Autopsy
4.4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor, and org.sleuthkit.autopsy.datasourceprocessors.AutoIngestDataSourceProcessor.
Public Member Functions | |
LocalDiskDSProcessor () | |
void | cancel () |
int | canProcess (Path dataSourcePath) throws AutoIngestDataSourceProcessorException |
String | getDataSourceType () |
JPanel | getPanel () |
boolean | isPanelValid () |
void | process (String deviceId, Path dataSourcePath, DataSourceProcessorProgressMonitor progressMonitor, DataSourceProcessorCallback callBack) throws AutoIngestDataSourceProcessorException |
void | reset () |
void | run (DataSourceProcessorProgressMonitor progressMonitor, DataSourceProcessorCallback callback) |
void | run (String deviceId, String drivePath, String timeZone, boolean ignoreFatOrphanFiles, DataSourceProcessorProgressMonitor progressMonitor, DataSourceProcessorCallback callback) |
void | setDataSourceOptions (String drivePath, String timeZone, boolean ignoreFatOrphanFiles) |
Static Public Member Functions | |
static String | getType () |
Private Attributes | |
AddImageTask | addDiskTask |
final LocalDiskPanel | configPanel |
String | deviceId |
String | drivePath |
boolean | ignoreFatOrphanFiles |
ImageWriterSettings | imageWriterSettings |
boolean | setDataSourceOptionsCalled |
String | timeZone |
Static Private Attributes | |
static final String | DATA_SOURCE_TYPE = NbBundle.getMessage(LocalDiskDSProcessor.class, "LocalDiskDSProcessor.dsType.text") |
A local drive data source processor that implements the DataSourceProcessor service provider interface to allow integration with the add data source wizard. It also provides a run method overload to allow it to be used independently of the wizard.
Definition at line 46 of file LocalDiskDSProcessor.java.
org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.LocalDiskDSProcessor | ( | ) |
Constructs a local drive data source processor that implements the DataSourceProcessor service provider interface to allow integration with the add data source wizard. It also provides a run method overload to allow it to be used independently of the wizard.
Definition at line 68 of file LocalDiskDSProcessor.java.
void org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.cancel | ( | ) |
Requests cancellation of the background task that adds a data source to the case database, after the task is started using the run method. This is a "best effort" cancellation, with no guarantees that the case database will be unchanged. If cancellation succeeded, the list of new data sources returned by the background task will be empty.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 186 of file LocalDiskDSProcessor.java.
int org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.canProcess | ( | Path | dataSourcePath | ) | throws AutoIngestDataSourceProcessorException |
Indicates whether the DataSourceProcessor is capable of processing the data source. Returns a confidence value. Method can throw an exception for a system level problem. The exception should not be thrown for an issue related to bad input data.
dataSourcePath | Path to the data source. |
org.sleuthkit.autopsy.corecomponentinterfaces.AutomatedIngestDataSourceProcessor.AutomatedIngestDataSourceProcessorException |
Implements org.sleuthkit.autopsy.datasourceprocessors.AutoIngestDataSourceProcessor.
Definition at line 206 of file LocalDiskDSProcessor.java.
References org.sleuthkit.autopsy.coreutils.DriveUtils.driveExists(), org.sleuthkit.autopsy.coreutils.DriveUtils.isPartition(), and org.sleuthkit.autopsy.coreutils.DriveUtils.isPhysicalDrive().
String org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.getDataSourceType | ( | ) |
Gets a string that describes the type of data sources this processor is able to add to the case database. The string is suitable for display in a type selection UI component (e.g., a combo box).
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 91 of file LocalDiskDSProcessor.java.
JPanel org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.getPanel | ( | ) |
Gets the panel that allows a user to select a data source and do any configuration required by the data source. The panel is less than 544 pixels wide and less than 173 pixels high.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 104 of file LocalDiskDSProcessor.java.
|
static |
Gets a string that describes the type of data sources this processor is able to add to the case database. The string is suitable for display in a type selection UI component (e.g., a combo box).
