Autopsy  4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.modules.interestingitems.FilesSet Class Reference

Inherits Serializable.

Classes

class  Rule
 

Public Member Functions

 FilesSet (String name, String description, boolean ignoreKnownFiles, boolean ignoreUnallocatedSpace, Map< String, Rule > rules)
 
String fileIsMemberOf (AbstractFile file)
 
String getDescription ()
 
String getName ()
 
boolean ingoresUnallocatedSpace ()
 
String toString ()
 

Private Attributes

final String description
 
final boolean ignoreKnownFiles
 
final boolean ignoreUnallocatedSpace
 
final String name
 
final Map< String, Rule > rules = new HashMap<>()
 

Static Private Attributes

static final long serialVersionUID = 1L
 

Detailed Description

A collection of set membership rules that define an interesting files set. The rules are independent, i.e., if any rule is satisfied by a file, the file belongs to the set.

Interesting files set definition objects are immutable, so they may be safely published to multiple threads.

Definition at line 39 of file FilesSet.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.modules.interestingitems.FilesSet.FilesSet ( String  name,
String  description,
boolean  ignoreKnownFiles,
boolean  ignoreUnallocatedSpace,
Map< String, Rule >  rules 
)

Constructs an interesting files set.

Parameters
nameThe name of the set.
descriptionA description of the set, may be null.
ignoreKnownFilesWhether or not to exclude known files from the set.
ignoreUnallocatedSpaceWhether or not to exclude unallocated space from the set.
rulesThe rules that define the set. May be null, but a set with no rules is the empty set.

Definition at line 60 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.ignoreKnownFiles, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.ignoreUnallocatedSpace, and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.name.

Member Function Documentation

String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.fileIsMemberOf ( AbstractFile  file)

Determines whether a file is a member of this interesting files set.

Parameters
fileA file to test for set membership.
Returns
The name of the first set membership rule satisfied by the file, will be null if the file does not belong to the set.

Definition at line 131 of file FilesSet.java.

References org::sleuthkit::datamodel::AbstractFile.getKnown(), org::sleuthkit::datamodel::AbstractFile.getType(), org::sleuthkit::datamodel::TskData::FileKnown.KNOWN, org::sleuthkit::datamodel::TskData::TSK_DB_FILES_TYPE_ENUM.SLACK, org::sleuthkit::datamodel::TskData::TSK_DB_FILES_TYPE_ENUM.UNALLOC_BLOCKS, and org::sleuthkit::datamodel::TskData::TSK_DB_FILES_TYPE_ENUM.UNUSED_BLOCKS.

String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.getDescription ( )
String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.getName ( )
boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.ingoresUnallocatedSpace ( )
String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.toString ( )

Member Data Documentation

final String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.description
private
final boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.ignoreKnownFiles
private
final boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.ignoreUnallocatedSpace
private
final String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.name
private
final Map<String, Rule> org.sleuthkit.autopsy.modules.interestingitems.FilesSet.rules = new HashMap<>()
private

Definition at line 46 of file FilesSet.java.

final long org.sleuthkit.autopsy.modules.interestingitems.FilesSet.serialVersionUID = 1L
staticprivate

Definition at line 41 of file FilesSet.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Mon Apr 24 2017
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.