Autopsy
4.7.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.ingest.IngestModule.
Inherited by org.sleuthkit.autopsy.centralrepository.ingestmodule.IngestModule, org.sleuthkit.autopsy.examples.SampleFileIngestModule, org.sleuthkit.autopsy.ingest.FileIngestModuleAdapter, org.sleuthkit.autopsy.ingest.FileIngestPipeline.PipelineModule, org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule, org.sleuthkit.autopsy.modules.exif.ExifParserFileIngestModule, org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule, org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdIngestModule, org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule, org.sleuthkit.autopsy.modules.interestingitems.FilesIdentifierIngestModule, org.sleuthkit.autopsy.modules.photoreccarver.PhotoRecCarverFileIngestModule, and org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.
Public Member Functions | |
ProcessResult | process (AbstractFile file) |
void | shutDown () |
void | startUp (IngestJobContext context) throws IngestModuleException |
Interface that must be implemented by all file ingest modules. See description of IngestModule for more details on interface behavior.
Definition at line 27 of file FileIngestModule.java.
ProcessResult org.sleuthkit.autopsy.ingest.FileIngestModule.process | ( | AbstractFile | file | ) |
Processes a file. Called between calls to startUp() and shutDown(). Will be called for each file in a data source.
file | The file to analyze. |
Implemented in org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule, org.sleuthkit.autopsy.ingest.FileIngestPipeline.PipelineModule, org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule, org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule, org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule, org.sleuthkit.autopsy.modules.exif.ExifParserFileIngestModule, org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdIngestModule, org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule, and org.sleuthkit.autopsy.ingest.FileIngestModuleAdapter.
Referenced by org.sleuthkit.autopsy.ingest.FileIngestPipeline.PipelineModule.process().
void org.sleuthkit.autopsy.ingest.FileIngestModule.shutDown | ( | ) |
Invoked by Autopsy when an ingest job is completed (either because the data has been analyzed or because the job was canceled - check IngestJobContext.fileIngestIsCancelled()), before the ingest module instance is discarded. The module should respond by doing things like releasing private resources, submitting final results, and posting a final ingest message.
Implemented in org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule, org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule, org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule, org.sleuthkit.autopsy.modules.exif.ExifParserFileIngestModule, org.sleuthkit.autopsy.ingest.FileIngestPipeline.PipelineModule, org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule, org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdIngestModule, org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule, and org.sleuthkit.autopsy.ingest.FileIngestModuleAdapter.
Referenced by org.sleuthkit.autopsy.ingest.FileIngestPipeline.PipelineModule.shutDown().
|
inherited |
Invoked by Autopsy to allow an ingest module instance to set up any internal data structures and acquire any private resources it will need during an ingest job. If the module depends on loading any resources, it should do so in this method so that it can throw an exception in the case of an error and alert the user. Exceptions that are thrown from process() and shutDown() are logged, but do not stop processing of the data source.
context | Provides data and services specific to the ingest job and the ingest pipeline of which the module is a part. |
Implemented in org.sleuthkit.autopsy.ingest.FileIngestPipeline.PipelineModule, org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule, org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule, org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule, org.sleuthkit.autopsy.modules.exif.ExifParserFileIngestModule, org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdIngestModule, org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule, org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule, org.sleuthkit.autopsy.modules.e01verify.E01VerifyIngestModule, org.sleuthkit.autopsy.recentactivity.RAImageIngestModule, org.sleuthkit.autopsy.test.CustomArtifactsCreatorDataSourceIngestModule, org.sleuthkit.autopsy.ingest.DataSourceIngestModuleAdapter, and org.sleuthkit.autopsy.ingest.FileIngestModuleAdapter.
Referenced by org.sleuthkit.autopsy.ingest.FileIngestPipeline.PipelineModule.startUp().
Copyright © 2012-2016 Basis Technology. Generated on: Mon Jun 18 2018
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.