Autopsy
4.19.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits TopComponent, org.sleuthkit.autopsy.corecomponentinterfaces.DataExplorer, and Provider.
Public Member Functions | |
void | addOnFinishedListener (PropertyChangeListener l) |
boolean | canClose () |
void | componentClosed () |
void | componentOpened () |
Action[] | getActions () |
DataResultTopComponent | getDirectoryListing () |
ExplorerManager | getExplorerManager () |
int | getPersistenceType () |
Node | getSelectedNode () |
boolean | getShowRejectedResults () |
TopComponent | getTopComponent () |
boolean | hasMenuOpenAction () |
void | openDirectoryListing () |
void | propertyChange (PropertyChangeEvent event) |
void | refreshContentTreeSafe () |
void | setDirectoryListingActive () |
void | setShowRejectedResults (boolean showRejectedResults) |
void | viewArtifact (final BlackboardArtifact art) |
void | viewArtifactContent (BlackboardArtifact art) |
Static Public Member Functions | |
static synchronized DirectoryTreeTopComponent | findInstance () |
static synchronized DirectoryTreeTopComponent | getDefault () |
Protected Member Functions | |
String | preferredID () |
Private Member Functions | |
DirectoryTreeTopComponent () | |
void | backButtonActionPerformed (java.awt.event.ActionEvent evt) |
void | forwardButtonActionPerformed (java.awt.event.ActionEvent evt) |
Node | getAccountNode (Children typesChildren, BlackboardArtifact art) |
Optional< Node > | getCategoryNode (Category category, BlackboardArtifact art) |
Optional< Node > | getCategoryNodeChild (Children children, Category category) |
Node | getCreditCardAccountNode (Children accountRootChildren, String ccNumberName) |
Node | getEmailNode (Children typesChildren, BlackboardArtifact art) |
Node | getHashsetNode (Children typesChildren, final BlackboardArtifact art) |
List< Node > | getHostNodesAndParents (Node node) |
Node | getInterestingItemNode (Children typesChildren, BlackboardArtifact art) |
Node | getKeywordHitNode (Children typesChildren, BlackboardArtifact art) |
Optional< BlackboardArtifact.Type > | getType (long artifactTypeId) |
void | initComponents () |
void | openViewPreferencesButtonActionPerformed (java.awt.event.ActionEvent evt) |
void | preExpandNodes (Children rootChildren) |
void | promptForDataSourceGrouping (int dataSourceCount) |
void | readPropertiesImpl (java.util.Properties p) |
void | rebuildTree () |
void | refreshTagsTree () |
void | resetHistory () |
Optional< Node > | searchForCategoryNode (Node node, long dataSourceId, Category category) |
void | setSelectedNode (final String[] previouslySelectedNodePath, final String rootNodeName) |
void | subscribeToChangeEvents () |
void | updateHistory (Node[] selectedNodes) |
Static Private Member Functions | |
static boolean | caseHasData (Case currentCase) |
Private Attributes | |
Accounts | accounts |
AutopsyTreeChildFactory | autopsyTreeChildFactory |
Children | autopsyTreeChildren |
javax.swing.JButton | backButton |
final LinkedList< String[]> | backList |
final DataResultTopComponent | dataResult = new DataResultTopComponent(Bundle.DirectoryTreeTopComponent_resultsView_title()) |
final transient ExplorerManager | em = new ExplorerManager() |
javax.swing.JButton | forwardButton |
final LinkedList< String[]> | forwardList |
javax.swing.JButton | openViewPreferencesButton |
boolean | showRejectedResults |
javax.swing.JScrollPane | treeView |
final ViewPreferencesPanel | viewPreferencesPanel = new ViewPreferencesPanel(true) |
javax.swing.JPopupMenu | viewPreferencesPopupMenu |
Static Private Attributes | |
static final long | DEFAULT_DATASOURCE_GROUPING_THRESHOLD = 5 |
static final String | GROUPING_THRESHOLD_NAME = "GroupDataSourceThreshold" |
static DirectoryTreeTopComponent | instance |
static final Logger | LOGGER = Logger.getLogger(DirectoryTreeTopComponent.class.getName()) |
static final Set< String > | NODES_TO_EXPAND |
static final String | PREFERRED_ID = "DirectoryTreeTopComponent" |
static final String | SETTINGS_FILE = "CasePreferences.properties" |
Top component which displays something.
