Inherits org.sleuthkit.autopsy.commonfilesearch.IntraCaseCommonAttributeSearcher.
|
static final String | WHERE_CLAUSE = "%s md5 in (select md5 from tsk_files where (known != " + FileKnown.KNOWN.getFileKnownValue() + " OR known IS NULL)%s GROUP BY md5 HAVING COUNT(DISTINCT data_source_obj_id) > 1) order by md5" |
|
Provides logic for selecting common files from all data sources.
Definition at line 29 of file AllIntraCaseCommonAttributeSearcher.java.
org.sleuthkit.autopsy.commonfilesearch.AllIntraCaseCommonAttributeSearcher.AllIntraCaseCommonAttributeSearcher |
( |
Map< Long, String > |
dataSourceIdMap, |
|
|
boolean |
filterByMediaMimeType, |
|
|
boolean |
filterByDocMimeType, |
|
|
int |
percentageThreshold |
|
) |
| |
Implements the algorithm for getting common files across all data sources.
- Parameters
-
dataSourceIdMap | a map of obj_id to datasource name |
filterByMediaMimeType | match only on files whose mime types can be broadly categorized as media types |
filterByDocMimeType | match only on files whose mime types can be broadly categorized as document types |
percentageThreshold | omit any matches with frequency above this threshold |
Definition at line 44 of file AllIntraCaseCommonAttributeSearcher.java.
String org.sleuthkit.autopsy.commonfilesearch.AllIntraCaseCommonAttributeSearcher.buildSqlSelectStatement |
( |
| ) |
|
|
protected |
final String org.sleuthkit.autopsy.commonfilesearch.AllIntraCaseCommonAttributeSearcher.WHERE_CLAUSE = "%s md5 in (select md5 from tsk_files where (known != " + FileKnown.KNOWN.getFileKnownValue() + " OR known IS NULL)%s GROUP BY md5 HAVING COUNT(DISTINCT data_source_obj_id) > 1) order by md5" |
|
staticprivate |
The documentation for this class was generated from the following file: