Public Member Functions
	EamArtifactUtil ()

Static Public Member Functions
static List< CorrelationAttribute >	getCorrelationAttributeFromBlackboardArtifact (BlackboardArtifact bbArtifact, boolean addInstanceDetails, boolean checkEnabled)

static CorrelationAttribute	getCorrelationAttributeFromContent (Content content)

static String	getEmailAddressAttrString ()

static boolean	isSupportedAbstractFileType (AbstractFile file)

static CorrelationAttribute	makeCorrelationAttributeFromContent (Content content)

Static Private Member Functions
static CorrelationAttribute	getCorrelationAttributeFromBlackboardArtifact (CorrelationAttribute.Type correlationType, BlackboardArtifact bbArtifact) throws EamDbException

Static Private Attributes
static final Logger	logger = Logger.getLogger(EamArtifactUtil.class.getName())

static final long	serialVersionUID = 1L

Detailed Description

Definition at line 39 of file EamArtifactUtil.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.EamArtifactUtil ( )

Definition at line 44 of file EamArtifactUtil.java.

Member Function Documentation

static List<CorrelationAttribute> org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromBlackboardArtifact	(	BlackboardArtifact	bbArtifact,
		boolean	addInstanceDetails,
		boolean	checkEnabled
	)

static

Static factory method to examine a BlackboardArtifact to determine if it has contents that can be used for Correlation. If so, return a EamArtifact with a single EamArtifactInstance within. If not, return null.

Parameters

bbArtifact	BlackboardArtifact to examine
addInstanceDetails	If true, add instance details from bbArtifact into the returned structure
checkEnabled	If true, only create a CorrelationAttribute if it is enabled

Returns: List of EamArtifacts

Definition at line 66 of file EamArtifactUtil.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromBlackboardArtifact(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelationAttributesFromNode(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.BlackboardTagTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.DataAddedTask.run(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run().

static CorrelationAttribute org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromBlackboardArtifact	(	CorrelationAttribute.Type	correlationType,
		BlackboardArtifact	bbArtifact
	)		throws EamDbException

staticprivate

Create an EamArtifact of type correlationType if one can be generated based on the data in the blackboard artifact.

Parameters

correlationType	The Central Repository artifact type to create
bbArtifact	The blackboard artifact to pull data from

Returns: the new EamArtifact, or null if one was not created because bbArtifact did not contain the needed data

Definition at line 139 of file EamArtifactUtil.java.

static CorrelationAttribute org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromContent ( Content content )

static

Retrieve CorrelationAttribute from the given Content.

Parameters

content The content object

Returns: The new CorrelationAttribute, or null if retrieval failed.

Definition at line 226 of file EamArtifactUtil.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.FILES_TYPE_ID, org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationDataSource.fromTSKDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCase(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCorrelationAttribute(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCorrelationTypeById(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getInstance(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.isSupportedAbstractFileType(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.newCase().

Referenced by org.sleuthkit.autopsy.centralrepository.AddEditCentralRepoCommentAction.AddEditCentralRepoCommentAction().

static String org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getEmailAddressAttrString ( )

static

Definition at line 48 of file EamArtifactUtil.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromBlackboardArtifact().

static boolean org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.isSupportedAbstractFileType ( AbstractFile file )

static

Check whether the given abstract file should be processed for the central repository.

Parameters

file	The file to test

Returns: true if the file should be added to the central repo, false otherwise

Definition at line 318 of file EamArtifactUtil.java.

Referenced by org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< SpecialDirectory >.getActions(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromContent(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeCorrelationAttributeFromContent().

static CorrelationAttribute org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeCorrelationAttributeFromContent ( Content content )

static

Create an EamArtifact from the given Content. Will return null if an artifact can not be created - this is not necessarily an error case, it just means an artifact can't be made. If creation fails due to an error (and not that the file is the wrong type or it has no hash), the error will be logged before returning.

Does not add the artifact to the database.

Parameters

content The content object

Returns: The new EamArtifact or null if creation failed

Definition at line 271 of file EamArtifactUtil.java.

Referenced by org.sleuthkit.autopsy.centralrepository.AddEditCentralRepoCommentAction.AddEditCentralRepoCommentAction(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.run(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run().

Member Data Documentation

final Logger org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.logger = Logger.getLogger(EamArtifactUtil.class.getName())

staticprivate

Definition at line 42 of file EamArtifactUtil.java.

final long org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.serialVersionUID = 1L

staticprivate

Definition at line 41 of file EamArtifactUtil.java.

The documentation for this class was generated from the following file:

/home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/centralrepository/datamodel/EamArtifactUtil.java

Public Member Functions

Static Public Member Functions

Static Private Member Functions

Static Private Attributes

Detailed Description

Constructor & Destructor Documentation

Member Function Documentation

Member Data Documentation