Autopsy
4.6.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherited by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
Public Member Functions | |
void | addArtifact (CorrelationAttribute eamArtifact) throws EamDbException |
void | addReferenceInstance (EamGlobalFileInstance eamGlobalFileInstance, CorrelationAttribute.Type correlationType) throws EamDbException |
void | bulkInsertArtifacts () throws EamDbException |
void | bulkInsertCases (List< CorrelationCase > cases) throws EamDbException |
void | bulkInsertReferenceTypeEntries (Set< EamGlobalFileInstance > globalInstances, CorrelationAttribute.Type contentType) throws EamDbException |
void | deleteOrganization (EamOrganization organizationToDelete) throws EamDbException |
void | deleteReferenceSet (int referenceSetID) throws EamDbException |
List< EamGlobalSet > | getAllReferenceSets (CorrelationAttribute.Type correlationType) throws EamDbException |
List< CorrelationAttributeInstance > | getArtifactInstancesByPath (CorrelationAttribute.Type aType, String filePath) throws EamDbException |
List< CorrelationAttributeInstance > | getArtifactInstancesByTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException |
List< CorrelationAttributeInstance > | getArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException |
CorrelationCase | getCase (Case autopsyCase) throws EamDbException |
CorrelationCase | getCaseByUUID (String caseUUID) throws EamDbException |
List< CorrelationCase > | getCases () throws EamDbException |
CorrelationAttribute.Type | getCorrelationTypeById (int typeId) throws EamDbException |
Long | getCountArtifactInstancesByCaseDataSource (String caseUUID, String dataSourceID) throws EamDbException |
Long | getCountArtifactInstancesByTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException |
Long | getCountArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException |
Long | getCountUniqueCaseDataSourceTuplesHavingTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException |
Long | getCountUniqueDataSources () throws EamDbException |
CorrelationDataSource | getDataSource (CorrelationCase correlationCase, String dataSourceDeviceId) throws EamDbException |
List< CorrelationDataSource > | getDataSources () throws EamDbException |
String | getDbInfo (String name) throws EamDbException |
List< CorrelationAttribute.Type > | getDefinedCorrelationTypes () throws EamDbException |
List< CorrelationAttribute.Type > | getEnabledCorrelationTypes () throws EamDbException |
CoordinationService.Lock | getExclusiveMultiUserDbLock () throws EamDbException |
int | getFrequencyPercentage (CorrelationAttribute corAttr) throws EamDbException |
List< String > | getListCasesHavingArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException |
EamOrganization | getOrganizationByID (int orgID) throws EamDbException |
List< EamOrganization > | getOrganizations () throws EamDbException |
List< EamGlobalFileInstance > | getReferenceInstancesByTypeValue (CorrelationAttribute.Type aType, String aValue) throws EamDbException |
EamGlobalSet | getReferenceSetByID (int globalSetID) throws EamDbException |
EamOrganization | getReferenceSetOrganization (int referenceSetID) throws EamDbException |
List< CorrelationAttribute.Type > | getSupportedCorrelationTypes () throws EamDbException |
boolean | isArtifactKnownBadByReference (CorrelationAttribute.Type aType, String value) throws EamDbException |
boolean | isFileHashInReferenceSet (String hash, int referenceSetID) throws EamDbException |
boolean | isValueInReferenceSet (String value, int referenceSetID, int correlationTypeID) throws EamDbException |
CorrelationCase | newCase (CorrelationCase eamCase) throws EamDbException |
CorrelationCase | newCase (Case autopsyCase) throws EamDbException |
int | newCorrelationType (CorrelationAttribute.Type newType) throws EamDbException |
void | newDataSource (CorrelationDataSource eamDataSource) throws EamDbException |
void | newDbInfo (String name, String value) throws EamDbException |
long | newOrganization (EamOrganization eamOrg) throws EamDbException |
int | newReferenceSet (EamGlobalSet eamGlobalSet) throws EamDbException |
void | prepareBulkArtifact (CorrelationAttribute eamArtifact) throws EamDbException |
boolean | referenceSetExists (String referenceSetName, String version) throws EamDbException |
boolean | referenceSetIsValid (int referenceSetID, String referenceSetName, String version) throws EamDbException |
void | reset () throws EamDbException |
void | saveSettings () |
void | setArtifactInstanceKnownStatus (CorrelationAttribute eamArtifact, TskData.FileKnown knownStatus) throws EamDbException |
void | shutdownConnections () throws EamDbException |
void | updateCase (CorrelationCase eamCase) throws EamDbException |
void | updateCorrelationType (CorrelationAttribute.Type aType) throws EamDbException |
void | updateDbInfo (String name, String value) throws EamDbException |
void | updateOrganization (EamOrganization updatedOrganization) throws EamDbException |
void | updateSettings () |
void | upgradeSchema () throws EamDbException, SQLException |
Static Public Member Functions | |
static EamDb | getInstance () throws EamDbException |
static boolean | isEnabled () |
Static Public Attributes | |
static final CaseDbSchemaVersionNumber | CURRENT_DB_SCHEMA_VERSION = new CaseDbSchemaVersionNumber(1, 1) |
static final int | SCHEMA_VERSION = 1 |
Main interface for interacting with the database
Definition at line 32 of file EamDb.java.
