Autopsy
4.19.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.ingest.IngestModuleFactory.
Inherited by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoIngestModuleFactory, org.sleuthkit.autopsy.keywordsearch.KeywordSearchModuleFactory, org.sleuthkit.autopsy.modules.dataSourceIntegrity.DataSourceIntegrityModuleFactory, org.sleuthkit.autopsy.modules.drones.DroneIngestModuleFactory, org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorModuleFactory, org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchDetectorModuleFactory, org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdModuleFactory, org.sleuthkit.autopsy.modules.hashdatabase.HashLookupModuleFactory, org.sleuthkit.autopsy.modules.interestingitems.InterestingItemsIngestModuleFactory, org.sleuthkit.autopsy.modules.leappanalyzers.ALeappAnalyzerModuleFactory, org.sleuthkit.autopsy.modules.leappanalyzers.ILeappAnalyzerModuleFactory, org.sleuthkit.autopsy.modules.photoreccarver.PhotoRecCarverIngestModuleFactory, org.sleuthkit.autopsy.modules.pictureanalyzer.PictureAnalyzerIngestModuleFactory, org.sleuthkit.autopsy.modules.vmextractor.VMExtractorIngestModuleFactory, org.sleuthkit.autopsy.modules.yara.YaraIngestModuleFactory, org.sleuthkit.autopsy.recentactivity.RecentActivityExtracterModuleFactory, org.sleuthkit.autopsy.test.CustomArtifactsCreatorIngestModuleFactory, org.sleuthkit.autopsy.test.InterestingArtifactCreatorIngestModuleFactory, and org.sleuthkit.autopsy.thunderbirdparser.EmailParserModuleFactory.
Public Member Functions | |
default DataArtifactIngestModule | createDataArtifactIngestModule (IngestModuleIngestJobSettings settings) |
DataSourceIngestModule | createDataSourceIngestModule (IngestModuleIngestJobSettings ingestOptions) |
FileIngestModule | createFileIngestModule (IngestModuleIngestJobSettings ingestOptions) |
IngestModuleIngestJobSettings | getDefaultIngestJobSettings () |
IngestModuleGlobalSettingsPanel | getGlobalSettingsPanel () |
IngestModuleIngestJobSettingsPanel | getIngestJobSettingsPanel (IngestModuleIngestJobSettings settings) |
abstract String | getModuleDescription () |
abstract String | getModuleDisplayName () |
abstract String | getModuleVersionNumber () |
boolean | hasGlobalSettingsPanel () |
boolean | hasIngestJobSettingsPanel () |
default boolean | isDataArtifactIngestModuleFactory () |
boolean | isDataSourceIngestModuleFactory () |
boolean | isFileIngestModuleFactory () |
An adapter that provides no-op implementations of various IngestModuleFactory methods.
NOTE: As of Java 8, interfaces can have default methods. IngestModuleFactory now provides default no-op versions of all of its optional methods. This class is no longer needed and can be DEPRECATED when convenient.
Definition at line 29 of file IngestModuleFactoryAdapter.java.
|
inherited |
Creates a data artifact ingest module instance.
Autopsy will generally use the factory to several instances of each type of module for each ingest job it performs. Completing an ingest job entails processing a single data source (e.g., a disk image) and all of the files from the data source, including files extracted from archives and any unallocated space (made to look like a series of files). The data source is passed through one or more pipelines of data source ingest modules. The files are passed through one or more pipelines of file ingest modules.
The ingest framework may use multiple threads to complete an ingest job, but it is guaranteed that there will be no more than one module instance per thread. However, if the module instances must share resources, the modules are responsible for synchronizing access to the shared resources and doing reference counting as required to release those resources correctly. Also, more than one ingest job may be in progress at any given time. This must also be taken into consideration when sharing resources between module instances. modules.
settings | The settings for the ingest job. |
Implemented in org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoIngestModuleFactory.
Definition at line 270 of file IngestModuleFactory.java.
Referenced by org.sleuthkit.autopsy.ingest.IngestModuleTemplate.createDataArtifactIngestModule().
DataSourceIngestModule org.sleuthkit.autopsy.ingest.IngestModuleFactoryAdapter.createDataSourceIngestModule | ( | IngestModuleIngestJobSettings | ingestOptions | ) |
Creates a data source ingest module instance.
Autopsy will generally use the factory to several instances of each type of module for each ingest job it performs. Completing an ingest job entails processing a single data source (e.g., a disk image) and all of the files from the data source, including files extracted from archives and any unallocated space (made to look like a series of files). The data source is passed through one or more pipelines of data source ingest modules. The files are passed through one or more pipelines of file ingest modules.
The ingest framework may use multiple threads to complete an ingest job, but it is guaranteed that there will be no more than one module instance per thread. However, if the module instances must share resources, the modules are responsible for synchronizing access to the shared resources and doing reference counting as required to release those resources correctly. Also, more than one ingest job may be in progress at any given time. This must also be taken into consideration when sharing resources between module instances. modules.
ingestOptions | The settings for the ingest job. |
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
Definition at line 71 of file IngestModuleFactoryAdapter.java.
