org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker Class Reference

Inherits org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.

Public Member Functions
ReadOnlyBooleanProperty	cancellableProperty ()
synchronized boolean	isCancelRequested ()
boolean	requestCancel ()

Protected Member Functions
Void	call () throws Exception
void	done ()
void	updateMessage (String message)
void	updateProgress (double workDone, double max)
void	updateProgress (long workDone, long max)
void	updateTitle (String title)

Private Member Functions
void	insertArtifactDerivedEvents (EventDB.EventTransaction trans)
void	insertArtifactTags (int currentWorkTotal, List< BlackboardArtifactTag > artifactTags, EventDB.EventTransaction trans)
void	insertContentTags (int currentWorkTotal, List< ContentTag > contentTags, EventDB.EventTransaction trans)
void	insertEventForArtifact (final ArtifactEventType type, BlackboardArtifact bbart, EventDB.EventTransaction trans) throws TskCoreException
void	insertEventsForFile (AbstractFile f, EventDB.EventTransaction trans) throws TskCoreException
void	insertMACTimeEvents (final int numFiles, List< Long > fileIDs, EventDB.EventTransaction trans)
void	populateEventType (final ArtifactEventType type, EventDB.EventTransaction trans)

Private Attributes
final ReadOnlyBooleanWrapper	cancellable = new ReadOnlyBooleanWrapper(true)
final DBPopulationMode	dbPopulationMode
ProgressHandle	progressHandle
final SleuthkitCase	skCase
final TagsManager	tagsManager

Detailed Description

//TODO: I don't like the coupling to ProgressHandle in this task, but the alternatives I can think of seem even worse. -jm

Definition at line 430 of file EventsRepository.java.

Member Function Documentation

Void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call ( ) throws Exception

protected

Definition at line 511 of file EventsRepository.java.

References org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationMode.FULL, org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllBlackboardArtifactTags(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllContentTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactDerivedEvents(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertContentTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertMACTimeEvents(), org.sleuthkit.autopsy.timeline.db.EventsRepository.invalidateCaches(), org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.isCancelRequested(), org.sleuthkit.autopsy.timeline.db.EventsRepository.populateFilterData(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationMode.TAGS_ONLY.

ReadOnlyBooleanProperty org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.cancellableProperty

(

)

Definition at line 441 of file EventsRepository.java.

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.done ( )

protected

Definition at line 668 of file EventsRepository.java.

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactDerivedEvents ( EventDB.EventTransaction  trans )

private

Definition at line 587 of file EventsRepository.java.

References org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.allTypes, org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.isCancelRequested(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.populateEventType().

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call().

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactTags ( int  currentWorkTotal, List< BlackboardArtifactTag >  artifactTags, EventDB.EventTransaction  trans  )

private

Definition at line 565 of file EventsRepository.java.

References org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.isCancelRequested(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateProgress().

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call().

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertContentTags ( int  currentWorkTotal, List< ContentTag >  contentTags, EventDB.EventTransaction  trans  )

private

Definition at line 576 of file EventsRepository.java.

References org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.isCancelRequested(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateProgress().

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call().

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertEventForArtifact ( final ArtifactEventType  type, BlackboardArtifact  bbart, EventDB.EventTransaction  trans  ) throws TskCoreException

private

Definition at line 708 of file EventsRepository.java.

References org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.buildEventDescription(), and org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact().

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.populateEventType().

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertEventsForFile ( AbstractFile  f, EventDB.EventTransaction  trans  ) throws TskCoreException

private

Definition at line 625 of file EventsRepository.java.

References org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.FILE_ACCESSED, org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.FILE_CHANGED, org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.FILE_CREATED, org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.FILE_MODIFIED, and org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent().

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertMACTimeEvents().

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertMACTimeEvents ( final int  numFiles, List< Long >  fileIDs, EventDB.EventTransaction  trans  )

private

Definition at line 602 of file EventsRepository.java.

References org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertEventsForFile(), org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.isCancelRequested(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateMessage(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateProgress().

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call().

synchronized boolean org.sleuthkit.autopsy.timeline.CancellationProgressTask< X >.isCancelRequested ( )

inherited

Definition at line 35 of file CancellationProgressTask.java.

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.call(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactDerivedEvents(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertContentTags(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertMACTimeEvents().

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.populateEventType ( final ArtifactEventType  type, EventDB.EventTransaction  trans  )

private

populate all the events of one type

Parameters

type	the type to populate
trans	the db transaction to use

Definition at line 688 of file EventsRepository.java.

References org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getArtifactTypeID(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getDisplayName(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertEventForArtifact(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateProgress().

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactDerivedEvents().

boolean org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.requestCancel

(

)

Definition at line 446 of file EventsRepository.java.

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateMessage ( String  message )

protected

Definition at line 458 of file EventsRepository.java.

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertMACTimeEvents().

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateProgress ( double  workDone, double  max  )

protected

Definition at line 464 of file EventsRepository.java.

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertContentTags(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertMACTimeEvents(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.populateEventType().

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateProgress ( long  workDone, long  max  )

protected

Definition at line 472 of file EventsRepository.java.

void org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.updateTitle ( String  title )

protected

Definition at line 452 of file EventsRepository.java.

Member Data Documentation

final ReadOnlyBooleanWrapper org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.cancellable = new ReadOnlyBooleanWrapper(true)

private

Definition at line 432 of file EventsRepository.java.

final DBPopulationMode org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.dbPopulationMode

private

Definition at line 434 of file EventsRepository.java.

ProgressHandle org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.progressHandle

private

Definition at line 438 of file EventsRepository.java.

final SleuthkitCase org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.skCase

private

Definition at line 435 of file EventsRepository.java.

final TagsManager org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.tagsManager

private

Definition at line 436 of file EventsRepository.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/timeline/db/EventsRepository.java