Autopsy
4.7.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
class | ImportCaseData |
Static Public Member Functions | |
static void | importCase (ImportCaseData icd) throws Exception |
Static Private Member Functions | |
static void | copyImages (ImportCaseData icd) throws Exception |
static void | copyResults (ImportCaseData icd) throws IOException |
static void | deconflictDatabaseName (ImportCaseData icd) throws ClassNotFoundException, SQLException, Exception |
static File | findInputFolder (ImportCaseData icd) |
static void | fixPaths (ImportCaseData icd) throws SQLException, Exception |
static String | getNullableInt (ResultSet rs, int index) throws SQLException |
static String | getNullableLong (ResultSet rs, int index) throws SQLException |
static Connection | getPostgreSQLConnection (ImportCaseData icd) throws SQLException |
static Connection | getPostgreSQLConnection (ImportCaseData icd, String dbName) throws SQLException |
static Connection | getSQLiteConnection (ImportCaseData icd) throws SQLException |
static void | importDb (ImportCaseData icd) throws SQLException, ClassNotFoundException, Exception |
static void | populateNullableByteArray (PreparedStatement pst, ResultSet rs, int rsIndex, int psIndex) throws SQLException |
static void | populateNullableNumeric (PreparedStatement pst, ResultSet rs, int rsIndex, int psIndex) throws SQLException |
static void | populateNullableString (PreparedStatement pst, ResultSet rs, int rsIndex, int psIndex) throws SQLException |
Static Private Attributes | |
static final String | AUTOPSY_DB_FILE = "autopsy.db" |
static final String | DOTAUT = CaseMetadata.getFileExtension() |
static final int | MAX_DB_NAME_LENGTH = 63 |
static final String | MODULE_FOLDER = "ModuleOutput" |
static final String | POSTGRES_DEFAULT_DB_NAME = "postgres" |
static final String | TIMELINE_FILE = "events.db" |
static final String | TIMELINE_FOLDER = "Timeline" |
Import a case from single-user to multi-user.
DO NOT USE, NEEDS TO BE UPDATED
Definition at line 49 of file SingleUserCaseConverter.java.
|
staticprivate |
Get the images from the old case and stage them for the new case, if the user chose to copy images over.
icd | the Import Case Data for the current case |
IOException |
Definition at line 971 of file SingleUserCaseConverter.java.
References org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.findInputFolder().
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importCase().
|
staticprivate |
Copy all folders at the base level to the new scheme involving hostname. Also take care of a few files such as logs, timeline database, etc.
icd | the Import Case Data for the current case |
IOException |
get hostname
Definition at line 255 of file SingleUserCaseConverter.java.
References org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.AUTOPSY_DB_FILE, org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.DOTAUT, org.sleuthkit.autopsy.coreutils.NetworkUtils.getLocalHostName(), org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.MODULE_FOLDER, org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.TIMELINE_FILE, and org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.TIMELINE_FOLDER.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importCase().
|
staticprivate |
Checks that the database name is unique. If it is not, attempts to add numbers to it until it is unique. Gives up if it goes through all positive integers without finding a unique name.
icd | the Import Case Data for the current case |
Exception | |
SQLException | |
ClassNotFoundException |
Definition at line 921 of file SingleUserCaseConverter.java.
References org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.getPostgreSQLConnection(), and org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.MAX_DB_NAME_LENGTH.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importDb().
|
staticprivate |
Figure out the input folder for images and return it.
icd | the Import Case Data for the current case |
we've found it
we've found it
Definition at line 232 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.copyImages().
|
staticprivate |
Fix up any paths in the database that refer to items that have moved. Candidates include events.db, input images, reports, file paths, etc.
icd | the Import Case Data for the current case |
Exception | |
SQLExceptionException |
Fix paths in reports, tsk_files_path, and tsk_image_names tables
Definition at line 995 of file SingleUserCaseConverter.java.
