Autopsy
4.9.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.
Inherited by org.sleuthkit.autopsy.communications.RelationshipNode, and org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.
Public Member Functions | |
BlackboardArtifactNode (BlackboardArtifact artifact, String iconPath) | |
BlackboardArtifactNode (BlackboardArtifact artifact) | |
void | addNodeProperty (NodeProperty<?> np) |
Action[] | getActions (boolean context) |
BlackboardArtifact | getArtifact () |
T | getContent () |
List< Content > | getContentChildren () |
int | getContentChildrenCount () |
List< Long > | getContentChildrenIds () |
String | getItemType () |
String | getName () |
String | getSourceName () |
boolean | hasContentChildren () |
boolean | hasVisibleContentChildren () |
boolean | isLeafTypeNode () |
int | read (byte[] buf, long offset, long len) throws TskException |
void | setName (String name) |
Static Public Member Functions | |
static boolean | contentHasVisibleContentChildren (Content c) |
Protected Member Functions | |
final void | addCommentProperty (Sheet.Set sheetSet, List< Tag > tags, CorrelationAttributeInstance attribute) |
final void | addCountProperty (Sheet.Set sheetSet, CorrelationAttributeInstance attribute) |
final void | addScoreProperty (Sheet.Set sheetSet, List< Tag > tags) |
void | addTagProperty (Sheet.Set sheetSet) throws MissingResourceException |
final void | addTagProperty (Sheet.Set sheetSet, List< Tag > tags) |
Sheet | createSheet () |
void | finalize () throws Throwable |
final List< Tag > | getAllTagsFromDatabase () |
final CorrelationAttributeInstance | getCorrelationAttributeInstance () |
Private Member Functions | |
void | addEmailMsgProperty (Map< String, Object > map, BlackboardAttribute attribute) |
void | fillPropertyMap (Map< String, Object > map, BlackboardArtifact artifact) |
String | getRootParentName () |
void | removeListeners () |
void | setDisplayName () |
void | updateSheet () |
Static Private Member Functions | |
static Lookup | createLookup (BlackboardArtifact artifact) |
Private Attributes | |
final BlackboardArtifact | artifact |
Content | associated = null |
List< NodeProperty<?extends Object > > | customProperties |
final PropertyChangeListener | pcl |
final PropertyChangeListener | weakPcl = WeakListeners.propertyChange(pcl, null) |
Static Private Attributes | |
static final Set< Case.Events > | CASE_EVENTS_OF_INTEREST |
static Cache< Long, Content > | contentCache |
static final Logger | logger = Logger.getLogger(BlackboardArtifactNode.class.getName()) |
static final String | NO_DESCR = NbBundle.getMessage(BlackboardArtifactNode.class, "BlackboardArtifactNode.noDesc.text") |
static final Integer[] | SHOW_FILE_METADATA |
static final Integer[] | SHOW_UNIQUE_PATH |
Node wrapping a blackboard artifact object. This is generated from several places in the tree.
Definition at line 81 of file BlackboardArtifactNode.java.
org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode | ( | BlackboardArtifact | artifact, |
String | iconPath | ||
) |
Construct blackboard artifact node from an artifact, overriding the standard icon with the one at the path provided.
artifact | artifact to encapsulate |
iconPath | icon to use for the artifact |
Definition at line 176 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.Case.addEventTypeSubscriber(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact, org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.CASE_EVENTS_OF_INTEREST, org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createLookup(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayName(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.setName().
org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode | ( | BlackboardArtifact | artifact | ) |
Construct blackboard artifact node from an artifact and using default icon for artifact type
artifact | artifact to encapsulate |
Definition at line 201 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact.
|
protected |
Used by (subclasses of) BlackboardArtifactNode to add the comment property to their sheets.
sheetSet | the modifiable Sheet.Set returned by Sheet.get(Sheet.PROPERTIES) |
tags | the list of tags associated with the file |
attribute | the correlation attribute associated with this artifact's associated file, null if central repo is not enabled |
Definition at line 594 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_AND_TAG_COMMENTS, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_COMMENT, org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment(), org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.NO_COMMENT, org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.NO_DESCR, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_COMMENT, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_NO_COMMENT.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
|
protected |
Definition at line 687 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getInstance().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
|
private |
Fill map with EmailMsg properties, not all attributes are filled
map | map with preserved ordering, where property names/values are put |
attribute | attribute to check/fill as property |
Definition at line 791 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.associated, and org.sleuthkit.autopsy.datamodel.ContentUtils.getStringTime().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.fillPropertyMap().
void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addNodeProperty | ( | NodeProperty<?> | np | ) |
Add an additional custom node property to that node before it is displayed
np | NodeProperty to add |
Definition at line 731 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode().
|
protected |
Used by (subclasses of) BlackboardArtifactNode to add the Score property to their sheets.
sheetSet | the modifiable Sheet.Set returned by Sheet.get(Sheet.PROPERTIES) |
tags | the list of tags associated with the file |
Definition at line 632 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getInstance(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getKnownBadFileHashSets(), org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.Score.INTERESTING_SCORE, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.Score.NO_SCORE, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.Score.NOTABLE_SCORE.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
|
protected |
Used by (subclasses of) BlackboardArtifactNode to add the tags property to their sheets.
sheetSet | the modifiable Sheet.Set returned by Sheet.get(Sheet.PROPERTIES) |
Definition at line 545 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.NO_DESCR.
|
protected |
Used by (subclasses of) BlackboardArtifactNode to add the tags property to their sheets.
