org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType Interface Reference

Inherits org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.

Inherited by org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes.

Classes
class	AttributeEventDescription
class	AttributeExtractor
class	EmptyExtractor

Public Member Functions
BlackboardArtifact.Type	getArtifactType ()
default int	getArtifactTypeID ()
default BaseTypes	getBaseType ()
default Color	getColor ()
BlackboardAttribute.Type	getDateTimeAttributeType ()
String	getDisplayName ()
Function< BlackboardArtifact, String >	getFullExtractor ()
Image	getFXImage ()
String	getIconBase ()
Function< BlackboardArtifact, String >	getMedExtractor ()
Function< BlackboardArtifact, String >	getShortExtractor ()
default List<?extends EventType >	getSiblingTypes ()
EventType	getSubType (String string)
List<?extends EventType >	getSubTypes ()
default List<?extends EventType >	getSubTypesRecusive ()
EventType	getSuperType ()
EventTypeZoomLevel	getZoomLevel ()
int	ordinal ()
default AttributeEventDescription	parseAttributesHelper (BlackboardArtifact artf) throws TskCoreException

Static Public Member Functions
static AttributeEventDescription	buildEventDescription (ArtifactEventType type, BlackboardArtifact artf) throws TskCoreException
static BlackboardAttribute	getAttributeSafe (BlackboardArtifact artf, BlackboardAttribute.Type attrType)
static Comparator< EventType >	getComparator ()

Static Public Attributes
static final List<?extends EventType >	allTypes = RootEventType.getInstance().getSubTypesRecusive()
static final Logger	LOGGER = Logger.getLogger(ArtifactEventType.class.getName())

Detailed Description

Definition at line 34 of file ArtifactEventType.java.

Member Function Documentation

static AttributeEventDescription org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.buildEventDescription ( ArtifactEventType  type, BlackboardArtifact  artf  ) throws TskCoreException

static

Build a AttributeEventDescription derived from a BlackboardArtifact. This is a template method that relies on each ArtifactEventType's implementation of ArtifactEventType::parseAttributesHelper() to know how to go from BlackboardAttributes to the event description.

Parameters

type
artf	the BlackboardArtifact to derive the event description from

Returns

an AttributeEventDescription derived from the given artifact, if the given artifact has no timestamp

Exceptions

TskCoreException

is there is a problem accessing the blackboard data

Definition at line 159 of file ArtifactEventType.java.

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertEventForArtifact().

BlackboardArtifact.Type org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getArtifactType

(

)

Get the artifact type this event type is derived from.

Returns

The artifact type this event type is derived from.

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getArtifactTypeID().

default int org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getArtifactTypeID

(

)

Get the ID of the the artifact type that this EventType is derived from.

Returns

the ID of the the artifact type that this EventType is derived from.

Definition at line 58 of file ArtifactEventType.java.

References org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getArtifactType().

Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.populateEventType().

static BlackboardAttribute org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getAttributeSafe ( BlackboardArtifact  artf, BlackboardAttribute.Type  attrType  )

static

Definition at line 198 of file ArtifactEventType.java.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.AttributeExtractor.apply().

default BaseTypes org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getBaseType ( )

inherited

Definition at line 42 of file EventType.java.

References org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getBaseType(), and org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSuperType().

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getBaseType().

default Color org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getColor ( )

inherited

Returns

the color used to represent this event type visually

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType.

Definition at line 63 of file EventType.java.

References org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getColor(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSiblingTypes(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSubTypes(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSuperType(), and org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.ordinal().

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getColor(), and org.sleuthkit.autopsy.timeline.filters.TypeFilter.getColor().

static Comparator<EventType> org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getComparator ( )

staticinherited

Definition at line 37 of file EventType.java.

BlackboardAttribute.Type org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getDateTimeAttributeType

(

)

The attribute type this event type is derived from.

Returns

The attribute type this event type is derived from.

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.parseAttributesHelper().

String org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getDisplayName ( )

inherited

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.BaseTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.

