Autopsy  4.4
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent Class Reference

Inherits org.sleuthkit.autopsy.events.AutopsyEvent, and Serializable.

Public Member Functions

 FileAnalyzedEvent (AbstractFile file)
 
Object getNewValue ()
 
Object getSource ()
 
SourceType getSourceType ()
 

Private Attributes

transient AbstractFile file
 

Static Private Attributes

static final Logger logger = Logger.getLogger(ContentChangedEvent.class.getName())
 
static final long serialVersionUID = 1L
 

Detailed Description

Event published when the analysis (ingest) of a file is completed. The "old" value is the Autopsy object id of the file. The "new" value is an AbstractFile object for that id.

Definition at line 35 of file FileAnalyzedEvent.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.FileAnalyzedEvent ( AbstractFile  file)

Constructs an event that can be used to indicate that the analysis (ingest) of a file is completed.

Parameters
fileThe file for which analysis is completed.

Putting null into newValue to allow for lazy loading of the AbstractFile object. This bypasses the issues related to the serialization and de-serialization of AbstractFile objects when the event is published over a network.

Definition at line 47 of file FileAnalyzedEvent.java.

References org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.file, and org.sleuthkit.autopsy.ingest.IngestManager.IngestModuleEvent.FILE_DONE.

Member Function Documentation

Object org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.getNewValue ( )

Gets the file for which analysis is completed.

Returns
The file.

The file field is set in the constructor, but it is transient so it will become null when the event is serialized for publication over a network. Doing a lazy load of the AbstractFile object bypasses the issues related to the serialization and de-serialization of AbstractFile objects and may also save database round trips from other nodes since subscribers to this event are often not interested in the event data.

Definition at line 64 of file FileAnalyzedEvent.java.

References org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.file, org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().

Object org.sleuthkit.autopsy.events.AutopsyEvent.getSource ( )
inherited

Gets the source type (local or remote) as a string. This is for clients that do not have access to the AutopsyEvent type, and is necessary because the events package is not currently a public package within the Autopsy-Core NetBeans Module (NBM).

Returns
A string, either "LOCAL" or "REMOTE", as an Object.

Definition at line 82 of file AutopsyEvent.java.

SourceType org.sleuthkit.autopsy.events.AutopsyEvent.getSourceType ( )
inherited

Gets the source type (local or remote).

Returns
SourceType The source type of the event, local or remote.

Definition at line 69 of file AutopsyEvent.java.

References org.sleuthkit.autopsy.events.AutopsyEvent.sourceType.

Member Data Documentation

transient AbstractFile org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.file
private
final Logger org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.logger = Logger.getLogger(ContentChangedEvent.class.getName())
staticprivate

Definition at line 38 of file FileAnalyzedEvent.java.

final long org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.serialVersionUID = 1L
staticprivate

Definition at line 37 of file FileAnalyzedEvent.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Tue Jun 13 2017
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.