Definition at line 109 of file DirectoryTreeTopComponent.java.
|
private |
the constructor
Definition at line 134 of file DirectoryTreeTopComponent.java.
void org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.addOnFinishedListener | ( | PropertyChangeListener | l | ) |
Definition at line 1574 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 385 of file DirectoryTreeTopComponent.java.
boolean org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose | ( | ) |
Definition at line 714 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows().
|
staticprivate |
Identify if the specified case has data.
currentCase | The case you are checking for data. |
Definition at line 1054 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.casemodule.Case.hasData.
void org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentClosed | ( | ) |
Called only when top component was closed so that now it is closed on all workspaces in the system. The intent is to provide subclasses information about TopComponent's life cycle across workspaces. Subclasses will usually perform cleaning tasks here.
Definition at line 678 of file DirectoryTreeTopComponent.java.
void org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened | ( | ) |
Called only when top component was closed on all workspaces before and now is opened for the first time on some workspace. The intent is to provide subclasses information about TopComponent's life cycle across all existing workspaces. Subclasses will usually perform initializing tasks here.
to override the right click action in the white blank space area on the directory tree window
Definition at line 526 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.coreutils.ModuleSettings.getConfigSetting(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getDataSources(), org.sleuthkit.autopsy.casemodule.CasePreferences.getGroupItemsInTreeByDataSource(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.coreutils.ModuleSettings.MAIN_SETTINGS, org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.open(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.coreutils.ModuleSettings.setConfigSetting(), and org.sleuthkit.autopsy.coreutils.ModuleSettings.settingExists().
|
static |
Obtain the DirectoryTreeTopComponent instance. Never call getDefault directly!
Definition at line 468 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.getDefault().
Referenced by org.sleuthkit.autopsy.directorytree.ViewContextAction.actionPerformed(), org.sleuthkit.autopsy.contentviewers.contextviewer.ContextSourcePanel.jSourceGoToResultButtonActionPerformed(), org.sleuthkit.autopsy.contentviewers.contextviewer.ContextUsagePanel.jUsageGoToResultButtonActionPerformed(), org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.openCoreWindows(), and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
|
private |
Definition at line 414 of file DirectoryTreeTopComponent.java.
|
private |
Returns the account artifact's parent node or null if cannot be found.
typesChildren | The children object of the same category as the account. |
art | The artifact. |
Definition at line 1484 of file DirectoryTreeTopComponent.java.
Action [] org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.getActions | ( | ) |
Right click action for this top component window
Definition at line 744 of file DirectoryTreeTopComponent.java.
|
private |
Finds the category node (i.e. Data Artifacts / Analysis Results) for the specific artifact and category.
category | The category of the artifact. |
art | The artifact to find the relevant Results Node. |
Definition at line 1199 of file DirectoryTreeTopComponent.java.
|
private |
Returns the node matching the given category that is an immediate child of the provided Children object or empty if no immediate child matches the given category.
children | The children to search. |
category | The category to find. |
Definition at line 1137 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.datamodel.DataArtifacts.getName(), and org.sleuthkit.autopsy.datamodel.AnalysisResults.getName().
|
private |
Returns the credit card artifact's parent node or null if cannot be found.
accountRootChildren | |
ccNumberName |
Definition at line 1526 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.datamodel.CreditCards.getBINInfo().
|
static |
Gets default instance. Do not use directly: reserved for *.settings files only, i.e. deserialization routines; otherwise you could get a non-deserialized instance. To obtain the singleton instance, use findInstance.
Definition at line 455 of file DirectoryTreeTopComponent.java.
Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.findInstance(), org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.hideRejectedResultsCheckboxActionPerformed(), org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.load(), org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.openCoreWindows(), org.sleuthkit.autopsy.casemodule.CasePreferences.setGroupItemsInTreeByDataSource(), and org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.store().
DataResultTopComponent org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.getDirectoryListing | ( | ) |
Definition at line 270 of file DirectoryTreeTopComponent.java.
|
private |
Returns the email artifact's parent node or null if cannot be found.
typesChildren | The children object of the same category as email. |
art | The artifact. |
Definition at line 1450 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.datamodel.EmailExtracted.parsePath().
ExplorerManager org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.getExplorerManager | ( | ) |
Gets the explorer manager.
Definition at line 734 of file DirectoryTreeTopComponent.java.