sheetSet | the modifiable Sheet.Set returned by Sheet.get(Sheet.PROPERTIES) |
tags | the list of tags which should appear as the value for the property |
Definition at line 568 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.NO_DESCR.
|
staticinherited |
Return true if the given content object has children. Useful for lazy loading.
c | The content object to look for children on |
Definition at line 111 of file AbstractContentNode.java.
|
staticprivate |
Create a Lookup based on what is in the passed in artifact.
artifact | The artifact to make a look up for. |
Definition at line 832 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().
|
protected |
Definition at line 337 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addScoreProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.fillPropertyMap(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAllTagsFromDatabase(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCorrelationAttributeInstance(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getRootParentName(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSourceName(), org.sleuthkit.autopsy.datamodel.ContentUtils.getStringTime(), org.sleuthkit.autopsy.core.UserPreferences.hideCentralRepoCommentsAndOccurrences(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.NO_DESCR.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSheet().
|
private |
Fill map with Artifact properties
map | map with preserved ordering, where property names/values are put |
artifact | to extract properties from |
Definition at line 747 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addEmailMsgProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.associated, and org.sleuthkit.autopsy.datamodel.ContentUtils.getStringTime().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
|
protected |
The finalizer removes event listeners as the BlackboardArtifactNode is being garbage collected. Yes, we know that finalizers are considered to be "bad" but since the alternative also relies on garbage collection being run and we know that finalize will be called when the object is being GC'd it seems like this is a reasonable solution.
Throwable |
Definition at line 215 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.removeListeners().
Action [] org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions | ( | boolean | context | ) |
Definition at line 235 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.timeline.actions.ViewFileInTimelineAction.createViewFileAction(), org.sleuthkit.autopsy.timeline.actions.ViewFileInTimelineAction.createViewSourceFileAction(), org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), and org.sleuthkit.autopsy.timeline.actions.ViewArtifactInTimelineAction.hasSupportedTimeStamp().
Referenced by org.sleuthkit.autopsy.directorytree.DataResultFilterNode.GetPopupActionsDisplayableItemNodeVisitor.visit().
|
protected |
Get all tags from the case database relating to the artifact and the file it is associated with.
Definition at line 524 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), and org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
BlackboardArtifact org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getArtifact | ( | ) |
Definition at line 224 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact.
Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.IsLeafItemVisitor.visit(), org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.ShowItemVisitor.visit(), and org.sleuthkit.autopsy.directorytree.DataResultFilterNode.GetPreferredActionsDisplayableItemNodeVisitor.visit().
|
inherited |
Return the content data associated with this node
Definition at line 80 of file AbstractContentNode.java.
|
inherited |
Return children of the underlying content.
Definition at line 192 of file AbstractContentNode.java.
|
inherited |
Get count of the underlying content object children.
Useful for lazy loading.
Definition at line 214 of file AbstractContentNode.java.
|
inherited |
Return ids of children of the underlying content. The ids can be treated as keys - useful for lazy loading.
Definition at line 172 of file AbstractContentNode.java.
|
protected |
Definition at line 573 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getInstanceFromContent(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.useCentralRepo().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getItemType | ( | ) |
Definition at line 854 of file BlackboardArtifactNode.java.
|
inherited |
Definition at line 90 of file AbstractContentNode.java.
|
private |
Definition at line 711 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.associated.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSourceName | ( | ) |
Return the name of the associated source file/content
Definition at line 315 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
|
inherited |
Return true if the underlying content object has children Useful for lazy loading.
Definition at line 152 of file AbstractContentNode.java.
|
inherited |
Return true if the underlying content object has children Useful for lazy loading.
Definition at line 100 of file AbstractContentNode.java.
boolean org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.isLeafTypeNode | ( | ) |
Definition at line 849 of file BlackboardArtifactNode.java.
|
inherited |
Reads the content of this node (of the underlying content object).
buf | buffer to read into |
offset | the starting offset in the content object |
len | the length to read |
TskException | exception thrown if the requested part of content could not be read |
Definition at line 240 of file AbstractContentNode.java.
|
private |
Definition at line 220 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.CASE_EVENTS_OF_INTEREST, and org.sleuthkit.autopsy.casemodule.Case.removeEventTypeSubscriber().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.finalize().
|
private |
Set the filter node display name. The value will either be the file name or something along the lines of e.g. "Messages Artifact" for keyword hits on artifacts.
Definition at line 275 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().
|
inherited |
Definition at line 85 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::BlackboardArtifactNode().
|
private |
Definition at line 707 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
|
private |
Definition at line 95 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getArtifact().
|
private |
Definition at line 96 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addEmailMsgProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.fillPropertyMap(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getRootParentName().
|
staticprivate |
Definition at line 84 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.removeListeners().
|
staticprivate |
Definition at line 91 of file BlackboardArtifactNode.java.
|
private |
Definition at line 98 of file BlackboardArtifactNode.java.
|
staticprivate |
Definition at line 83 of file BlackboardArtifactNode.java.
|
staticprivate |
|
private |
Definition at line 119 of file BlackboardArtifactNode.java.
|
staticprivate |
Definition at line 116 of file BlackboardArtifactNode.java.
|
staticprivate |
Definition at line 107 of file BlackboardArtifactNode.java.
|
private |
We pass a weak reference wrapper around the listener to the event publisher. This allows Netbeans to delete the node when the user navigates to another part of the tree (previously, nodes were not being deleted because the event publisher was holding onto a strong reference to the listener. We need to hold onto the weak reference here to support unregistering of the listener in removeListeners() below.
Definition at line 166 of file BlackboardArtifactNode.java.
Copyright © 2012-2018 Basis Technology. Generated on: Tue Dec 18 2018
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.