References org.sleuthkit.autopsy.coreutils.NetworkUtils.getLocalHostName(), and org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.getPostgreSQLConnection().
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importCase().
|
staticprivate |
Return an integer from the ResultSet converted to String or NULL, by checking ResultSet.wasNull()
rs | the ResultSet to work with |
index | the index into the ResultSet to work with |
SQLException |
Definition at line 1051 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importDb().
|
staticprivate |
Return a long from the ResultSet converted to String or NULL, by checking ResultSet.wasNull()
rs | the ResultSet to work with |
index | the index into the ResultSet to work with |
SQLException |
Definition at line 1071 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importDb().
|
staticprivate |
Open the PostgreSQL database
icd | Import Case Data holding connection credentials |
SQLException | if unable to open |
Definition at line 1149 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.deconflictDatabaseName(), org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.fixPaths(), and org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importDb().
|
staticprivate |
Open the PostgreSQL database
icd | Import Case Data holding connection credentials |
dbName | the name of the database to open |
SQLException | if unable to open |
Definition at line 1163 of file SingleUserCaseConverter.java.
|
staticprivate |
Open the SQLite database
icd | Import Case Data holding database path details |
SQLException | if unable to open |
Definition at line 1181 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importDb().
|
static |
Handles the heavy lifting for importing a case from single-user to multi-user. Creates new .aut file, moves folders to the right place, imports the database, and updates paths within the database.
icd | the Import Case Data for the current case |
java.lang.Exception |
Definition at line 161 of file SingleUserCaseConverter.java.
References org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.copyImages(), org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.copyResults(), org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.fixPaths(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseNotes(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseNumber(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminer(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminerEmail(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminerPhone(), org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importDb(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.
|
staticprivate |
Import the database from SQLite to PostgreSQL. Do not change any of the data while loading it over. Fixing paths is done once the database is completely imported.
icd | the Import Case Data for the current case |
Exception | |
SQLException | |
ClassNotFoundException |
Migrate from SQLite to PostgreSQL
Definition at line 302 of file SingleUserCaseConverter.java.
References org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.deconflictDatabaseName(), org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.getNullableInt(), org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.getNullableLong(), org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.getPostgreSQLConnection(), org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.getSQLiteConnection(), org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.populateNullableByteArray(), org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.populateNullableNumeric(), and org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.populateNullableString().
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importCase().
|
staticprivate |
Place a NULL inside a prepared statement if needed, otherwise, place the byte array that was in the ResultSet.
pst | the prepared statement |
rs | the ResultSet to work with |
rsIndex | index for the result set |
psIndex | index for the prepared statement |
SQLException |
Definition at line 1111 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importDb().
|
staticprivate |
Place a NULL inside a prepared statement if needed, otherwise, place the double that was in the ResultSet.
pst | the prepared statement |
rs | the ResultSet to work with |
rsIndex | index for the result set |
psIndex | index for the prepared statement |
SQLException |
Definition at line 1131 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importDb().
|
staticprivate |
Place a NULL inside a prepared statement if needed, otherwise, place the String that was in the ResultSet.
pst | the prepared statement |
rs | the ResultSet to work with |
rsIndex | index for the result set |
psIndex | index for the prepared statement |
SQLException |
Definition at line 1091 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.importDb().
|
staticprivate |
Definition at line 52 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.copyResults().
|
staticprivate |
Definition at line 53 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.copyResults().
|
staticprivate |
Definition at line 57 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.deconflictDatabaseName().
|
staticprivate |
Definition at line 51 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.copyResults().
|
staticprivate |
Definition at line 56 of file SingleUserCaseConverter.java.
|
staticprivate |
Definition at line 55 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.copyResults().
|
staticprivate |
Definition at line 54 of file SingleUserCaseConverter.java.
Referenced by org.sleuthkit.autopsy.casemodule.SingleUserCaseConverter.copyResults().
Copyright © 2012-2016 Basis Technology. Generated on: Mon Jun 18 2018
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.