.handleTagDeleted ( BlackBoardArtifactTagDeletedEvent  evt)
boolean org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.isKnownFile ( Content  content)

Determines if the content is an abstract file and is a known file.

contentThe content to assess.
True if an abstract file and a known file.

Definition at line 447 of file

void ( )
void org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.setArtifactKnownStatus ( BlackboardArtifact  bbArtifact,
TskData.FileKnown  knownStatus 

Sets the known status of a blackboard artifact in the central repository.

bbArtifactThe blackboard artifact to set known status.
knownStatusThe new known status.

Definition at line 458 of file

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForCorrelation(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.setAttributeInstanceKnownStatus().

Member Data Documentation

final CentralRepository org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.dbManager

Definition at line 335 of file

final PropertyChangeEvent org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.event

Definition at line 336 of file

The documentation for this class was generated from the following file:

Copyright © 2012-2021 Basis Technology. Generated on: Fri Aug 6 2021
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.