org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb Class Reference

Inherits org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.

Public Member Functions
void	addArtifact (CorrelationAttribute eamArtifact) throws EamDbException
void	addReferenceInstance (EamGlobalFileInstance eamGlobalFileInstance, CorrelationAttribute.Type correlationType) throws EamDbException
void	bulkInsertArtifacts () throws EamDbException
void	bulkInsertCases (List< CorrelationCase > cases) throws EamDbException
void	bulkInsertReferenceTypeEntries (Set< EamGlobalFileInstance > globalInstances, CorrelationAttribute.Type contentType) throws EamDbException
List< CorrelationAttributeInstance >	getArtifactInstancesByPath (CorrelationAttribute.Type aType, String filePath) throws EamDbException
List< CorrelationAttributeInstance >	getArtifactInstancesByTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException
List< CorrelationAttributeInstance >	getArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException
List< String >	getBadTags ()
CorrelationCase	getCaseByUUID (String caseUUID) throws EamDbException
List< CorrelationCase >	getCases () throws EamDbException
CorrelationAttribute.Type	getCorrelationTypeById (int typeId) throws EamDbException
Long	getCountArtifactInstancesByCaseDataSource (String caseUUID, String dataSourceID) throws EamDbException
Long	getCountArtifactInstancesByTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException
Long	getCountArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException
Long	getCountUniqueCaseDataSourceTuplesHavingTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException
Long	getCountUniqueDataSources () throws EamDbException
CorrelationDataSource	getDataSourceDetails (String dataSourceDeviceId) throws EamDbException
List< CorrelationDataSource >	getDataSources () throws EamDbException
String	getDbInfo (String name) throws EamDbException
List< CorrelationAttribute.Type >	getDefinedCorrelationTypes () throws EamDbException
List< CorrelationAttribute.Type >	getEnabledCorrelationTypes () throws EamDbException
int	getFrequencyPercentage (CorrelationAttribute corAttr) throws EamDbException
List< String >	getListCasesHavingArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException
EamOrganization	getOrganizationByID (int orgID) throws EamDbException
List< EamOrganization >	getOrganizations () throws EamDbException
List< EamGlobalFileInstance >	getReferenceInstancesByTypeValue (CorrelationAttribute.Type aType, String aValue) throws EamDbException
EamGlobalSet	getReferenceSetByID (int referenceSetID) throws EamDbException
List< CorrelationAttribute.Type >	getSupportedCorrelationTypes () throws EamDbException
boolean	isArtifactlKnownBadByReference (CorrelationAttribute.Type aType, String value) throws EamDbException
void	newCase (CorrelationCase eamCase) throws EamDbException
CorrelationCase	newCase (Case autopsyCase) throws EamDbException
int	newCorrelationType (CorrelationAttribute.Type newType) throws EamDbException
void	newDataSource (CorrelationDataSource eamDataSource) throws EamDbException
void	newDbInfo (String name, String value) throws EamDbException
void	newOrganization (EamOrganization eamOrg) throws EamDbException
int	newReferencelSet (EamGlobalSet eamGlobalSet) throws EamDbException
void	prepareBulkArtifact (CorrelationAttribute eamArtifact) throws EamDbException
void	reset () throws EamDbException
void	saveSettings ()
void	setArtifactInstanceKnownStatus (CorrelationAttribute eamArtifact, TskData.FileKnown knownStatus) throws EamDbException
void	setBadTags (List< String > badTags)
void	shutdownConnections () throws EamDbException
void	updateCase (CorrelationCase eamCase) throws EamDbException
void	updateCorrelationType (CorrelationAttribute.Type aType) throws EamDbException
void	updateDbInfo (String name, String value) throws EamDbException
void	updateSettings ()

Static Public Member Functions
static synchronized PostgresEamDb	getInstance () throws EamDbException
static boolean	isEnabled ()

Static Public Attributes
static final int	SCHEMA_VERSION = 1

Protected Member Functions
Connection	connect () throws EamDbException
String	getConflictClause ()

Protected Attributes
int	bulkArtifactsThreshold
final List< CorrelationAttribute.Type >	DEFAULT_CORRELATION_TYPES

