org.sleuthkit.autopsy.datamodel.KeywordHits Class Reference

Inherits org.sleuthkit.autopsy.datamodel.AutopsyVisitableItem.

Classes
class	DetachableObserverChildFactory
class	HitsFactory
class	KeywordResults
class	KWHitsNodeBase
class	ListFactory
class	ListNode
class	RegExpInstanceKey
class	RegExpInstanceNode
class	RegExpInstancesFactory
class	RootNode
class	TermFactory
class	TermNode

Public Member Functions
	KeywordHits (SleuthkitCase skCase, long objId)

Static Public Attributes
static final String	NAME = BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getLabel()

Private Member Functions
BlackboardArtifactNode	createBlackboardArtifactNode (Long artifactId)

Static Private Member Functions
static boolean	isOnlyDefaultInstance (List< String > instances)

Private Attributes
final long	datasourceObjId
final KeywordResults	keywordResults
SleuthkitCase	skCase

Static Private Attributes
static final String	DEFAULT_INSTANCE_NAME = "DEFAULT_INSTANCE_NAME"
static final String	KEYWORD_HIT_ATTRIBUTES_QUERY
static final String	KEYWORD_HITS = KeywordHits_kwHits_text()
static final Logger	logger = Logger.getLogger(KeywordHits.class.getName())
static final String	SIMPLE_LITERAL_SEARCH = KeywordHits_simpleLiteralSearch_text()
static final String	SIMPLE_REGEX_SEARCH = KeywordHits_singleRegexSearch_text()

Detailed Description

Keyword hits node support

Definition at line 64 of file KeywordHits.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordHits	(	SleuthkitCase	skCase,
		long	objId
	)

Constructor

Parameters

skCase	Case DB
objId	Object id of the data source

Definition at line 125 of file KeywordHits.java.

References org.sleuthkit.autopsy.datamodel.KeywordHits.skCase.

Member Function Documentation

BlackboardArtifactNode org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode ( Long  artifactId )

private

Create a blackboard node for the given Keyword Hit artifact

Parameters

artifactId

Returns

Node or null on error

Definition at line 853 of file KeywordHits.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addNodeProperty(), and org.sleuthkit.autopsy.datamodel.ContentUtils.getStringTime().

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.RegExpInstancesFactory.createNodeForKey(), and org.sleuthkit.autopsy.datamodel.KeywordHits.HitsFactory.createNodeForKey().

static boolean org.sleuthkit.autopsy.datamodel.KeywordHits.isOnlyDefaultInstance ( List< String >  instances )

staticprivate

Definition at line 105 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.RegExpInstancesFactory.createKeys().

Member Data Documentation

final long org.sleuthkit.autopsy.datamodel.KeywordHits.datasourceObjId

private

Definition at line 79 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordResults.update().

final String org.sleuthkit.autopsy.datamodel.KeywordHits.DEFAULT_INSTANCE_NAME = "DEFAULT_INSTANCE_NAME"

staticprivate

String used in the instance MAP so that exact matches and substring can fit into the same data structure as regexps, even though they don't use instances.

Definition at line 86 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.KEYWORD_HIT_ATTRIBUTES_QUERY

staticprivate

Initial value:

= "SELECT blackboard_attributes.value_text, "
            + "blackboard_attributes.value_int32, "
            + "blackboard_attributes.artifact_id, " 
            + "blackboard_attributes.attribute_type_id "
            + "FROM blackboard_attributes, blackboard_artifacts "
            + "WHERE blackboard_attributes.artifact_id = blackboard_artifacts.artifact_id "
            + " AND blackboard_artifacts.artifact_type_id = " + BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getTypeID() 
            + " AND (attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_SET_NAME.getTypeID()
            + " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD.getTypeID()
            + " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD_SEARCH_TYPE.getTypeID()
            + " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD_REGEXP.getTypeID()
            + ")"

query attributes table for the ones that we need for the tree

Definition at line 92 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordResults.update().

final String org.sleuthkit.autopsy.datamodel.KeywordHits.KEYWORD_HITS = KeywordHits_kwHits_text()

staticprivate

Definition at line 69 of file KeywordHits.java.

final KeywordResults org.sleuthkit.autopsy.datamodel.KeywordHits.keywordResults

private

Definition at line 78 of file KeywordHits.java.

final Logger org.sleuthkit.autopsy.datamodel.KeywordHits.logger = Logger.getLogger(KeywordHits.class.getName())

staticprivate

Definition at line 66 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.NAME = BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getLabel()

static

Definition at line 75 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.SIMPLE_LITERAL_SEARCH = KeywordHits_simpleLiteralSearch_text()

staticprivate

Definition at line 71 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.SIMPLE_REGEX_SEARCH = KeywordHits_singleRegexSearch_text()

staticprivate

Definition at line 73 of file KeywordHits.java.

SleuthkitCase org.sleuthkit.autopsy.datamodel.KeywordHits.skCase

private

Definition at line 77 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordHits().

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/datamodel/KeywordHits.java