Autopsy  4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
Protected Member Functions | Private Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher Class Reference

Inherits SwingWorker< Object, Void >.

Protected Member Functions

Object doInBackground () throws Exception
void done ()

Private Member Functions

QueryResults filterResults (QueryResults queryResult)
void finalizeSearcher ()
void updateKeywords ()

Private Attributes

boolean finalRun = false
SearchJobInfo job
List< String > keywordListNames
List< KeywordListkeywordLists
List< Keyword > keywords
Map< Keyword, KeywordListkeywordToList
final Logger logger = Logger.getLogger(SearchRunner.Searcher.class.getName())
AggregateProgressHandle progressGroup

Detailed Description

Searcher responsible for searching the current index and writing results to blackboard and the inbox. Also, posts results to listeners as Ingest data events. Searches entire index, and keeps track of only new results to report and save. Runs as a background thread.

Definition at line 364 of file

Member Function Documentation

Object org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground ( ) throws Exception
void org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.done ( )
QueryResults org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.filterResults ( QueryResults  queryResult)

This method filters out all of the hits found in earlier periodic searches and returns only the results found by the most recent search.

This method will only return hits for objects for which we haven't previously seen a hit for the keyword.

queryResultThe results returned by a keyword search.
A unique set of hits found by the most recent search for objects that have not previously had a hit. The hits will be for the lowest numbered chunk associated with the object.

Definition at line 580 of file

References org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.addKeywordResults(), and org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.currentKeywordResults().

Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground().

void org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.finalizeSearcher ( )

Performs the cleanup that needs to be done right AFTER doInBackground() returns without relying on done() method that is not guaranteed to run.

Definition at line 557 of file

Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground().

void org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.updateKeywords ( )

Sync-up the updated keywords from the currently used lists in the XML

Definition at line 535 of file

Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground().

Member Data Documentation

boolean org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.finalRun = false

Definition at line 376 of file

SearchJobInfo org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.job

Searcher has private copies/snapshots of the lists and keywords

Definition at line 369 of file

List<String> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywordListNames

Definition at line 371 of file

List<KeywordList> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywordLists

Definition at line 372 of file

List<Keyword> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywords

Definition at line 370 of file

Map<Keyword, KeywordList> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywordToList

Definition at line 373 of file

final Logger org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.logger = Logger.getLogger(SearchRunner.Searcher.class.getName())

Definition at line 375 of file

AggregateProgressHandle org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.progressGroup

Definition at line 374 of file

The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Mon Apr 24 2017
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.