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.addArtifact | ( | CorrelationAttribute | eamArtifact | ) | throws EamDbException |
Inserts new Artifact(s) into the database. Should add associated Case and Data Source first.
eamArtifact | The artifact to add |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.eventlisteners.NewArtifactsRunner.run(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.DataAddedTask.run().
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.addReferenceInstance | ( | EamGlobalFileInstance | eamGlobalFileInstance, |
CorrelationAttribute.Type | correlationType | ||
) | throws EamDbException |
Add a new reference instance
eamGlobalFileInstance | The reference instance to add |
correlationType | Correlation Type that this Reference Instance is |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.bulkInsertArtifacts | ( | ) | throws EamDbException |
Executes a bulk insert of the eamArtifacts added from the prepareBulkArtifact() method
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.bulkInsertCases | ( | List< CorrelationCase > | cases | ) | throws EamDbException |
Executes a bulk insert of the cases
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.bulkInsertReferenceTypeEntries | ( | Set< EamGlobalFileInstance > | globalInstances, |
CorrelationAttribute.Type | contentType | ||
) | throws EamDbException |
Insert the bulk collection of Global File Instances
globalInstances | a Set of EamGlobalFileInstances to insert into the db. |
contentType | the Type of the global instances |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.ImportCentralRepoDbProgressDialog.CentralRepoImportWorker.doInBackground().
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.deleteOrganization | ( | EamOrganization | organizationToDelete | ) | throws EamDbException |
Delete an organization if it is not being used by any case.
organizationToDelete | the organization to be deleted |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.ManageOrganizationsDialog.deleteButtonActionPerformed().
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.deleteReferenceSet | ( | int | referenceSetID | ) | throws EamDbException |
Remove a reference set and all values contained in it.
referenceSetID |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.cancel(), and org.sleuthkit.autopsy.modules.hashdatabase.ImportCentralRepoDbProgressDialog.CentralRepoImportWorker.deleteIncompleteSet().
List<EamGlobalSet> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getAllReferenceSets | ( | CorrelationAttribute.Type | correlationType | ) | throws EamDbException |
Get all reference sets
correlationType | Type of sets to return |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getCentralRepoHashSetsFromDatabase().
List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getArtifactInstancesByPath | ( | CorrelationAttribute.Type | aType, |
String | filePath | ||
) | throws EamDbException |
Retrieves eamArtifact instances from the database that are associated with the aType and filePath
aType | EamArtifact.Type to search for |
filePath | File path to search for |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getArtifactInstancesByTypeValue | ( | CorrelationAttribute.Type | aType, |
String | value | ||
) | throws EamDbException |
Retrieves eamArtifact instances from the database that are associated with the eamArtifactType and eamArtifactValue of the given eamArtifact.
aType | EamArtifact.Type to search for |
value | Value to search for |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances().
List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getArtifactInstancesKnownBad | ( | CorrelationAttribute.Type | aType, |
String | value | ||
) | throws EamDbException |
Gets list of matching eamArtifact instances that have knownStatus = "Bad".
aType | EamArtifact.Type to search for |
value | Value to search for |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCase | ( | Case | autopsyCase | ) | throws EamDbException |
Retrieves Central Repo case based on an Autopsy Case
autopsyCase | Autopsy case to find corresponding CR case for |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromBlackboardArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromContent(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceAddedTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.CurrentCaseTask.run(), and org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.showCaseDetails().
CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCaseByUUID | ( | String | caseUUID | ) | throws EamDbException |
Retrieves Case details based on Case UUID
caseUUID | unique identifier for a case |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
List<CorrelationCase> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCases | ( | ) | throws EamDbException |
Retrieves cases that are in DB.
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
CorrelationAttribute.Type org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCorrelationTypeById | ( | int | typeId | ) | throws EamDbException |
Get the EamArtifact.Type that has the given Type.Id.
typeId | Type.Id of Correlation Type to get |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.ImportCentralRepoDbProgressDialog.CentralRepoImportWorker.doInBackground(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getCentralRepoHashSetsFromDatabase(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromContent(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalSetFromResultSet().
Long org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCountArtifactInstancesByCaseDataSource | ( | String | caseUUID, |
String | dataSourceID | ||
) | throws EamDbException |
Retrieves number of eamArtifact instances in the database that are associated with the caseDisplayName and dataSource of the given eamArtifact instance.
caseUUID | Case ID to search for |
dataSourceID | Data source ID to search for |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Long org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCountArtifactInstancesByTypeValue | ( | CorrelationAttribute.Type | aType, |
String | value | ||
) | throws EamDbException |
Retrieves number of artifact instances in the database that are associated with the ArtifactType and artifactValue of the given artifact.
aType | EamArtifact.Type to search for |
value | Value to search for |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Long org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCountArtifactInstancesKnownBad | ( | CorrelationAttribute.Type | aType, |
String | value | ||
) | throws EamDbException |
Count matching eamArtifacts instances that have knownStatus = "Bad".
aType | EamArtifact.Type to search for |
value | Value to search for |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Long org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue | ( | CorrelationAttribute.Type | aType, |
String | value | ||
) | throws EamDbException |
Retrieves number of unique caseDisplayName / dataSource tuples in the database that are associated with the artifactType and artifactValue of the given artifact.
aType | EamArtifact.Type to search for |
value | Value to search for |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Long org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCountUniqueDataSources | ( | ) | throws EamDbException |
Retrieves number of data sources in the database.
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getDataSource | ( | CorrelationCase | correlationCase, |
String | dataSourceDeviceId | ||
) | throws EamDbException |
Retrieves Data Source details based on data source device ID
correlationCase | the current CorrelationCase used for ensuring uniqueness of DataSource |
dataSourceDeviceId | the data source device ID number |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceAddedTask.run().
List<CorrelationDataSource> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getDataSources | ( | ) | throws EamDbException |
Retrieves data sources that are in DB
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
String org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getDbInfo | ( | String | name | ) | throws EamDbException |
Get the value for the given name from the name/value db_info table.
name | Name to search for |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getDefinedCorrelationTypes | ( | ) | throws EamDbException |
Get the list of EamArtifact.Type's that are defined in the DB and can be used to correlate artifacts.
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromBlackboardArtifact(), and org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelationAttributesFromNode().
List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getEnabledCorrelationTypes | ( | ) | throws EamDbException |
Get the list of enabled EamArtifact.Type's that will be used to correlate artifacts.
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
CoordinationService.Lock org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getExclusiveMultiUserDbLock | ( | ) | throws EamDbException |
Gets an exclusive lock (if applicable). Will return the lock if successful, null if unsuccessful because locking isn't supported, and throw an exception if we should have been able to get the lock but failed (meaning the database is in use).
EamDbException | if the coordination service is running but we fail to get the lock |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.upgradeDatabase().
int org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getFrequencyPercentage | ( | CorrelationAttribute | corAttr | ) | throws EamDbException |
Calculate the percentage of data sources that have this attribute value.
corAttr | Attribute type and value to get data about |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.showCommonalityDetails().
|
static |
Get the instance
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.
Definition at line 45 of file EamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.DISABLED, org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getInstance(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.getInstance(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.getSelectedPlatform(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.useCentralRepo().
Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.AddNewOrganizationDialog.bnOKActionPerformed(), org.sleuthkit.autopsy.centralrepository.optionspanel.EamDbSettingsDialog.bnOkActionPerformed(), org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.cancel(), org.sleuthkit.autopsy.centralrepository.optionspanel.ManageOrganizationsDialog.deleteButtonActionPerformed(), org.sleuthkit.autopsy.modules.hashdatabase.ImportCentralRepoDbProgressDialog.CentralRepoImportWorker.deleteIncompleteSet(), org.sleuthkit.autopsy.modules.hashdatabase.ImportCentralRepoDbProgressDialog.CentralRepoImportWorker.doInBackground(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getCentralRepoHashSetsFromDatabase(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromBlackboardArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromContent(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelationAttributesFromNode(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalSetFromResultSet(), org.sleuthkit.autopsy.centralrepository.optionspanel.ManageOrganizationsDialog.ManageOrganizationsDialog(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.IngestModuleEventListener.propertyChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.NewArtifactsRunner.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.showCaseDetails(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.showCommonalityDetails(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.upgradeDatabase().
List<String> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getListCasesHavingArtifactInstancesKnownBad | ( | CorrelationAttribute.Type | aType, |
String | value | ||
) | throws EamDbException |
Gets list of distinct case display names, where each case has 1+ Artifact Instance matching eamArtifact with knownStatus = "Bad".
aType | EamArtifact.Type to search for |
value | Value to search for |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.DataAddedTask.run().
EamOrganization org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getOrganizationByID | ( | int | orgID | ) | throws EamDbException |
Get an organization having the given ID
orgID | The id to look up |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
List<EamOrganization> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getOrganizations | ( | ) | throws EamDbException |
Get all organizations
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.ManageOrganizationsDialog.populateListAndSelect().
List<EamGlobalFileInstance> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getReferenceInstancesByTypeValue | ( | CorrelationAttribute.Type | aType, |
String | aValue | ||
) | throws EamDbException |
Get all reference entries having a given correlation type and value
aType | Type to use for matching |
aValue | Value to use for matching |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
EamGlobalSet org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getReferenceSetByID | ( | int | globalSetID | ) | throws EamDbException |
Get a global set by ID
globalSetID | The ID to look up |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
EamOrganization org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getReferenceSetOrganization | ( | int | referenceSetID | ) | throws EamDbException |
Get the organization associated with the given reference set.
referenceSetID | ID of the reference set |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getSupportedCorrelationTypes | ( | ) | throws EamDbException |
Get the list of supported EamArtifact.Type's that can be used to correlate artifacts.
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
boolean org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.isArtifactKnownBadByReference | ( | CorrelationAttribute.Type | aType, |
String | value | ||
) | throws EamDbException |
Is the artifact known as bad according to the reference entries?
aType | EamArtifact.Type to search for |
value | Value to search for |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
|
static |
Is the database enabled?
Definition at line 98 of file EamDb.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.DISABLED, org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.getSelectedPlatform(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.useCentralRepo().
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.HashLookupSettingsPanel.cancel(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.configureSettings(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.connect(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getCentralRepoHashSetsFromDatabase(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.isSupported(), org.sleuthkit.autopsy.centralrepository.eventlisteners.NewArtifactsRunner.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.DataAddedTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceAddedTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.CurrentCaseTask.run(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.setNode(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.updateHashSetsFromCentralRepository(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.upgradeDatabase().
boolean org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.isFileHashInReferenceSet | ( | String | hash, |
int | referenceSetID | ||
) | throws EamDbException |
Check if the given file hash is in this reference set. Only searches the reference_files table.
hash | |
referenceSetID |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
boolean org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.isValueInReferenceSet | ( | String | value, |
int | referenceSetID, | ||
int | correlationTypeID | ||
) | throws EamDbException |
Check if the given value is in a specific reference set
value | |
referenceSetID | |
correlationTypeID |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.newCase | ( | CorrelationCase | eamCase | ) | throws EamDbException |
Creates new Case in the database
Expects the Organization for this case to already exist in the database.
eamCase | The case to add |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromBlackboardArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromContent(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceAddedTask.run(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.CurrentCaseTask.run().
CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.newCase | ( | Case | autopsyCase | ) | throws EamDbException |
Creates new Case in the database from the given case
autopsyCase | The case to add |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
int org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.newCorrelationType | ( | CorrelationAttribute.Type | newType | ) | throws EamDbException |
Add a new EamArtifact.Type to the db.
newType | New type to add. |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.newDataSource | ( | CorrelationDataSource | eamDataSource | ) | throws EamDbException |
Creates new Data Source in the database
eamDataSource | the data source to add |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceAddedTask.run().
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.newDbInfo | ( | String | name, |
String | value | ||
) | throws EamDbException |
Add a new name/value pair in the db_info table.
name | Key to set |
value | Value to set |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
long org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.newOrganization | ( | EamOrganization | eamOrg | ) | throws EamDbException |
Add a new organization
eamOrg | The organization to add |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.AddNewOrganizationDialog.bnOKActionPerformed().
int org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.newReferenceSet | ( | EamGlobalSet | eamGlobalSet | ) | throws EamDbException |
Add a new Global Set
eamGlobalSet | The global set to add |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.modules.hashdatabase.ImportCentralRepoDbProgressDialog.CentralRepoImportWorker.doInBackground().
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.prepareBulkArtifact | ( | CorrelationAttribute | eamArtifact | ) | throws EamDbException |
Adds an eamArtifact to an internal list to be later added to DB. Artifact can have 1 or more Artifact Instances. Insert will be triggered by a threshold or a call to bulkInsertArtifacts().
eamArtifact | The artifact to add |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
boolean org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.referenceSetExists | ( | String | referenceSetName, |
String | version | ||
) | throws EamDbException |
Check whether a reference set with the given name/version is in the central repo. Used to check for name collisions when creating reference sets.
referenceSetName | |
version |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
boolean org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.referenceSetIsValid | ( | int | referenceSetID, |
String | referenceSetName, | ||
String | version | ||
) | throws EamDbException |
Check whether a reference set with the given parameters exists in the central repository. Used to check whether reference sets saved in the settings are still present.
referenceSetID | |
referenceSetName | |
version |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.reset | ( | ) | throws EamDbException |
Reset the database (testing method)
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.saveSettings | ( | ) |
Save settings
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.setArtifactInstanceKnownStatus | ( | CorrelationAttribute | eamArtifact, |
TskData.FileKnown | knownStatus | ||
) | throws EamDbException |
Sets an eamArtifact instance to the given known status. If eamArtifact exists, it is updated. If eamArtifact does not exist nothing happens
eamArtifact | Artifact containing exactly one (1) ArtifactInstance. |
knownStatus | The status to change the artifact to |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.run(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run().
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.shutdownConnections | ( | ) | throws EamDbException |
Shutdown the connection pool.
This closes the connection pool including all idle database connections. It will not close active/in-use connections. Thus, it is vital that there are no in-use connections when you call this method.
EamDbException | if there is a problem closing the connection pool. |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.EamDbSettingsDialog.bnOkActionPerformed(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.upgradeDatabase().
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.updateCase | ( | CorrelationCase | eamCase | ) | throws EamDbException |
Updates an existing Case in the database
eamCase | The case to update |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.updateCorrelationType | ( | CorrelationAttribute.Type | aType | ) | throws EamDbException |
Update a EamArtifact.Type.
aType | EamArtifact.Type to update. |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.updateDbInfo | ( | String | name, |
String | value | ||
) | throws EamDbException |
Update the value for a name in the name/value db_info table.
name | Name to find |
value | Value to assign to name. |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.updateOrganization | ( | EamOrganization | updatedOrganization | ) | throws EamDbException |
Update an existing organization.
updatedOrganization | the values the Organization with the same ID will be updated to in the database. |
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.AddNewOrganizationDialog.bnOKActionPerformed().
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.updateSettings | ( | ) |
Update settings
When using updateSettings, if any database settings have changed, you should call shutdownConnections() before using any API methods. That will ensure that any old connections are closed and all new connections will be made using the new settings.
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.EamDbSettingsDialog.bnOkActionPerformed().
void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.upgradeSchema | ( | ) | throws EamDbException, SQLException |
Upgrade the schema of the database (if needed)
EamDbException |
Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.upgradeDatabase().
|
static |
Definition at line 36 of file EamDb.java.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.upgradeSchema().
|
static |
Definition at line 34 of file EamDb.java.
Copyright © 2012-2016 Basis Technology. Generated on: Mon May 7 2018
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.