Autopsy
4.8.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.commonfilesearch.IntraCaseCommonAttributeSearcher.
Public Member Functions | |
AllIntraCaseCommonAttributeSearcher (Map< Long, String > dataSourceIdMap, boolean filterByMediaMimeType, boolean filterByDocMimeType, int percentageThreshold) | |
CommonAttributeSearchResults | findMatches () throws TskCoreException, NoCurrentCaseException, SQLException |
Protected Member Functions | |
String | buildSqlSelectStatement () |
Static Private Attributes | |
static final String | WHERE_CLAUSE = "%s md5 in (select md5 from tsk_files where (known != " + FileKnown.KNOWN.getFileKnownValue() + " OR known IS NULL)%s GROUP BY md5 HAVING COUNT(DISTINCT data_source_obj_id) > 1) order by md5" |
Provides logic for selecting common files from all data sources.
Definition at line 29 of file AllIntraCaseCommonAttributeSearcher.java.
org.sleuthkit.autopsy.commonfilesearch.AllIntraCaseCommonAttributeSearcher.AllIntraCaseCommonAttributeSearcher | ( | Map< Long, String > | dataSourceIdMap, |
boolean | filterByMediaMimeType, | ||
boolean | filterByDocMimeType, | ||
int | percentageThreshold | ||
) |
Implements the algorithm for getting common files across all data sources.
dataSourceIdMap | a map of obj_id to datasource name |
filterByMediaMimeType | match only on files whose mime types can be broadly categorized as media types |
filterByDocMimeType | match only on files whose mime types can be broadly categorized as document types |
percentageThreshold | omit any matches with frequency above this threshold |
Definition at line 44 of file AllIntraCaseCommonAttributeSearcher.java.
|
protected |
Definition at line 50 of file AllIntraCaseCommonAttributeSearcher.java.
|
inherited |
Generate a meta data object which encapsulates everything need to add the tree table tab to the top component.
TskCoreException | |
NoCurrentCaseException | |
SQLException |
Definition at line 105 of file IntraCaseCommonAttributeSearcher.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.casemodule.Case.getDisplayName().
|
staticprivate |
Definition at line 31 of file AllIntraCaseCommonAttributeSearcher.java.
Copyright © 2012-2018 Basis Technology. Generated on: Thu Oct 4 2018
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.