Autopsy  4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb Class Reference

Classes

enum  Event
 
enum  KnownFilesType
 

Public Member Functions

void addHashes (Content content) throws TskCoreException
 
void addHashes (Content content, String comment) throws TskCoreException
 
void addHashes (List< HashEntry > hashes) throws TskCoreException
 
void addPropertyChangeListener (PropertyChangeListener pcl)
 
boolean equals (Object obj)
 
String getDatabasePath () throws TskCoreException
 
String getHashSetName ()
 
String getIndexPath () throws TskCoreException
 
KnownFilesType getKnownFilesType ()
 
boolean getSearchDuringIngest ()
 
boolean getSendIngestMessages ()
 
int hashCode ()
 
boolean hasIndexOnly () throws TskCoreException
 
boolean isUpdateable () throws TskCoreException
 
HashHitInfo lookupMD5 (Content content) throws TskCoreException
 
boolean lookupMD5Quick (Content content) throws TskCoreException
 
void removePropertyChangeListener (PropertyChangeListener pcl)
 

Private Member Functions

 HashDb (int handle, String hashSetName, boolean useForIngest, boolean sendHitMessages, KnownFilesType knownFilesType)
 
void close () throws TskCoreException
 

Private Attributes

final int handle
 
final String hashSetName
 
boolean indexing
 
final KnownFilesType knownFilesType
 
final PropertyChangeSupport propertyChangeSupport = new PropertyChangeSupport(this)
 
boolean searchDuringIngest
 
boolean sendIngestMessages
 

Static Private Attributes

static final long serialVersionUID = 1L
 

Detailed Description

Instances of this class represent hash databases used to classify files as known or know bad.

Definition at line 557 of file HashDbManager.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.HashDb ( int  handle,
String  hashSetName,
boolean  useForIngest,
boolean  sendHitMessages,
KnownFilesType  knownFilesType 
)
private

Member Function Documentation

void org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.addHashes ( Content  content) throws TskCoreException

Adds hashes of content (if calculated) to the hash database.

Parameters
contentThe content for which the calculated hashes, if any, are to be added to the hash database.
Exceptions
TskCoreException

Definition at line 672 of file HashDbManager.java.

Referenced by org.sleuthkit.autopsy.modules.hashdatabase.AddContentToHashDbAction.AddContentToHashDbMenu.addFilesToHashSet(), and org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport().

void org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.addHashes ( Content  content,
String  comment 
) throws TskCoreException

Adds hashes of content (if calculated) to the hash database.

Parameters
contentThe content for which the calculated hashes, if any, are to be added to the hash database.
commentA comment to associate with the hashes, e.g., the name of the case in which the content was encountered.
Exceptions
TskCoreException

Definition at line 686 of file HashDbManager.java.

References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.handle.

void org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.addHashes ( List< HashEntry >  hashes) throws TskCoreException

Adds a list of hashes to the hash database at once

Parameters
hashesList of hashes
Exceptions
TskCoreException

Definition at line 704 of file HashDbManager.java.

void org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.addPropertyChangeListener ( PropertyChangeListener  pcl)

Adds a listener for the events defined in HashDb.Event.

Parameters
pcl

Definition at line 608 of file HashDbManager.java.

Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.indexButtonActionPerformed().

void org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.close ( ) throws TskCoreException
private
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.equals ( Object  obj)
String org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getDatabasePath ( ) throws TskCoreException
String org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getHashSetName ( )
String org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getIndexPath ( ) throws TskCoreException
KnownFilesType org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getKnownFilesType ( )
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getSearchDuringIngest ( )
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.getSendIngestMessages ( )
int org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.hashCode ( )

Definition at line 772 of file HashDbManager.java.

boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.hasIndexOnly ( ) throws TskCoreException
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.isUpdateable ( ) throws TskCoreException

Indicates whether the hash database accepts updates.

Returns
True if the database accepts updates, false otherwise.
Exceptions
org.sleuthkit.datamodel.TskCoreException

Definition at line 660 of file HashDbManager.java.

Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.updateComponentsForSelection().

HashHitInfo org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.lookupMD5 ( Content  content) throws TskCoreException

Lookup hash value in DB and provide details on file.

Parameters
content
Returns
null if file is not in database.
Exceptions
TskCoreException

Definition at line 738 of file HashDbManager.java.

References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.handle.

boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.lookupMD5Quick ( Content  content) throws TskCoreException

Perform a basic boolean lookup of the file's hash.

Parameters
content
Returns
True if file's MD5 is in the hash database
Exceptions
TskCoreException

Definition at line 717 of file HashDbManager.java.

References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.handle.

void org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.removePropertyChangeListener ( PropertyChangeListener  pcl)

Removes a listener for the events defined in HashDb.Event.

Parameters
pcl

Definition at line 617 of file HashDbManager.java.

Member Data Documentation

final int org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.handle
private
final String org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.hashSetName
private
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.indexing
private
final KnownFilesType org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.knownFilesType
private
final PropertyChangeSupport org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.propertyChangeSupport = new PropertyChangeSupport(this)
private
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.searchDuringIngest
private
boolean org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.sendIngestMessages
private
final long org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.HashDb.serialVersionUID = 1L
staticprivate

Definition at line 585 of file HashDbManager.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Mon Jan 2 2017
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.