Private Member Functions
	PostgresEamDb () throws EamDbException
void	setupConnectionPool () throws EamDbException

Private Attributes
BasicDataSource	connectionPool = null
final PostgresEamDbSettings	dbSettings

Static Private Attributes
static final String	CONFLICT_CLAUSE = "ON CONFLICT DO NOTHING"
static final int	CONN_POOL_SIZE = 10
static PostgresEamDb	instance
static final Logger	LOGGER = Logger.getLogger(PostgresEamDb.class.getName())

Detailed Description

Central Repository database implementation using Postgres as a backend

Definition at line 33 of file PostgresEamDb.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.PostgresEamDb ( ) throws EamDbException

private

Exceptions

EamDbException

if the AbstractSqlEamDb class has one or more default correlation type(s) having an invalid db table name.

Definition at line 66 of file PostgresEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifactsThreshold, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getBulkThreshold().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getInstance().

Member Function Documentation

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addArtifact ( CorrelationAttribute  eamArtifact ) throws EamDbException

inherited

Inserts new Artifact(s) into the database. Should add associated Case and Data Source first.

Parameters

eamArtifact

The artifact to add

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 553 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addReferenceInstance ( EamGlobalFileInstance  eamGlobalFileInstance, CorrelationAttribute.Type  correlationType  ) throws EamDbException

inherited

Add a new reference instance

Parameters

eamGlobalFileInstance	The reference instance to add
correlationType	Correlation Type that this Reference Instance is

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1501 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getComment(), org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getGlobalSetID(), org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getKnownStatus(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getMD5Hash().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts ( ) throws EamDbException

inherited

Executes a bulk insert of the eamArtifacts added from the prepareBulkArtifact() method

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 902 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifacts, org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getConflictClause(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.prepareBulkArtifact().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertCases ( List< CorrelationCase >  cases ) throws EamDbException

inherited

Executes a bulk insert of the cases

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 967 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getConflictClause().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertReferenceTypeEntries ( Set< EamGlobalFileInstance >  globalInstances, CorrelationAttribute.Type  contentType  ) throws EamDbException

inherited

Insert the bulk collection of Reference Type Instances

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1529 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getConflictClause().

Connection org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.connect ( ) throws EamDbException

protected

Lazily setup Singleton connection on first request.

Returns

A connection from the connection pool.

Exceptions

EamDbException

Definition at line 167 of file PostgresEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.isEnabled(), and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.setupConnectionPool().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.reset().

List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByPath ( CorrelationAttribute.Type  aType, String  filePath  ) throws EamDbException

inherited

Retrieves eamArtifact instances from the database that are associated with the aType and filePath

Parameters

aType	EamArtifact.Type to search for
filePath	File path to search for

Returns

List of 0 or more EamArtifactInstances

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 656 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamArtifactInstanceFromResultSet().

List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByTypeValue ( CorrelationAttribute.Type  aType, String  value  ) throws EamDbException

inherited

Retrieves eamArtifact instances from the database that are associated with the eamArtifactType and eamArtifactValue of the given eamArtifact.

Parameters

eamArtifact

The type/value to look up (artifact with 0 instances)

Returns

List of artifact instances for a given type/value

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 604 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamArtifactInstanceFromResultSet().

List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesKnownBad ( CorrelationAttribute.Type  aType, String  value  ) throws EamDbException

inherited

Gets list of matching eamArtifact instances that have knownStatus = "Bad".

Parameters

aType	EamArtifact.Type to search for
value	Value to search for

Returns

List with 0 or more matching eamArtifact instances.

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1140 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamArtifactInstanceFromResultSet().

List<String> org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getBadTags

(

)

Get the list of tags recognized as "Bad"

Returns

The list of bad tags

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 191 of file PostgresEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getBadTags().

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCaseByUUID ( String  caseUUID ) throws EamDbException

inherited

Retrieves Case details based on Case UUID

Parameters

caseUUID

unique identifier for a case

Returns

The retrieved case

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 352 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamCaseFromResultSet().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().

List<CorrelationCase> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCases ( ) throws EamDbException

inherited

Retrieves cases that are in DB.