Referenced by org.sleuthkit.autopsy.directorytree.ViewContextAction.actionPerformed().
|
private |
Returns the hashset hit artifact's parent node or null if cannot be found.
typesChildren | The children object of the same category as hashset hits. |
art | The artifact. |
Definition at line 1316 of file DirectoryTreeTopComponent.java.
|
private |
Returns all nodes including provided node that are parents of or are hosts.
node | The parent or possible host node. |
Definition at line 210 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.datamodel.PersonNode.getUnknownPersonId().
|
private |
Returns the interesting item artifact's parent node or null if cannot be found.
typesChildren | The children object of the same category as interesting item. |
art | The artifact. |
Definition at line 1409 of file DirectoryTreeTopComponent.java.
|
private |
Returns the keyword hit artifact's parent node or null if cannot be found.
typesChildren | The children object of the same category as keyword hits. |
art | The artifact. |
Definition at line 1346 of file DirectoryTreeTopComponent.java.
int org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.getPersistenceType | ( | ) |
Overwrite when you want to change default persistence type. Default persistence type is PERSISTENCE_ALWAYS
Definition at line 492 of file DirectoryTreeTopComponent.java.
Node org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.getSelectedNode | ( | ) |
Gets the original selected node on the explorer manager
Definition at line 753 of file DirectoryTreeTopComponent.java.
Referenced by org.sleuthkit.autopsy.directorytree.ViewContextAction.setNodeSelection().
boolean org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.getShowRejectedResults | ( | ) |
Show rejected results?
Definition at line 279 of file DirectoryTreeTopComponent.java.
Referenced by org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.load().
TopComponent org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.getTopComponent | ( | ) |
Gets the TopComponent for rendering this DateExplorer
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataExplorer.
Definition at line 1118 of file DirectoryTreeTopComponent.java.
Referenced by org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.openCoreWindows().
|
private |
Attempts to retrieve the artifact type for the given artifact type id.
artifactTypeId | The artifact type id. |
Definition at line 1230 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().
boolean org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.hasMenuOpenAction | ( | ) |
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataExplorer.
Definition at line 1123 of file DirectoryTreeTopComponent.java.
|
private |
This method is called from within the constructor to initialize the form. WARNING: Do NOT modify this code. The content of this method is always regenerated by the Form Editor.
Definition at line 302 of file DirectoryTreeTopComponent.java.
void org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.openDirectoryListing | ( | ) |
Definition at line 266 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.open().
|
private |
Definition at line 434 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.load().
|
private |
Pre-expands the Views node, the Results node, and all of the children of the Results node.
rootChildren | Children node containing Results node and Views node. |
Definition at line 180 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.casemodule.CasePreferences.getGroupItemsInTreeByDataSource().
|
protected |
Returns the unique ID of this TopComponent
Definition at line 709 of file DirectoryTreeTopComponent.java.
|
private |
Ask the user if they want to group by data source when opening a large case.
dataSourceCount | The number of data sources in the case. |
Definition at line 502 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.casemodule.CasePreferences.getGroupItemsInTreeByDataSource(), and org.sleuthkit.autopsy.casemodule.CasePreferences.setGroupItemsInTreeByDataSource().
void org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange | ( | PropertyChangeEvent | event | ) |
The "listener" that monitors changes made in the Case class. This serves the purpose of keeping the UI in sync with the data as it changes.
event | The property change event. |
Checking for a current case is a stop gap measure until a different way of handling the closing of cases is worked out. Currently, remote events may be received for a case that is already closed.
Case is closed, do nothing.
Definition at line 770 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, org.sleuthkit.autopsy.casemodule.Case.Events.DATA_SOURCE_ADDED, org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.openCoreWindows(), and org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI.
|
private |
Definition at line 698 of file DirectoryTreeTopComponent.java.
|
private |
Rebuilds the autopsy tree.
Does nothing if there is no open case.
Definition at line 1008 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.refreshChildren().
void org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.refreshContentTreeSafe | ( | ) |
Refresh the content node part of the dir tree safely in the EDT thread
Definition at line 972 of file DirectoryTreeTopComponent.java.
Referenced by org.sleuthkit.autopsy.casemodule.CasePreferences.setGroupItemsInTreeByDataSource().
|
private |
Refresh only the tags subtree(s) of the tree view.
Definition at line 979 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.casemodule.CasePreferences.getGroupItemsInTreeByDataSource(), and org.sleuthkit.autopsy.datamodel.Tags.getTagsDisplayName().
|
private |
Resets the back and forward list, and also disable the back and forward buttons.
Definition at line 952 of file DirectoryTreeTopComponent.java.
|
private |
Does depth first search of node while nodes are Host, Person, or DataSourcesByType looking for the appropriate category Node (i.e. the Data Artifacts or Analysis Results nodes).
node | The node. |
dataSourceId | The data source id. |
category | The artifact type category. |
Definition at line 1160 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.datamodel.PersonNode.getUnknownPersonId().
void org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.setDirectoryListingActive | ( | ) |
Definition at line 262 of file DirectoryTreeTopComponent.java.
