19 package org.sleuthkit.autopsy.datamodel;
21 import java.beans.PropertyChangeEvent;
22 import java.beans.PropertyChangeListener;
23 import java.util.ArrayList;
24 import java.util.Collections;
25 import java.util.Comparator;
26 import java.util.EnumSet;
27 import java.util.HashMap;
28 import java.util.List;
29 import java.util.logging.Level;
30 import org.openide.nodes.ChildFactory;
31 import org.openide.nodes.Children;
32 import org.openide.nodes.Node;
33 import org.openide.nodes.Sheet;
34 import org.openide.util.NbBundle;
35 import org.openide.util.lookup.Lookups;
41 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ACCOUNT;
42 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EMAIL_MSG;
43 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GEN_INFO;
44 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_HASHSET_HIT;
45 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_ARTIFACT_HIT;
46 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT;
47 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT;
59 public static final String
NAME = NbBundle.getMessage(
RootNode.class,
"ExtractedContentNode.name.text");
74 static String getIconFilePath(
int typeID) {
75 String filePath =
"org/sleuthkit/autopsy/images/";
76 if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK.getTypeID()) {
77 return filePath +
"bookmarks.png";
78 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE.getTypeID()) {
79 return filePath +
"cookies.png";
80 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY.getTypeID()) {
81 return filePath +
"history.png";
82 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD.getTypeID()) {
83 return filePath +
"downloads.png";
84 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_RECENT_OBJECT.getTypeID()) {
85 return filePath +
"recent_docs.png";
86 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_TRACKPOINT.getTypeID()) {
87 return filePath +
"gps_trackpoint.png";
88 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_INSTALLED_PROG.getTypeID()) {
89 return filePath +
"programs.png";
90 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_ATTACHED.getTypeID()) {
91 return filePath +
"usb_devices.png";
92 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_EMAIL_MSG.getTypeID()) {
93 return filePath +
"mail-icon-16.png";
94 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_EXTRACTED_TEXT.getTypeID()) {
95 return filePath +
"text-file.png";
96 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_SEARCH_QUERY.getTypeID()) {
97 return filePath +
"searchquery.png";
98 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA_EXIF.getTypeID()) {
99 return filePath +
"camera-icon-16.png";
100 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_INFO.getTypeID()) {
101 return filePath +
"computer.png";
102 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_SERVICE_ACCOUNT.getTypeID()) {
103 return filePath +
"account-icon-16.png";
104 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_CONTACT.getTypeID()) {
105 return filePath +
"contact.png";
106 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_MESSAGE.getTypeID()) {
107 return filePath +
"message.png";
108 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_CALLLOG.getTypeID()) {
109 return filePath +
"calllog.png";
110 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_CALENDAR_ENTRY.getTypeID()) {
111 return filePath +
"calendar.png";
112 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_SPEED_DIAL_ENTRY.getTypeID()) {
113 return filePath +
"speeddialentry.png";
114 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_PAIRING.getTypeID()) {
115 return filePath +
"bluetooth.png";
116 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_BOOKMARK.getTypeID()) {
117 return filePath +
"gpsfav.png";
118 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_LAST_KNOWN_LOCATION.getTypeID()) {
119 return filePath +
"gps-lastlocation.png";
120 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_SEARCH.getTypeID()) {
121 return filePath +
"gps-search.png";
122 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_PROG_RUN.getTypeID()) {
123 return filePath +
"installed.png";
124 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_DETECTED.getTypeID() ||
125 typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_SUSPECTED.getTypeID()) {
126 return filePath +
"encrypted-file.png";
127 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_EXT_MISMATCH_DETECTED.getTypeID()) {
128 return filePath +
"mismatch-16.png";
129 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_ROUTE.getTypeID()) {
130 return filePath +
"gps_trackpoint.png";
131 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_REMOTE_DRIVE.getTypeID()) {
132 return filePath +
"drive_network.png";
133 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_FACE_DETECTED.getTypeID()) {
134 return filePath +
"face.png";
136 return filePath +
"artifact-icon.png";
142 super(Children.create(
new TypeFactory(),
true), Lookups.singleton(NAME));
144 super.setDisplayName(NAME);
145 this.setIconBaseWithExtension(
"org/sleuthkit/autopsy/images/extracted_content.png");
155 return v.