Returns

List of cases

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 391 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamCaseFromResultSet().

String org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getConflictClause ( )

protected

Definition at line 186 of file PostgresEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.CONFLICT_CLAUSE.

CorrelationAttribute.Type org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeById ( int  typeId ) throws EamDbException

inherited

Get the EamArtifact.Type that has the given Type.Id.

Parameters

typeId

Type.Id of Correlation Type to get

Returns

EamArtifact.Type or null if it doesn't exist.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1806 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().

Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByCaseDataSource ( String  caseUUID, String  dataSourceID  ) throws EamDbException

inherited

Retrieves number of eamArtifact instances in the database that are associated with the caseDisplayName and dataSource of the given eamArtifact instance.

Parameters

caseUUID	Case ID to search for
dataSourceID	Data source ID to search for

Returns

Number of artifact instances having caseDisplayName and dataSource

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 828 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes().

Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByTypeValue ( CorrelationAttribute.Type  aType, String  value  ) throws EamDbException

inherited

Retrieves number of artifact instances in the database that are associated with the ArtifactType and artifactValue of the given artifact.

Parameters

eamArtifact

Artifact with artifactType and artifactValue to search for

Returns

Number of artifact instances having ArtifactType and ArtifactValue.

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 707 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesKnownBad ( CorrelationAttribute.Type  aType, String  value  ) throws EamDbException

inherited

Count matching eamArtifacts instances that have knownStatus = "Bad".

Parameters

aType	EamArtifact.Type to search for
value	Value to search for

Returns

Number of matching eamArtifacts

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1190 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue ( CorrelationAttribute.Type  aType, String  value  ) throws EamDbException

inherited

Retrieves number of unique caseDisplayName / dataSource tuples in the database that are associated with the artifactType and artifactValue of the given artifact.

Parameters

eamArtifact

Artifact with artifactType and artifactValue to search for

Returns

Number of unique tuples

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 757 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getFrequencyPercentage().

Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueDataSources ( ) throws EamDbException

inherited

Retrieves number of data sources in the database.

Returns

Number of unique data sources

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 791 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getFrequencyPercentage().

CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSourceDetails ( String  dataSourceDeviceId ) throws EamDbException

inherited

Updates a Data Source in the database

Parameters

eamDataSource	the data source to update Retrieves Data Source details based on data source device ID
dataSourceDeviceId	the data source device ID number

Returns

The data source

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 485 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamDataSourceFromResultSet().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().

List<CorrelationDataSource> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSources ( ) throws EamDbException

inherited

Return a list of data sources in the DB

Returns

list of data sources in the DB

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 518 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamDataSourceFromResultSet().

String org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDbInfo ( String  name ) throws EamDbException

inherited

Get the value for the given name from the name/value db_info table.

Parameters

name	Name to search for

Returns

value associated with name.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 141 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes ( ) throws EamDbException

inherited

Get the list of EamArtifact.Type's that are defined in the DB and can be used to correlate artifacts.

Returns

List of EamArtifact.Type's. If none are defined in the database, the default list will be returned.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1669 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByCaseDataSource().

List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEnabledCorrelationTypes ( ) throws EamDbException

inherited

Get the list of enabled EamArtifact.Type's that will be used to correlate artifacts.

Returns

List of enabled EamArtifact.Type's. If none are defined in the database, the default list will be returned.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1704 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().

int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getFrequencyPercentage ( CorrelationAttribute  corAttr ) throws EamDbException

inherited

Calculate the percentage of data sources that have this attribute value.

Parameters

corAttr

Attribute type and value to get data about

Returns

Int between 0 and 100

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 739 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueDataSources().

static synchronized PostgresEamDb org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getInstance ( ) throws EamDbException

static

Get the singleton instance of PostgresEamDb

Returns

the singleton instance of PostgresEamDb

Exceptions

EamDbException

if one or more default correlation type(s) have an invalid db table name.

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 53 of file PostgresEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.instance, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.PostgresEamDb().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getInstance().

List<String> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getListCasesHavingArtifactInstancesKnownBad ( CorrelationAttribute.Type  aType, String  value  ) throws EamDbException

inherited

Gets list of distinct case display names, where each case has 1+ Artifact Instance matching eamArtifact with knownStatus = "Bad".

Parameters

aType	EamArtifact.Type to search for
value	Value to search for

Returns

List of cases containing this artifact with instances marked as bad

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1234 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

EamOrganization org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizationByID ( int  orgID ) throws EamDbException

inherited

Get an organization having the given ID

Parameters

orgID

The id to look up

Returns

The organization with the given ID

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1387 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamOrganizationFromResultSet().

List<EamOrganization> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizations ( ) throws EamDbException

inherited

Get all organizations

Returns

A list of all organizations

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1352 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamOrganizationFromResultSet().

List<EamGlobalFileInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceInstancesByTypeValue ( CorrelationAttribute.Type  aType, String  aValue  ) throws EamDbException

inherited

Get all reference entries having a given correlation type and value

Parameters

aType	Type to use for matching
aValue	Value to use for matching

Returns

List of all global file instances with a type and value

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1576 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalFileInstanceFromResultSet().

EamGlobalSet org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceSetByID ( int  referenceSetID ) throws EamDbException

inherited

Get a reference set by ID

Parameters

referenceSetID

The ID to look up

Returns

The global set associated with the ID

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1468 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalSetFromResultSet().

List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getSupportedCorrelationTypes ( ) throws EamDbException

inherited

Get the list of supported EamArtifact.Type's that can be used to correlate artifacts.

Returns

List of supported EamArtifact.Type's. If none are defined in the database, the default list will be returned.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1739 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().

boolean org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.isArtifactlKnownBadByReference ( CorrelationAttribute.Type  aType, String  value  ) throws EamDbException

inherited

Is the artifact known as bad according to the reference entries?

Parameters

aType	EamArtifact.Type to search for
value	Value to search for

Returns

Global known status of the artifact

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1282 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.FILES_TYPE_ID.

static boolean org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.isEnabled ( )

staticinherited

Is the database enabled?

Returns

Is the database enabled

Definition at line 93 of file EamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.DISABLED, org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.getSelectedPlatform(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.useCentralRepo().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.connect(), org.sleuthkit.autopsy.centralrepository.optionspanel.ImportHashDatabaseDialog.ImportHashDatabaseWorker.ImportHashDatabaseWorker(), org.sleuthkit.autopsy.centralrepository.actions.EamEditCaseInfoAction.isEnabled(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.isSupported(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.propertyChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.IngestModuleEventListener.propertyChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.KnownStatusChangeRunner.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.NewArtifactsRunner.run(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.setNode(), and org.sleuthkit.autopsy.centralrepository.actions.EamCaseEditDetailsDialog.updateDb().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase ( CorrelationCase  eamCase ) throws EamDbException

inherited

Creates new Case in the database

Expects the Organization for this case to already exist in the database.

Parameters

eamCase

The case to add

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 201 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase ( Case  autopsyCase ) throws EamDbException

inherited

Creates new Case in the database from the given case

Parameters

case	The case to add

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 262 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamOrganization.getDefault(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase().

int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCorrelationType ( CorrelationAttribute.Type  newType ) throws EamDbException

inherited

Add a new EamArtifact.Type to the db.

Parameters

newType

New type to add.

Returns

ID of this new Correlation Type

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1612 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDataSource ( CorrelationDataSource  eamDataSource ) throws EamDbException

inherited

Creates new Data Source in the database

Parameters

eamDataSource

the data source to add

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 428 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDbInfo ( String  name, String  value  ) throws EamDbException

inherited

Add a new name/value pair in the db_info table.

Parameters

name	Key to set
value	Value to set

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 112 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newOrganization ( EamOrganization  eamOrg ) throws EamDbException

inherited

Add a new organization

Parameters

eamOrg

The organization to add

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1322 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newReferencelSet ( EamGlobalSet  eamGlobalSet ) throws EamDbException

inherited

Add a new Global Set

Parameters

eamGlobalSet

The global set to add

Returns

The ID of the new global set

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1420 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.prepareBulkArtifact ( CorrelationAttribute  eamArtifact ) throws EamDbException

inherited

Adds an eamArtifact to an internal list to be later added to DB. Artifact can have 1 or more Artifact Instances. Insert will be triggered by a threshold or a call to bulkInsertArtifacts().

