Autopsy  4.19.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Static Public Member Functions | Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary Class Reference

Classes

class  DailyActivityAmount
 
interface  DataSourceFilterFunction
 
class  TimelineSummaryData
 

Public Member Functions

 TimelineSummary ()
 
 TimelineSummary (SleuthkitCaseProvider caseProvider, Supplier< TimeZone > timeZoneProvider, DataSourceFilterFunction filterFunction)
 
TimelineSummaryData getTimelineSummaryData (DataSource dataSource, int recentDaysNum) throws SleuthkitCaseProviderException, TskCoreException
 

Static Public Member Functions

static String formatDate (Date date, DateFormat formatter)
 
static DateFormat getUtcFormat (String formatString)
 

Private Member Functions

List< DailyActivityAmountgetMostRecentActivityAmounts (Map< Long, DailyActivityAmount > dateCounts, long minRecentDay, long maxDay)
 
Map< Long, DailyActivityAmountgetTimelineEventsByDay (DataSource dataSource, TimelineManager timelineManager, TimeZone timeZone) throws TskCoreException, SleuthkitCaseProviderException
 

Private Attributes

final SleuthkitCaseProvider caseProvider
 
final DataSourceFilterFunction filterFunction
 
final Supplier< TimeZone > timeZoneProvider
 

Static Private Attributes

static final long DAY_SECS = 24 * 60 * 60
 
static final Set< TimelineEventType > FILE_SYSTEM_EVENTS
 

Detailed Description

Provides data source summary information pertaining to Timeline data.

Definition at line 49 of file TimelineSummary.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary ( )
org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary ( SleuthkitCaseProvider  caseProvider,
Supplier< TimeZone >  timeZoneProvider,
DataSourceFilterFunction  filterFunction 
)

Construct object with given SleuthkitCaseProvider

Parameters
caseProviderSleuthkitCaseProvider provider; cannot be null.
timeZoneProviderThe timezone provider; cannot be null.
filterFunctionProvides the default root filter function filtered to the data source; cannot be null.

Definition at line 97 of file TimelineSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.caseProvider, org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.filterFunction, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.timeZoneProvider.

Member Function Documentation

static String org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.formatDate ( Date  date,
DateFormat  formatter 
)
static

Formats a date using a DateFormat. In the event that the date is null, returns a null string.

Parameters
dateThe date to format.
formatterThe DateFormat to use to format the date.
Returns
The formatted string generated from the formatter or null if the date is null.

Definition at line 343 of file TimelineSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.TimelinePanel.handleResult(), and org.sleuthkit.autopsy.datasourcesummary.ui.TimelinePanel.parseChartData().

List<DailyActivityAmount> org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getMostRecentActivityAmounts ( Map< Long, DailyActivityAmount dateCounts,
long  minRecentDay,
long  maxDay 
)
private

Given activity by day, converts to most recent days' activity handling empty values.

Parameters
dateCountsThe day from epoch mapped to activity amounts for that day.
minRecentDayThe minimum recent day in days from epoch.
maxDayThe maximum recent day in days from epoch;
Returns
The most recent daily activity amounts.

Definition at line 159 of file TimelineSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineSummaryData().

Map<Long, DailyActivityAmount> org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineEventsByDay ( DataSource  dataSource,
TimelineManager  timelineManager,
TimeZone  timeZone 
) throws TskCoreException, SleuthkitCaseProviderException
private
TimelineSummaryData org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineSummaryData ( DataSource  dataSource,
int  recentDaysNum 
) throws SleuthkitCaseProviderException, TskCoreException

Retrieves timeline summary data.

Parameters
dataSourceThe data source for which timeline data will be retrieved.
recentDaysNumThe maximum number of most recent days' activity to include.
Returns
The retrieved data.
Exceptions
SleuthkitCaseProviderException
TskCoreException

Definition at line 115 of file TimelineSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.get(), org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getMostRecentActivityAmounts(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineEventsByDay().

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.TimelineSummaryGetter.getData().

static DateFormat org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getUtcFormat ( String  formatString)
static

Creates a DateFormat formatter that uses UTC for time zone.

Parameters
formatStringThe date format string.
Returns
The data format.

Definition at line 329 of file TimelineSummary.java.

Member Data Documentation

final SleuthkitCaseProvider org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.caseProvider
private
final long org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.DAY_SECS = 24 * 60 * 60
staticprivate

Definition at line 68 of file TimelineSummary.java.

final Set<TimelineEventType> org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.FILE_SYSTEM_EVENTS
staticprivate
Initial value:
= new HashSet<>(Arrays.asList(
TimelineEventType.FILE_MODIFIED,
TimelineEventType.FILE_ACCESSED,
TimelineEventType.FILE_CREATED,
TimelineEventType.FILE_CHANGED))

Definition at line 70 of file TimelineSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineEventsByDay().

final DataSourceFilterFunction org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.filterFunction
private
final Supplier<TimeZone> org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.timeZoneProvider
private

The documentation for this class was generated from the following file:

Copyright © 2012-2021 Basis Technology. Generated on: Thu Sep 30 2021
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.