Autopsy
4.19.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.
Classes | |
class | RecentAttachmentDetails |
class | RecentDownloadDetails |
class | RecentFileDetails |
Public Member Functions | |
RecentFilesSummary () | |
RecentFilesSummary (SleuthkitCaseProvider provider) | |
Set< Integer > | getArtifactTypeIdsForRefresh () |
default Set< Case.Events > | getCaseEventUpdates () |
default Set< IngestJobEvent > | getIngestJobEventUpdates () |
List< RecentAttachmentDetails > | getRecentAttachments (DataSource dataSource, int maxCount) throws SleuthkitCaseProviderException, TskCoreException |
List< RecentDownloadDetails > | getRecentDownloads (DataSource dataSource, int maxCount) throws TskCoreException, SleuthkitCaseProviderException |
List< RecentFileDetails > | getRecentlyOpenedDocuments (DataSource dataSource, int maxCount) throws SleuthkitCaseProviderException, TskCoreException |
default boolean | isRefreshRequired (ModuleDataEvent evt) |
default boolean | isRefreshRequired (ModuleContentEvent evt) |
default boolean | isRefreshRequired (IngestManager.IngestJobEvent evt) |
default boolean | isRefreshRequired (AbstractFile evt) |
boolean | isRefreshRequired (IngestJobEvent evt) |
default boolean | isRefreshRequiredForCaseEvent (PropertyChangeEvent evt) |
Public Attributes | |
Set< IngestJobEvent > | INGEST_JOB_EVENTS |
Private Member Functions | |
RecentAttachmentDetails | getRecentAttachment (BlackboardArtifact artifact, SleuthkitCase skCase) throws TskCoreException |
RecentDownloadDetails | getRecentDownload (BlackboardArtifact artifact) |
RecentFileDetails | getRecentlyOpenedDocument (BlackboardArtifact artifact) |
boolean | isMessageArtifact (BlackboardArtifact nodeArtifact) |
void | throwOnNonPositiveCount (int count) |
Private Attributes | |
final SleuthkitCaseProvider | provider |
Static Private Attributes | |
static final Set< Integer > | ARTIFACT_UPDATE_TYPE_IDS |
static final BlackboardAttribute.Type | ASSOCATED_ATT = new BlackboardAttribute.Type(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_ASSOCIATED_ARTIFACT) |
static final BlackboardArtifact.Type | ASSOCATED_OBJ_ART = new BlackboardArtifact.Type(ARTIFACT_TYPE.TSK_ASSOCIATED_OBJECT) |
static final BlackboardAttribute.Type | DATETIME_ACCESSED_ATT = new BlackboardAttribute.Type(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED) |
static final DateFormat | DATETIME_FORMAT = new SimpleDateFormat("yyyy/MM/dd HH:mm:ss", Locale.getDefault()) |
static final BlackboardAttribute.Type | DOMAIN_ATT = new BlackboardAttribute.Type(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN) |
static final BlackboardAttribute.Type | EMAIL_FROM_ATT = new BlackboardAttribute.Type(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_EMAIL_FROM) |
static final BlackboardAttribute.Type | MSG_DATEIME_SENT_ATT = new BlackboardAttribute.Type(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_SENT) |
static final BlackboardAttribute.Type | PATH_ATT = new BlackboardAttribute.Type(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PATH) |
Helper class for getting data for the Recent Files Data Summary tab.
Definition at line 49 of file RecentFilesSummary.java.
org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.RecentFilesSummary | ( | ) |
Default constructor.
Definition at line 74 of file RecentFilesSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.DEFAULT.
org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.RecentFilesSummary | ( | SleuthkitCaseProvider | provider | ) |
Construct object with given SleuthkitCaseProvider
provider | SleuthkitCaseProvider provider, cannot be null. |
Definition at line 83 of file RecentFilesSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.provider.
Set<Integer> org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getArtifactTypeIdsForRefresh | ( | ) |
Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.
Definition at line 92 of file RecentFilesSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.ARTIFACT_UPDATE_TYPE_IDS.
|
inherited |
Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.
Definition at line 57 of file DefaultUpdateGovernor.java.
|
inherited |
Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.
Definition at line 52 of file DefaultArtifactUpdateGovernor.java.
References org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.INGEST_JOB_EVENTS.
|
private |
Creates a RecentAttachmentDetails object from the associated object artifact or null if no RecentAttachmentDetails object can be derived.
artifact | The associated object artifact. |
skCase | The current case. |
TskCoreException |
Definition at line 271 of file RecentFilesSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.ASSOCATED_ATT, org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.EMAIL_FROM_ATT, org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.isMessageArtifact(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.MSG_DATEIME_SENT_ATT.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentAttachments().