Definition at line 79 of file LocalDiskDSProcessor.java.
boolean org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.isPanelValid | ( | ) |
Indicates whether the settings in the selection and configuration panel are valid and complete.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 117 of file LocalDiskDSProcessor.java.
void org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.process | ( | String | deviceId, |
Path | dataSourcePath, | ||
DataSourceProcessorProgressMonitor | progressMonitor, | ||
DataSourceProcessorCallback | callBack | ||
) | throws AutoIngestDataSourceProcessorException |
Adds a data source to the case database using a background task in a separate thread by calling DataSourceProcessor.run() method. Returns as soon as the background task is started. The background task uses a callback object to signal task completion and return results. Method can throw an exception for a system level problem. The exception should not be thrown for an issue related to bad input data.
deviceId | An ASCII-printable identifier for the device associated with the data source that is intended to be unique across multiple cases (e.g., a UUID). |
dataSourcePath | Path to the data source. |
progressMonitor | Progress monitor that will be used by the background task to report progress. |
callBack | Callback that will be used by the background task to return results. |
org.sleuthkit.autopsy.corecomponentinterfaces.AutomatedIngestDataSourceProcessor.AutomatedIngestDataSourceProcessorException |
Implements org.sleuthkit.autopsy.datasourceprocessors.AutoIngestDataSourceProcessor.
Definition at line 227 of file LocalDiskDSProcessor.java.
void org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.reset | ( | ) |
Resets the selection and configuration panel for this data source processor.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 197 of file LocalDiskDSProcessor.java.
void org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.run | ( | DataSourceProcessorProgressMonitor | progressMonitor, |
DataSourceProcessorCallback | callback | ||
) |
Adds a data source to the case database using a background task in a separate thread and the settings provided by the selection and configuration panel. Returns as soon as the background task is started. The background task uses a callback object to signal task completion and return results.
This method should not be called unless isPanelValid returns true.
progressMonitor | Progress monitor that will be used by the background task to report progress. |
callback | Callback that will be used by the background task to return results. |
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataSourceProcessor.
Definition at line 136 of file LocalDiskDSProcessor.java.
void org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.run | ( | String | deviceId, |
String | drivePath, | ||
String | timeZone, | ||
boolean | ignoreFatOrphanFiles, | ||
DataSourceProcessorProgressMonitor | progressMonitor, | ||
DataSourceProcessorCallback | callback | ||
) |
Adds a data source to the case database using a background task in a separate thread and the given settings instead of those provided by the selection and configuration panel. Returns as soon as the background task is started and uses the callback object to signal task completion and return results.
deviceId | An ASCII-printable identifier for the device associated with the data source that is intended to be unique across multiple cases (e.g., a UUID). |
drivePath | Path to the local drive. |
timeZone | The time zone to use when processing dates and times for the image, obtained from java.util.TimeZone.getID. |
ignoreFatOrphanFiles | Whether to parse orphans if the image has a FAT filesystem. |
progressMonitor | Progress monitor for reporting progress during processing. |
callback | Callback to call when processing is done. |
Definition at line 173 of file LocalDiskDSProcessor.java.
void org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.setDataSourceOptions | ( | String | drivePath, |
String | timeZone, | ||
boolean | ignoreFatOrphanFiles | ||
) |
Sets the configuration of the data source processor without using the configuration panel.
drivePath | Path to the local drive. |
timeZone | The time zone to use when processing dates and times for the local drive, obtained from java.util.TimeZone.getID. |
ignoreFatOrphanFiles | Whether to parse orphans if the image has a FAT filesystem. |
Definition at line 250 of file LocalDiskDSProcessor.java.
|
private |
Definition at line 50 of file LocalDiskDSProcessor.java.
|
private |
Definition at line 49 of file LocalDiskDSProcessor.java.
|
staticprivate |
Definition at line 48 of file LocalDiskDSProcessor.java.
|
private |
Definition at line 55 of file LocalDiskDSProcessor.java.
|
private |
Definition at line 56 of file LocalDiskDSProcessor.java.
|
private |
Definition at line 59 of file LocalDiskDSProcessor.java.
|
private |
Definition at line 58 of file LocalDiskDSProcessor.java.
|
private |
Definition at line 60 of file LocalDiskDSProcessor.java.
|
private |
Definition at line 57 of file LocalDiskDSProcessor.java.
Copyright © 2012-2016 Basis Technology. Generated on: Fri Sep 29 2017
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.