Autopsy
4.7.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.events.AutopsyEvent, and Serializable.
Classes | |
class | SerializableEventData |
Public Member Functions | |
ContentChangedEvent (ModuleContentEvent eventData) | |
Object | getOldValue () |
Object | getSource () |
SourceType | getSourceType () |
Private Attributes | |
transient ModuleContentEvent | eventData |
Static Private Attributes | |
static final Logger | logger = Logger.getLogger(ContentChangedEvent.class.getName()) |
static final long | serialVersionUID = 1L |
Event published when new content is added to a case or there is a change a recorded attribute of existing content. For example, a content changed event should be published when an analysis (ingest) module adds an extracted or carved file to a case. The "old" value is a legacy ModuleContentEvent object. The "new" value is null.
Definition at line 39 of file ContentChangedEvent.java.
org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.ContentChangedEvent | ( | ModuleContentEvent | eventData | ) |
Constructs a event to be published when new content is added to a case or there is a change a recorded attribute of existing content.
eventData | A ModuleContentEvent object containing the data associated with the content addition or change. |
Putting a serializable data holding object into newValue to allow for lazy loading of the ModuleContent object. This bypasses the issues related to the serialization and de-serialization of Content objects when the event is published over a network.
Definition at line 52 of file ContentChangedEvent.java.
References org.sleuthkit.autopsy.ingest.IngestManager.IngestModuleEvent.CONTENT_CHANGED, and org.sleuthkit.autopsy.ingest.ModuleContentEvent.getModuleName().
Object org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue | ( | ) |
Gets the legacy ModuleContentEvent object associated with this event. Note that the content object that was added or changed can be accessed via the getSource() method of the ModuleContentEvent.
The eventData field is set in the constructor, but it is transient so it will become null when the event is serialized for publication over a network. Doing a lazy load of the ModuleContentEvent object bypasses the issues related to the serialization and de-serialization of Content objects and may also save database round trips from other nodes since subscribers to this event are often not interested in the event data.
Definition at line 74 of file ContentChangedEvent.java.
References org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.SerializableEventData.contentId, org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.eventData, org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), and org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.SerializableEventData.moduleName.
|
inherited |
Gets the source type (local or remote) as a string. This is for clients that do not have access to the AutopsyEvent type, and is necessary because the events package is not currently a public package within the Autopsy-Core NetBeans Module (NBM).
Definition at line 82 of file AutopsyEvent.java.
|
inherited |
Gets the source type (local or remote).
Definition at line 69 of file AutopsyEvent.java.
References org.sleuthkit.autopsy.events.AutopsyEvent.sourceType.
|
private |
Definition at line 43 of file ContentChangedEvent.java.
Referenced by org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue().
|
staticprivate |
Definition at line 42 of file ContentChangedEvent.java.
|
staticprivate |
Definition at line 41 of file ContentChangedEvent.java.
Copyright © 2012-2016 Basis Technology. Generated on: Mon Jun 18 2018
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.