List<RecentAttachmentDetails> org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentAttachments | ( | DataSource | dataSource, |
int | maxCount | ||
) | throws SleuthkitCaseProviderException, TskCoreException |
Returns a list of the most recent message attachments.
dataSource | Data source to query. |
maxCount | Maximum number of results to return, passing 0 will return all results. |
SleuthkitCaseProviderException | |
TskCoreException |
Definition at line 238 of file RecentFilesSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.ASSOCATED_OBJ_ART, org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.get(), org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentAttachment(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.throwOnNonPositiveCount().
Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.RecentFilesPanel.RecentFilesPanel().
|
private |
Returns a RecentDownloadDetails object as derived from the recent download artifact or null if no appropriate object can be made.
artifact | The artifact. |
Definition at line 173 of file RecentFilesSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.DATETIME_ACCESSED_ATT, org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.DOMAIN_ATT, and org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.PATH_ATT.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentDownloads().
List<RecentDownloadDetails> org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentDownloads | ( | DataSource | dataSource, |
int | maxCount | ||
) | throws TskCoreException, SleuthkitCaseProviderException |
Return a list of the most recent downloads based on the value of the the artifact TSK_DATETIME_ACCESSED attribute.
dataSource | Data source to query. |
maxCount | Maximum number of results to return, passing 0 will return all results. |
TskCoreException | |
SleuthkitCaseProviderException |
Definition at line 210 of file RecentFilesSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.get(), org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentDownload(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.throwOnNonPositiveCount().
Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.RecentFilesPanel.RecentFilesPanel().
|
private |
Returns a RecentFileDetails object as derived from the recent document artifact or null if no appropriate object can be made.
artifact | The artifact. |
Definition at line 125 of file RecentFilesSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.DATETIME_ACCESSED_ATT, and org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.PATH_ATT.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentlyOpenedDocuments().
List<RecentFileDetails> org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentlyOpenedDocuments | ( | DataSource | dataSource, |
int | maxCount | ||
) | throws SleuthkitCaseProviderException, TskCoreException |
Return a list of the most recently opened documents based on the TSK_RECENT_OBJECT artifact.
dataSource | The data source to query. |
maxCount | The maximum number of results to return, pass 0 to get a list of all results. |
SleuthkitCaseProviderException | |
TskCoreException |
Definition at line 150 of file RecentFilesSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.get(), org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentlyOpenedDocument(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.throwOnNonPositiveCount().
Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.RecentFilesPanel.RecentFilesPanel().
|
private |
Is the given artifact a message.
nodeArtifact | An artifact that might be a message. Must not be null. |
Definition at line 312 of file RecentFilesSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentAttachment().
|
inherited |
Given a module data event, whether or not an update should occur.
evt | The ModuleDataEvent that is occurring. |
Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.
Definition at line 38 of file DefaultArtifactUpdateGovernor.java.
References org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getArtifactTypeIdsForRefresh(), and org.sleuthkit.autopsy.ingest.ModuleDataEvent.getBlackboardArtifactType().
|
inherited |
Given a module content event, whether or not an update should occur.
evt | The ModuleContentEvent. |
Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.
Implemented in org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.MimeTypeSummary, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TypesSummary.
Definition at line 42 of file DefaultUpdateGovernor.java.
|
inherited |
Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.
Definition at line 47 of file DefaultArtifactUpdateGovernor.java.
|
inherited |
Whether or not a newly added AbstractFile should trigger an update.
evt | The AbstractFile. |
Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.
Implemented in org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.MimeTypeSummary, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TypesSummary.
Definition at line 67 of file DefaultUpdateGovernor.java.
|
inherited |
Given an ingest job event, determines whether or not an update should occur.
evt | The event. |
Implemented in org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.MimeTypeSummary, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TypesSummary.
|
inherited |
Given a case event, whether or not an update should occur.
evt | The event. |
Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.
Definition at line 37 of file DefaultUpdateGovernor.java.
|
private |
Throws an IllegalArgumentException if count is less than 1.
count | The count. |
Definition at line 190 of file RecentFilesSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentAttachments(), org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentDownloads(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentlyOpenedDocuments().
|
staticprivate |
Definition at line 61 of file RecentFilesSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getArtifactTypeIdsForRefresh().
|
staticprivate |
Definition at line 54 of file RecentFilesSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentAttachment().
|
staticprivate |
Definition at line 57 of file RecentFilesSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentAttachments().
|
staticprivate |
|
staticprivate |
Definition at line 59 of file RecentFilesSummary.java.
|
staticprivate |
Definition at line 52 of file RecentFilesSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentDownload().
|
staticprivate |
Definition at line 55 of file RecentFilesSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentAttachment().
|
inherited |
Definition at line 34 of file DefaultArtifactUpdateGovernor.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getIngestJobEventUpdates().
|
staticprivate |
Definition at line 56 of file RecentFilesSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.getRecentAttachment().
|
staticprivate |
|
private |
Definition at line 69 of file RecentFilesSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.RecentFilesSummary.RecentFilesSummary().
Copyright © 2012-2021 Basis Technology. Generated on: Fri Aug 6 2021
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.