Autopsy  4.19.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Protected Attributes | Private Attributes | List of all members
org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance Class Referenceabstract

Inherited by org.sleuthkit.autopsy.commonpropertiessearch.CaseDBCommonAttributeInstance, and org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstance.

Classes

enum  NODE_TYPE
 

Public Member Functions

Long getAbstractFileObjectId ()
 
abstract CorrelationAttributeInstance.Type getCorrelationAttributeInstanceType ()
 
String getDataSource ()
 

Protected Attributes

AbstractFile abstractFile
 

Private Attributes

final Long abstractFileObjectId
 
final String caseName
 
final String dataSource
 

Detailed Description

Represents an instance in either the CaseDB or CR that had a common match. Different implementations know how to get the instance details from either CaseDB or CR.

Defines leaf-type nodes used in the Common Files Search results tree. Leaf nodes, may describe common attributes which exist in the current case DB or in the Central Repo. When a reference to the AbstractFile is lacking (such as in the case that a common attribute is found in the Central Repo) not all features of the Content Viewer, and context menu can be supported. Thus, multiple types of leaf nodes are required to represent Common Attribute Instance nodes.

Definition at line 40 of file AbstractCommonAttributeInstance.java.

Member Function Documentation

Long org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.getAbstractFileObjectId ( )

ObjectId of the AbstractFile that is equivalent to the file from which this common attribute instance

Returns
the abstractFileObjectId

Definition at line 128 of file AbstractCommonAttributeInstance.java.

References org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.abstractFileObjectId.

abstract CorrelationAttributeInstance.Type org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.getCorrelationAttributeInstanceType ( )
abstract

Get the type of common attribute.

Returns
String org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.getDataSource ( )

Get string name of the data source where this common attribute appears.

Returns
data source name

Even though we could get this from the CR record or the AbstractFile, we want to avoid getting it from the AbstractFile because it would be an extra database roundtrip.

Definition at line 112 of file AbstractCommonAttributeInstance.java.

References org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.dataSource.

Referenced by org.sleuthkit.autopsy.commonpropertiessearch.CaseDBCommonAttributeInstance.generateNodes().

Member Data Documentation

AbstractFile org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.abstractFile
protected

Definition at line 48 of file AbstractCommonAttributeInstance.java.

final Long org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.abstractFileObjectId
private
final String org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.caseName
private

Definition at line 43 of file AbstractCommonAttributeInstance.java.

final String org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.dataSource
private

The documentation for this class was generated from the following file:

Copyright © 2012-2021 Basis Technology. Generated on: Fri Aug 6 2021
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.