FileIngestModule org.sleuthkit.autopsy.ingest.IngestModuleFactoryAdapter.createFileIngestModule | ( | IngestModuleIngestJobSettings | ingestOptions | ) |
Creates a file ingest module instance.
Autopsy will generally use the factory to several instances of each type of module for each ingest job it performs. Completing an ingest job entails processing a single data source (e.g., a disk image) and all of the files from the data source, including files extracted from archives and any unallocated space (made to look like a series of files). The data source is passed through one or more pipelines of data source ingest modules. The files are passed through one or more pipelines of file ingest modules.
The ingest framework may use multiple threads to complete an ingest job, but it is guaranteed that there will be no more than one module instance per thread. However, if the module instances must share resources, the modules are responsible for synchronizing access to the shared resources and doing reference counting as required to release those resources correctly. Also, more than one ingest job may be in progress at any given time. This must also be taken into consideration when sharing resources between module instances. modules.
settings | The settings for the ingest job. |
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
Definition at line 81 of file IngestModuleFactoryAdapter.java.
IngestModuleIngestJobSettings org.sleuthkit.autopsy.ingest.IngestModuleFactoryAdapter.getDefaultIngestJobSettings | ( | ) |
Gets the default per ingest job settings for instances of the family of ingest modules the factory creates. For example, the Autopsy core hash lookup ingest modules family uses hash databases imported or created using its global settings panel. All of the hash databases are enabled by default for an ingest job.
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
Definition at line 51 of file IngestModuleFactoryAdapter.java.
IngestModuleGlobalSettingsPanel org.sleuthkit.autopsy.ingest.IngestModuleFactoryAdapter.getGlobalSettingsPanel | ( | ) |
Gets a user interface panel that allows a user to change settings that are used by all instances of the family of ingest modules the factory creates. For example, the Autopsy core hash lookup ingest module factory provides a global settings panel to import and create hash databases. The imported hash databases are then enabled or disabled per ingest job using ingest an ingest job settings panel.
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
Definition at line 46 of file IngestModuleFactoryAdapter.java.
IngestModuleIngestJobSettingsPanel org.sleuthkit.autopsy.ingest.IngestModuleFactoryAdapter.getIngestJobSettingsPanel | ( | IngestModuleIngestJobSettings | settings | ) |
Gets a user interface panel that can be used to set per ingest job settings for instances of the family of ingest modules the factory creates. For example, the core hash lookup ingest module factory provides an ingest job settings panel to enable or disable hash databases per ingest job.
settings | Per ingest job settings to initialize the panel. |
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
Definition at line 61 of file IngestModuleFactoryAdapter.java.
|
abstract |
Gets a brief, user-friendly description of the family of ingest modules the factory creates. Autopsy uses this string to describe the module in user interface components.
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
|
abstract |
Gets the display name that identifies the family of ingest modules the factory creates. Autopsy uses this string to identify the module in user interface components and log messages. The module name must be unique. so a brief but distinctive name is recommended.
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
|
abstract |
Gets the version number of the family of ingest modules the factory creates.
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
boolean org.sleuthkit.autopsy.ingest.IngestModuleFactoryAdapter.hasGlobalSettingsPanel | ( | ) |
Queries the factory to determine if it provides a user interface panel to allow a user to change settings that are used by all instances of the family of ingest modules the factory creates. For example, the Autopsy core hash lookup ingest module factory provides a global settings panel to import and create hash databases. The hash databases are then enabled or disabled per ingest job using an ingest job settings panel.
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
Definition at line 41 of file IngestModuleFactoryAdapter.java.
boolean org.sleuthkit.autopsy.ingest.IngestModuleFactoryAdapter.hasIngestJobSettingsPanel | ( | ) |
Queries the factory to determine if it provides user a interface panel to allow a user to make per ingest job settings for instances of the family of ingest modules the factory creates. For example, the Autopsy core hash lookup ingest module factory provides an ingest job settings panels to enable or disable hash databases per ingest job.
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
Definition at line 56 of file IngestModuleFactoryAdapter.java.
|
inherited |
Queries the factory to determine if it is capable of creating data artifact ingest modules.
Implemented in org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoIngestModuleFactory.
Definition at line 241 of file IngestModuleFactory.java.
Referenced by org.sleuthkit.autopsy.ingest.IngestModuleTemplate.isDataArtifactIngestModuleTemplate().
boolean org.sleuthkit.autopsy.ingest.IngestModuleFactoryAdapter.isDataSourceIngestModuleFactory | ( | ) |
Queries the factory to determine if it is capable of creating data source ingest modules.
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
Definition at line 66 of file IngestModuleFactoryAdapter.java.
boolean org.sleuthkit.autopsy.ingest.IngestModuleFactoryAdapter.isFileIngestModuleFactory | ( | ) |
Queries the factory to determine if it is capable of creating file ingest modules.
Implements org.sleuthkit.autopsy.ingest.IngestModuleFactory.
Definition at line 76 of file IngestModuleFactoryAdapter.java.
Copyright © 2012-2021 Basis Technology. Generated on: Fri Aug 6 2021
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.