org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder Class Reference

Inherited by org.sleuthkit.autopsy.commonfilesearch.AllDataSourcesCommonFilesAlgorithm, and org.sleuthkit.autopsy.commonfilesearch.SingleDataSource.

Public Member Functions
CommonFilesMetadata	findCommonFiles () throws TskCoreException, NoCurrentCaseException, SQLException

Protected Member Functions
String	buildCategorySelectionString ()
abstract String	buildSqlSelectStatement ()
abstract String	buildTabTitle ()

Private Attributes
final Map< Long, String >	dataSourceIdToNameMap
final boolean	filterByDoc
final boolean	filterByMedia

Static Private Attributes
static final String	filterByMimeTypesWhereClause = " and mime_type in (%s)"
static final Set< String >	MEDIA_PICS_VIDEO_MIME_TYPES
static final Set< String >	TEXT_FILES_MIME_TYPES

Detailed Description

Generates a List<CommonFilesMetadata> when findCommonFiles() is called, which organizes files by md5 to prepare to display in viewer.

This entire thing runs on a background thread where exceptions are handled.

Definition at line 49 of file CommonFilesMetadataBuilder.java.

Member Function Documentation

String org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.buildCategorySelectionString ( )

protected

Definition at line 248 of file CommonFilesMetadataBuilder.java.

Referenced by org.sleuthkit.autopsy.commonfilesearch.AllDataSourcesCommonFilesAlgorithm.buildTabTitle(), and org.sleuthkit.autopsy.commonfilesearch.SingleDataSource.buildTabTitle().

abstract String org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.buildSqlSelectStatement ( )

abstractprotected

Should build a SQL SELECT statement to be passed to SleuthkitCase.executeQuery(sql) which will select the desired file ids and MD5 hashes.

The statement should select obj_id, md5, data_source_obj_id in that order.

Returns

sql string select statement

abstract String org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.buildTabTitle ( )

abstractprotected

Referenced by org.sleuthkit.autopsy.commonfilesearch.CommonFilesPanel.search().

CommonFilesMetadata org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.findCommonFiles

(

)

throws TskCoreException, NoCurrentCaseException, SQLException

Generate a meta data object which encapsulates everything need to add the tree table tab to the top component.

Returns

a data object with all of the matched files in a hierarchical format

Exceptions

TskCoreException
NoCurrentCaseException
SQLException

Definition at line 169 of file CommonFilesMetadataBuilder.java.

References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().

Referenced by org.sleuthkit.autopsy.commonfilesearch.CommonFilesPanel.search().

Member Data Documentation

final Map<Long, String> org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.dataSourceIdToNameMap

private

Definition at line 51 of file CommonFilesMetadataBuilder.java.

final boolean org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.filterByDoc

private

Definition at line 53 of file CommonFilesMetadataBuilder.java.

final boolean org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.filterByMedia

private

Definition at line 52 of file CommonFilesMetadataBuilder.java.

final String org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.filterByMimeTypesWhereClause = " and mime_type in (%s)"

staticprivate

Definition at line 54 of file CommonFilesMetadataBuilder.java.

final Set<String> org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.MEDIA_PICS_VIDEO_MIME_TYPES

staticprivate

Initial value:

= Stream.of(
            "image/bmp", 
            "image/gif", 
            "image/jpeg", 
            "image/png", 
            "image/tiff", 
            "image/vnd.adobe.photoshop", 
            "image/x-raw-nikon", 
            "image/x-ms-bmp", 
            "image/x-icon", 
            "video/webm", 
            "video/3gpp", 
            "video/3gpp2", 
            "video/ogg", 
            "video/mpeg", 
            "video/mp4", 
            "video/quicktime", 
            "video/x-msvideo", 
            "video/x-flv", 
            "video/x-m4v", 
            "video/x-ms-wmv", 
            "application/vnd.ms-asf", 
            "application/vnd.rn-realmedia", 
            "application/x-shockwave-flash" 
    ).collect(Collectors.toSet())

Definition at line 63 of file CommonFilesMetadataBuilder.java.

final Set<String> org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.TEXT_FILES_MIME_TYPES

staticprivate

Initial value:

= Stream.of(
            "text/plain", 
            "application/rtf", 
            "application/pdf", 
            "text/css", 
            "text/html", 
            "text/csv", 
            "application/json", 
            "application/javascript", 
            "application/xml", 
            "text/calendar", 
            "application/x-msoffice", 
            "application/x-ooxml", 
            "application/msword", 
            "application/vnd.openxmlformats-officedocument.wordprocessingml.document", 
            "application/vnd.ms-powerpoint", 
            "application/vnd.openxmlformats-officedocument.presentationml.presentation", 
            "application/vnd.ms-excel", 
            "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", 
            "application/vnd.oasis.opendocument.presentation", 
            "application/vnd.oasis.opendocument.spreadsheet", 
            "application/vnd.oasis.opendocument.text" 
    ).collect(Collectors.toSet())

Definition at line 97 of file CommonFilesMetadataBuilder.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/commonfilesearch/CommonFilesMetadataBuilder.java