Referenced by org.sleuthkit.autopsy.timeline.ui.AbstractTimelineChart< String, Number, Node, EventCountsChart >.createSeries(), org.sleuthkit.autopsy.timeline.filters.TypeFilter.getDisplayName(), org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.populateEventType(), org.sleuthkit.autopsy.timeline.ShowInTimelineDialog.TypeTableCell< X >.updateItem(), and org.sleuthkit.autopsy.timeline.ui.listvew.ListTimeline.EventTypeCell.updateItem().

Function<BlackboardArtifact, String> org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getFullExtractor

(

)

Returns

a function from an artifact to a String to use as part of the full event description

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.parseAttributesHelper().

Image org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getFXImage ( )

inherited

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType, org.sleuthkit.autopsy.timeline.datamodel.eventtype.BaseTypes, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.

Referenced by org.sleuthkit.autopsy.timeline.filters.TypeFilter.getFXImage(), org.sleuthkit.autopsy.timeline.ShowInTimelineDialog.TypeTableCell< X >.updateItem(), and org.sleuthkit.autopsy.timeline.ui.listvew.ListTimeline.EventTypeCell.updateItem().

String org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getIconBase ( )

inherited

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType, org.sleuthkit.autopsy.timeline.datamodel.eventtype.BaseTypes, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.

Function<BlackboardArtifact, String> org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getMedExtractor

(

)

Returns

a function from an artifact to a String to use as part of the medium event description

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.parseAttributesHelper().

Function<BlackboardArtifact, String> org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getShortExtractor

(

)

Returns

a function from an artifact to a String to use as part of the short event description

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.parseAttributesHelper().

default List<? extends EventType> org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSiblingTypes ( )

inherited

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType.

Definition at line 79 of file EventType.java.

References org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSubTypes(), and org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSuperType().

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getColor().

EventType org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSubType ( String  string )

inherited

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.BaseTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType.

List<? extends EventType> org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSubTypes ( )

inherited

Returns

a list of event types, one for each subtype of this eventype, or an empty list if this event type has no subtypes

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getColor(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSiblingTypes(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSubTypesRecusive(), and org.sleuthkit.autopsy.timeline.filters.TypeFilter.TypeFilter().

default List<? extends EventType> org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSubTypesRecusive ( )

inherited

Definition at line 50 of file EventType.java.

References org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSubTypes().

EventType org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSuperType ( )

inherited

Returns

the super type of this event

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.BaseTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getBaseType(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getColor(), and org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSiblingTypes().

EventTypeZoomLevel org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getZoomLevel ( )

inherited

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.WebTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.BaseTypes, org.sleuthkit.autopsy.timeline.datamodel.eventtype.FileSystemTypes, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType.

int org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.ordinal ( )

inherited

Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getColor().

default AttributeEventDescription org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.parseAttributesHelper

(

BlackboardArtifact

artf

)

throws TskCoreException

given an artifact, pull out the time stamp, and compose the descriptions. Each implementation of ArtifactEventType needs to implement parseAttributesHelper() as hook for buildEventDescription(org.sleuthkit.datamodel.BlackboardArtifact) to invoke. Most subtypes can use this default implementation.

Parameters

artf

Returns

an AttributeEventDescription containing the timestamp and description information

Exceptions

TskCoreException

Definition at line 75 of file ArtifactEventType.java.

References org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getDateTimeAttributeType(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getFullExtractor(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getMedExtractor(), and org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getShortExtractor().

Member Data Documentation

final List<? extends EventType> org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.allTypes = RootEventType.getInstance().getSubTypesRecusive()

staticinherited

Definition at line 35 of file EventType.java.

Referenced by org.sleuthkit.autopsy.timeline.db.EventDB.constructTimeLineEvent(), org.sleuthkit.autopsy.timeline.db.EventDB.countEventsByType(), org.sleuthkit.autopsy.timeline.db.EventDB.eventClusterHelper(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactDerivedEvents().

final Logger org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.LOGGER = Logger.getLogger(ArtifactEventType.class.getName())

static

Definition at line 36 of file ArtifactEventType.java.

---

The documentation for this interface was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/timeline/datamodel/eventtype/ArtifactEventType.java