visit(
this);
160 Sheet s = super.createSheet();
161 Sheet.Set ss = s.get(Sheet.PROPERTIES);
163 ss = Sheet.createPropertiesSet();
167 ss.put(
new NodeProperty<>(NbBundle.getMessage(
this.getClass(),
"ExtractedContentNode.createSheet.name.name"),
168 NbBundle.getMessage(
this.getClass(),
"ExtractedContentNode.createSheet.name.displayName"),
169 NbBundle.getMessage(
this.getClass(),
"ExtractedContentNode.createSheet.name.desc"),
176 return getClass().getName();
185 private class TypeFactory extends ChildFactory.Detachable<BlackboardArtifact.Type> {
187 private final ArrayList<BlackboardArtifact.Type>
doNotShow =
new ArrayList<>();
195 doNotShow.add(
new BlackboardArtifact.Type(TSK_GEN_INFO));
196 doNotShow.add(
new BlackboardArtifact.Type(TSK_EMAIL_MSG));
197 doNotShow.add(
new BlackboardArtifact.Type(TSK_HASHSET_HIT));
198 doNotShow.add(
new BlackboardArtifact.Type(TSK_KEYWORD_HIT));
199 doNotShow.add(
new BlackboardArtifact.Type(TSK_INTERESTING_FILE_HIT));
200 doNotShow.add(
new BlackboardArtifact.Type(TSK_INTERESTING_ARTIFACT_HIT));
201 doNotShow.add(
new BlackboardArtifact.Type(TSK_ACCOUNT));
204 private final PropertyChangeListener
pcl = (PropertyChangeEvent evt) -> {
205 String eventType = evt.getPropertyName();
220 if (null != event && !(this.
doNotShow.contains(event.getBlackboardArtifactType()))) {
223 }
catch (IllegalStateException notUsed) {
238 }
catch (IllegalStateException notUsed) {
245 if (evt.getNewValue() == null) {
264 typeNodeList.clear();
268 protected boolean createKeys(List<BlackboardArtifact.Type> list) {
270 if (skCase != null) {
272 List<BlackboardArtifact.Type> types = skCase.getArtifactTypesInUse();
274 Collections.sort(types,
275 new Comparator<BlackboardArtifact.Type>() {
277 public int compare(BlackboardArtifact.Type a, BlackboardArtifact.Type b) {
278 return a.getDisplayName().compareTo(b.getDisplayName());
285 for (BlackboardArtifact.Type art : types) {
286 TypeNode node = typeNodeList.get(art);
288 node.updateDisplayName();
291 }
catch (TskCoreException ex) {
292 Logger.
getLogger(
TypeFactory.class.getName()).log(Level.SEVERE,
"Error getting list of artifacts in use: " + ex.getLocalizedMessage());
301 typeNodeList.put(key, node);
314 private final BlackboardArtifact.Type
type;
319 super.setName(
type.getTypeName());
325 final void updateDisplayName() {
326 if (skCase == null) {
334 this.childCount = skCase.getBlackboardArtifactsTypeCount(
type.getTypeID());
335 }
catch (TskException ex) {
336 Logger.getLogger(TypeNode.class.getName())
337 .log(Level.WARNING,
"Error getting child count", ex);
339 super.setDisplayName(
type.getDisplayName() +
" \u200E(\u200E" + childCount +
")\u200E");
344 Sheet s = super.createSheet();
345 Sheet.Set ss = s.get(Sheet.PROPERTIES);
347 ss = Sheet.createPropertiesSet();
351 ss.put(
new NodeProperty<>(NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.artType.name"),
352 NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.artType.displayName"),
353 NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.artType.desc"),
354 type.getDisplayName()));
356 ss.put(
new NodeProperty<>(NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.childCnt.name"),
357 NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.childCnt.displayName"),
358 NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.childCnt.desc"),
366 return v.
visit(
this);
376 return getClass().getName() +
type.getDisplayName();
385 private BlackboardArtifact.Type
type;
392 private final PropertyChangeListener
pcl =
new PropertyChangeListener() {
394 public void propertyChange(PropertyChangeEvent evt) {
395 String eventType = evt.getPropertyName();
412 if (null != event && event.getBlackboardArtifactType().equals(
type)) {
415 }
catch (IllegalStateException notUsed) {
431 }
catch (IllegalStateException notUsed) {
453 protected boolean createKeys(List<BlackboardArtifact> list) {
454 if (skCase != null) {
456 List<BlackboardArtifact> arts = skCase.getBlackboardArtifacts(
type.getTypeID());
458 }
catch (TskException ex) {
void removeIngestModuleEventListener(final PropertyChangeListener listener)
static synchronized IngestManager getInstance()
T visit(DataSourcesNode in)
void removeIngestJobEventListener(final PropertyChangeListener listener)
void addIngestJobEventListener(final PropertyChangeListener listener)
void addIngestModuleEventListener(final PropertyChangeListener listener)
static Case getCurrentCase()
synchronized static Logger getLogger(String name)
static void addEventTypeSubscriber(Set< Events > eventTypes, PropertyChangeListener subscriber)
static void removeEventTypeSubscriber(Set< Events > eventTypes, PropertyChangeListener subscriber)