Inherits Serializable.

Classes
class	Type

Public Member Functions
	CorrelationAttributeInstance (CorrelationAttributeInstance.Type correlationType, String correlationValue, CorrelationCase eamCase, CorrelationDataSource eamDataSource, String filePath, String comment, TskData.FileKnown knownStatus, long fileObjectId) throws EamDbException, CorrelationAttributeNormalizationException

Boolean	equals (CorrelationAttributeInstance otherInstance)

String	getComment ()

CorrelationCase	getCorrelationCase ()

CorrelationDataSource	getCorrelationDataSource ()

Type	getCorrelationType ()

String	getCorrelationValue ()

Long	getFileObjectId ()

String	getFilePath ()

int	getID ()

TskData.FileKnown	getKnownStatus ()

boolean	isDatabaseInstance ()

void	setComment (String comment)

void	setKnownStatus (TskData.FileKnown knownStatus)

String	toString ()

Static Public Member Functions
static List< CorrelationAttributeInstance.Type >	getDefaultCorrelationTypes () throws EamDbException

Static Public Attributes
static final int	DOMAIN_TYPE_ID = 1

static final int	EMAIL_TYPE_ID = 2

static final int	FILES_TYPE_ID = 0

static final int	ICCID_TYPE_ID = 9

static final int	IMEI_TYPE_ID = 7

static final int	IMSI_TYPE_ID = 8

static final int	MAC_TYPE_ID = 6

static final int	PHONE_TYPE_ID = 3

static final int	SSID_TYPE_ID = 5

static final int	USBID_TYPE_ID = 4

Private Attributes
String	comment

CorrelationCase	correlationCase

CorrelationDataSource	correlationDataSource

CorrelationAttributeInstance.Type	correlationType

String	correlationValue

String	filePath

int	ID

TskData.FileKnown	knownStatus

Long	objectId

Static Private Attributes
static final long	serialVersionUID = 1L

Detailed Description

Used to store details about a specific instance of a CorrelationAttribute. Includes its data source, path, etc.

Definition at line 39 of file CorrelationAttributeInstance.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.CorrelationAttributeInstance	(	CorrelationAttributeInstance.Type	correlationType,
		String	correlationValue,
		CorrelationCase	eamCase,
		CorrelationDataSource	eamDataSource,
		String	filePath,
		String	comment,
		TskData.FileKnown	knownStatus,
		long	fileObjectId
	)		throws EamDbException, CorrelationAttributeNormalizationException

Definition at line 53 of file CorrelationAttributeInstance.java.

Member Function Documentation

Boolean org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals ( CorrelationAttributeInstance otherInstance )

Definition at line 92 of file CorrelationAttributeInstance.java.

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment ( )

Returns: the comment

Definition at line 170 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.addCentralRepositoryEntry(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationCase ( )

Returns: the eamCase

Definition at line 149 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.addCentralRepositoryEntry(), org.sleuthkit.autopsy.commonfilesearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationDataSource ( )

Returns: the eamDataSource

Definition at line 156 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.commonfilesearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

Type org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType ( )

Returns: the correlation Type

Definition at line 125 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.addCentralRepositoryEntry(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue ( )

Returns: the correlationValue

Definition at line 118 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty(), org.sleuthkit.autopsy.commonfilesearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances().

static List<CorrelationAttributeInstance.Type> org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getDefaultCorrelationTypes ( ) throws EamDbException

static

Load the default correlation types

Exceptions

EamDbException if the Type's dbTableName has invalid characters/format

Definition at line 240 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.commonfilesearch.CommonAttributeCaseSearchResults.filterMetadata(), org.sleuthkit.autopsy.commonfilesearch.CommonAttributeCountSearchResults.filterMetadata(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelationAttributesFromNode(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDbSettings.initializeDatabaseSchema(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.initializeDatabaseSchema(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.insertDefaultCorrelationTypes(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFileObjectId ( )

Get the objectId of the file associated with the correlation attribute or NULL if the objectId is not available.

Returns: the objectId of the file

Definition at line 208 of file CorrelationAttributeInstance.java.

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFilePath ( )

Returns: the filePath

Definition at line 163 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.addCentralRepositoryEntry(), org.sleuthkit.autopsy.commonfilesearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getID ( )

Returns: the database ID

Definition at line 142 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

TskData.FileKnown org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getKnownStatus ( )

Get this knownStatus. This only indicates whether an item has been tagged as notable and should never return KNOWN.

Returns: BAD if the item has been tagged as notable, UNKNOWN otherwise

Definition at line 187 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run().

boolean org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.isDatabaseInstance ( )

Is this a database instance?

Returns: True if the instance ID is greater or equal to zero; otherwise false.

Definition at line 135 of file CorrelationAttributeInstance.java.

void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setComment ( String comment )

Parameters

comment the comment to set

Definition at line 177 of file CorrelationAttributeInstance.java.

void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setKnownStatus ( TskData.FileKnown knownStatus )

Set the knownStatus. This only indicates whether an item has been tagged as notable and should never be set to KNOWN.

Parameters

knownStatus Should be BAD if the item is tagged as notable, UNKNOWN otherwise

Definition at line 198 of file CorrelationAttributeInstance.java.

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.toString ( )

Definition at line 104 of file CorrelationAttributeInstance.java.

Member Data Documentation

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.comment

private

Definition at line 49 of file CorrelationAttributeInstance.java.

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationCase

private

Definition at line 46 of file CorrelationAttributeInstance.java.

CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationDataSource

private

Definition at line 47 of file CorrelationAttributeInstance.java.

CorrelationAttributeInstance.Type org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationType

private

Definition at line 45 of file CorrelationAttributeInstance.java.

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationValue

private

Definition at line 44 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.DOMAIN_TYPE_ID = 1

static

Definition at line 214 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstancesFromBlackboardArtifact(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.EMAIL_TYPE_ID = 2

static

Definition at line 215 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstancesFromBlackboardArtifact(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.filePath

private

Definition at line 48 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.FILES_TYPE_ID = 0

static

Definition at line 213 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.ICCID_TYPE_ID = 9

static

Definition at line 222 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstancesFromBlackboardArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.DataAddedTask.run().

int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.ID

private

Definition at line 43 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.IMEI_TYPE_ID = 7

static

Definition at line 220 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstancesFromBlackboardArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.DataAddedTask.run().

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.IMSI_TYPE_ID = 8

static

Definition at line 221 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstancesFromBlackboardArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.DataAddedTask.run().

TskData.FileKnown org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.knownStatus

private

Definition at line 50 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.MAC_TYPE_ID = 6

static

Definition at line 219 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstancesFromBlackboardArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.DataAddedTask.run().

Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.objectId

private

Definition at line 51 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.PHONE_TYPE_ID = 3

static

Definition at line 216 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstancesFromBlackboardArtifact(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

final long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.serialVersionUID = 1L

staticprivate

Definition at line 41 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.SSID_TYPE_ID = 5

static

Definition at line 218 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstancesFromBlackboardArtifact(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.USBID_TYPE_ID = 4

static

Definition at line 217 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstancesFromBlackboardArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.DataAddedTask.run().

The documentation for this class was generated from the following file:

/home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/centralrepository/datamodel/CorrelationAttributeInstance.java

Classes

Public Member Functions

Static Public Member Functions

Static Public Attributes

Private Attributes

Static Private Attributes

Detailed Description

Constructor & Destructor Documentation

Member Function Documentation

Member Data Documentation