Autopsy  4.7.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Protected Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.commonfilesearch.SingleDataSource Class Reference

Inherits org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.

Public Member Functions

 SingleDataSource (Long dataSourceId, Map< Long, String > dataSourceIdMap, boolean filterByMediaMimeType, boolean filterByDocMimeType)
 
CommonFilesMetadata findCommonFiles () throws TskCoreException, NoCurrentCaseException, SQLException
 

Protected Member Functions

String buildCategorySelectionString ()
 
String buildSqlSelectStatement ()
 
String buildTabTitle ()
 

Private Attributes

final String dataSourceName
 
final Long selectedDataSourceId
 

Static Private Attributes

static final String WHERE_CLAUSE = "%s md5 in (select md5 from tsk_files where md5 in (select md5 from tsk_files where (known != 1 OR known IS NULL) and data_source_obj_id=%s%s) GROUP BY md5 HAVING COUNT(*) > 1) order by md5"
 

Detailed Description

Provides logic for selecting common files from a single data source.

Definition at line 27 of file SingleDataSource.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.commonfilesearch.SingleDataSource.SingleDataSource ( Long  dataSourceId,
Map< Long, String >  dataSourceIdMap,
boolean  filterByMediaMimeType,
boolean  filterByDocMimeType 
)

Implements the algorithm for getting common files that appear at least once in the given data source

Parameters
dataSourceIddata source id for which common files must appear at least once
dataSourceIdMapa map of obj_id to datasource name
filterByMediaMimeTypematch only on files whose mime types can be broadly categorized as media types
filterByDocMimeTypematch only on files whose mime types can be broadly categorized as document types

Definition at line 43 of file SingleDataSource.java.

Member Function Documentation

String org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.buildCategorySelectionString ( )
protectedinherited
String org.sleuthkit.autopsy.commonfilesearch.SingleDataSource.buildSqlSelectStatement ( )
protected
String org.sleuthkit.autopsy.commonfilesearch.SingleDataSource.buildTabTitle ( )
protected
CommonFilesMetadata org.sleuthkit.autopsy.commonfilesearch.CommonFilesMetadataBuilder.findCommonFiles ( ) throws TskCoreException, NoCurrentCaseException, SQLException
inherited

Generate a meta data object which encapsulates everything need to add the tree table tab to the top component.

Returns
a data object with all of the matched files in a hierarchical format
Exceptions
TskCoreException
NoCurrentCaseException
SQLException

Definition at line 169 of file CommonFilesMetadataBuilder.java.

References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().

Referenced by org.sleuthkit.autopsy.commonfilesearch.CommonFilesPanel.search().

Member Data Documentation

final String org.sleuthkit.autopsy.commonfilesearch.SingleDataSource.dataSourceName
private
final Long org.sleuthkit.autopsy.commonfilesearch.SingleDataSource.selectedDataSourceId
private

Definition at line 30 of file SingleDataSource.java.

final String org.sleuthkit.autopsy.commonfilesearch.SingleDataSource.WHERE_CLAUSE = "%s md5 in (select md5 from tsk_files where md5 in (select md5 from tsk_files where (known != 1 OR known IS NULL) and data_source_obj_id=%s%s) GROUP BY md5 HAVING COUNT(*) > 1) order by md5"
staticprivate

The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Mon Jun 18 2018
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.