Parameters

eamArtifact

The artifact to add

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 878 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifacts, and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts().

void org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.reset

(

)

throws EamDbException

Reset the database (testing method)

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 101 of file PostgresEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.DEFAULT_CORRELATION_TYPES, org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.FILES_TYPE_ID, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.insertDefaultDatabaseContent().

void org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.saveSettings

(

)

Save settings

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 94 of file PostgresEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.saveSettings().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus ( CorrelationAttribute  eamArtifact, TskData.FileKnown  knownStatus  ) throws EamDbException

inherited

Sets an eamArtifact instance to the given knownStatus. If eamArtifact exists, it is updated. If eamArtifact does not exist it is added with the given status.

Parameters

eamArtifact	Artifact containing exactly one (1) ArtifactInstance.
FileKnown	The status to change the artifact to

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1048 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCaseByUUID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationCase.getCaseUUID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationCase(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getCorrelationValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSourceDetails(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationDataSource.getDeviceID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFilePath(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getInstances(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDataSource().

void org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.setBadTags

(

List< String >

tags

)

Set the tags recognized as "Bad"

Parameters

tags	The tags to consider bad

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 196 of file PostgresEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.setBadTags().

void org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.setupConnectionPool ( ) throws EamDbException

private

Setup a connection pool for db connections.

Definition at line 135 of file PostgresEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getDbName(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getDriver(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getHost(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getJDBCBaseURI(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getPassword(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getPort(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getUserName(), and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getValidationQuery().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.shutdownConnections

(

)

throws EamDbException

Shutdown the connection pool.

This closes the connection pool including all idle database connections. It will not close active/in-use connections. Thus, it is vital that there are no in-use connections when you call this method.

Exceptions

EamDbException

if there is a problem closing the connection pool.

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 72 of file PostgresEamDb.java.

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateCase ( CorrelationCase  eamCase ) throws EamDbException

inherited

Updates an existing Case in the database

Parameters

eamCase

The case to update

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 288 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateCorrelationType ( CorrelationAttribute.Type  aType ) throws EamDbException

inherited

Update a EamArtifact.Type.

Parameters

aType

EamArtifact.Type to update.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1772 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateDbInfo ( String  name, String  value  ) throws EamDbException

inherited

Update the value for a name in the name/value db_info table.

Parameters

name	Name to find
value	Value to assign to name.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 175 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.updateSettings

(

)

Update settings

When using updateSettings, if any database settings have changed, you should call shutdownConnections() before using any API methods. That will ensure that any old connections are closed and all new connections will be made using the new settings.

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 86 of file PostgresEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifactsThreshold, org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.getBulkThreshold(), and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.loadSettings().

Member Data Documentation

int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifactsThreshold

protectedinherited

Definition at line 53 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.PostgresEamDb(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.SqliteEamDb(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.updateSettings(), and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.updateSettings().

final String org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.CONFLICT_CLAUSE = "ON CONFLICT DO NOTHING"

staticprivate

Definition at line 37 of file PostgresEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getConflictClause().

final int org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.CONN_POOL_SIZE = 10

staticprivate

Definition at line 41 of file PostgresEamDb.java.

BasicDataSource org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.connectionPool = null

private

Definition at line 42 of file PostgresEamDb.java.

final PostgresEamDbSettings org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.dbSettings

private

Definition at line 44 of file PostgresEamDb.java.

final List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.DEFAULT_CORRELATION_TYPES

protectedinherited

Definition at line 50 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.AbstractSqlEamDb(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.reset(), and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.reset().

PostgresEamDb org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.instance

staticprivate

Definition at line 39 of file PostgresEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getInstance().

final Logger org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.LOGGER = Logger.getLogger(PostgresEamDb.class.getName())

staticprivate

Definition at line 35 of file PostgresEamDb.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.SCHEMA_VERSION = 1

staticinherited

Definition at line 31 of file EamDb.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/centralrepository/datamodel/PostgresEamDb.java