org.sleuthkit.autopsy.datamodel.KeywordHits Class Reference

Inherits org.sleuthkit.autopsy.datamodel.AutopsyVisitableItem.

Classes
class	DetachableObserverChildFactory
class	HitsFactory
class	KeywordResults
class	KWHitsNodeBase
class	ListFactory
class	ListNode
class	RegExpInstanceKey
class	RegExpInstanceNode
class	RegExpInstancesFactory
class	RootNode
class	TermFactory
class	TermNode

Public Member Functions
	KeywordHits (SleuthkitCase skCase)

Static Public Attributes
static final String	NAME = BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getLabel()

Private Member Functions
BlackboardArtifactNode	createBlackboardArtifactNode (Long artifactId)

Static Private Member Functions
static boolean	isOnlyDefaultInstance (List< String > instances)

Private Attributes
final KeywordResults	keywordResults
SleuthkitCase	skCase

Static Private Attributes
static final String	DEFAULT_INSTANCE_NAME = "DEFAULT_INSTANCE_NAME"
static final String	KEYWORD_HIT_ATTRIBUTES_QUERY
static final String	KEYWORD_HITS = KeywordHits_kwHits_text()
static final Logger	logger = Logger.getLogger(KeywordHits.class.getName())
static final String	SIMPLE_LITERAL_SEARCH = KeywordHits_simpleLiteralSearch_text()
static final String	SIMPLE_REGEX_SEARCH = KeywordHits_singleRegexSearch_text()

Detailed Description

Keyword hits node support

Definition at line 61 of file KeywordHits.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordHits

(

SleuthkitCase

skCase

)

Definition at line 104 of file KeywordHits.java.

References org.sleuthkit.autopsy.datamodel.KeywordHits.skCase.

Member Function Documentation

BlackboardArtifactNode org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode ( Long  artifactId )

private

Create a blackboard node for the given Keyword Hit artifact

Parameters

artifactId

Returns

Node or null on error

Definition at line 826 of file KeywordHits.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addNodeProperty(), and org.sleuthkit.autopsy.datamodel.ContentUtils.getStringTime().

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.RegExpInstancesFactory.createNodeForKey(), and org.sleuthkit.autopsy.datamodel.KeywordHits.HitsFactory.createNodeForKey().

static boolean org.sleuthkit.autopsy.datamodel.KeywordHits.isOnlyDefaultInstance ( List< String >  instances )

staticprivate

Definition at line 100 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.RegExpInstancesFactory.createKeys().

Member Data Documentation

final String org.sleuthkit.autopsy.datamodel.KeywordHits.DEFAULT_INSTANCE_NAME = "DEFAULT_INSTANCE_NAME"

staticprivate

String used in the instance MAP so that exact matches and substring can fit into the same data structure as regexps, even though they don't use instances.

Definition at line 82 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.KEYWORD_HIT_ATTRIBUTES_QUERY

staticprivate

Initial value:

= "SELECT blackboard_attributes.value_text, "
            + "blackboard_attributes.value_int32, "
            + "blackboard_attributes.artifact_id, " 
            + "blackboard_attributes.attribute_type_id "
            + "FROM blackboard_attributes, blackboard_artifacts "
            + "WHERE blackboard_attributes.artifact_id = blackboard_artifacts.artifact_id "
            + " AND blackboard_artifacts.artifact_type_id = " + BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getTypeID() 
            + " AND (attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_SET_NAME.getTypeID()
            + " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD.getTypeID()
            + " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD_SEARCH_TYPE.getTypeID()
            + " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD_REGEXP.getTypeID()
            + ")"

query attributes table for the ones that we need for the tree

Definition at line 87 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.KEYWORD_HITS = KeywordHits_kwHits_text()

staticprivate

Definition at line 66 of file KeywordHits.java.

final KeywordResults org.sleuthkit.autopsy.datamodel.KeywordHits.keywordResults

private

Definition at line 75 of file KeywordHits.java.

final Logger org.sleuthkit.autopsy.datamodel.KeywordHits.logger = Logger.getLogger(KeywordHits.class.getName())

staticprivate

Definition at line 63 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.NAME = BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getLabel()

static

Definition at line 72 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.SIMPLE_LITERAL_SEARCH = KeywordHits_simpleLiteralSearch_text()

staticprivate

Definition at line 68 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.SIMPLE_REGEX_SEARCH = KeywordHits_singleRegexSearch_text()

staticprivate

Definition at line 70 of file KeywordHits.java.

SleuthkitCase org.sleuthkit.autopsy.datamodel.KeywordHits.skCase

private

Definition at line 74 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordHits().

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/datamodel/KeywordHits.java