Referenced by org.sleuthkit.autopsy.directorytree.ViewContextAction.setNodeSelection().
|
private |
Set the selected node using a path to a previously selected node.
previouslySelectedNodePath | Path to a previously selected node. |
rootNodeName | Name of the root node to match, may be null. |
Definition at line 1072 of file DirectoryTreeTopComponent.java.
void org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.setShowRejectedResults | ( | boolean | showRejectedResults | ) |
Setter to determine if rejected results should be shown or not.
showRejectedResults | True if showing rejected results; otherwise false. |
Definition at line 289 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.datamodel.accounts.Accounts.setShowRejected().
Referenced by org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.hideRejectedResultsCheckboxActionPerformed(), and org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.store().
|
private |
Make this TopComponent a listener to various change events.
Definition at line 231 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.core.UserPreferences.addChangeListener(), org.sleuthkit.autopsy.casemodule.Case.addEventTypeSubscriber(), org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, org.sleuthkit.autopsy.casemodule.Case.Events.DATA_SOURCE_ADDED, org.sleuthkit.autopsy.core.UserPreferences.DISPLAY_TIMES_IN_LOCAL_TIME, org.sleuthkit.autopsy.core.UserPreferences.DISPLAY_TRANSLATED_NAMES, org.sleuthkit.autopsy.core.UserPreferences.HIDE_KNOWN_FILES_IN_DATA_SRCS_TREE, org.sleuthkit.autopsy.core.UserPreferences.HIDE_KNOWN_FILES_IN_VIEWS_TREE, org.sleuthkit.autopsy.core.UserPreferences.HIDE_SCO_COLUMNS, org.sleuthkit.autopsy.core.UserPreferences.HIDE_SLACK_FILES_IN_DATA_SRCS_TREE, org.sleuthkit.autopsy.core.UserPreferences.HIDE_SLACK_FILES_IN_VIEWS_TREE, org.sleuthkit.autopsy.core.UserPreferences.KEEP_PREFERRED_VIEWER, org.sleuthkit.autopsy.core.UserPreferences.SHOW_ONLY_CURRENT_USER_TAGS, org.sleuthkit.autopsy.core.UserPreferences.TEXT_TRANSLATOR_NAME, and org.sleuthkit.autopsy.core.UserPreferences.TIME_ZONE_FOR_DISPLAYS.
|
private |
Definition at line 913 of file DirectoryTreeTopComponent.java.
void org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.viewArtifact | ( | final BlackboardArtifact | art | ) |
Navigates to artifact and shows in view.
NOTE: This code will likely need updating in the event that the structure of the nodes is changed (i.e. adding parent levels). Places to look when changing node structure include:
DirectoryTreeTopComponent.viewArtifact, ViewContextAction
art | The artifact. |
Definition at line 1252 of file DirectoryTreeTopComponent.java.
References org.sleuthkit.autopsy.datamodel.DisplayableItemNode.setChildNodeSelectionInfo().
Referenced by org.sleuthkit.autopsy.contentviewers.contextviewer.ContextSourcePanel.jSourceGoToResultButtonActionPerformed(), and org.sleuthkit.autopsy.contentviewers.contextviewer.ContextUsagePanel.jUsageGoToResultButtonActionPerformed().
void org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.viewArtifactContent | ( | BlackboardArtifact | art | ) |
Definition at line 1568 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 121 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 119 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 120 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 440 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 115 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 113 of file DirectoryTreeTopComponent.java.
|
staticprivate |
Definition at line 123 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 111 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 441 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 116 of file DirectoryTreeTopComponent.java.
|
staticprivate |
Definition at line 124 of file DirectoryTreeTopComponent.java.
|
staticprivate |
Definition at line 112 of file DirectoryTreeTopComponent.java.
|
staticprivate |
Definition at line 118 of file DirectoryTreeTopComponent.java.
|
staticprivate |
Definition at line 128 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 442 of file DirectoryTreeTopComponent.java.
|
staticprivate |
Definition at line 117 of file DirectoryTreeTopComponent.java.
|
staticprivate |
Definition at line 125 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 122 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 443 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 114 of file DirectoryTreeTopComponent.java.
|
private |
Definition at line 444 of file DirectoryTreeTopComponent.java.
Copyright © 2012-2021 Basis Technology. Generated on: Fri Aug 6 2021
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.