Autopsy
3.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.datamodel.DisplayableItemNode.
Public Member Functions | |
BlackboardArtifactNode (BlackboardArtifact artifact, String iconPath) | |
BlackboardArtifactNode (BlackboardArtifact artifact) | |
boolean | isLeafTypeNode () |
Protected Member Functions | |
Sheet | createSheet () |
Private Member Functions | |
void | setDisplayName () |
String | getRootParentName () |
void | fillPropertyMap (Map< String, Object > map, BlackboardArtifact artifact) |
String | getIcon (BlackboardArtifact.ARTIFACT_TYPE type) |
Static Private Member Functions | |
static Lookup | createLookup (BlackboardArtifact artifact) |
static Content | getAssociatedContent (BlackboardArtifact artifact) |
static TextMarkupLookup | getHighlightLookup (BlackboardArtifact artifact, Content content) |
Private Attributes | |
final BlackboardArtifact | artifact |
final Content | associated |
List< NodeProperty<?extends Object > > | customProperties |
Static Private Attributes | |
static final Integer[] | SHOW_UNIQUE_PATH |
static final Integer[] | SHOW_FILE_METADATA |
Node wrapping a blackboard artifact object. This is generated from several places in the tree.
Definition at line 47 of file BlackboardArtifactNode.java.
org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode | ( | BlackboardArtifact | artifact, |
String | iconPath | ||
) |
Construct blackboard artifact node from an artifact and using provided icon
artifact | artifact to encapsulate |
iconPath | icon to use for the artifact |
Definition at line 77 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact, org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createLookup(), org::sleuthkit::datamodel::BlackboardArtifact.getArtifactID(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayName().
org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode | ( | BlackboardArtifact | artifact | ) |
Construct blackboard artifact node from an artifact and using default icon for artifact type
artifact | artifact to encapsulate |
Definition at line 94 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact, org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createLookup(), org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.fromID(), org::sleuthkit::datamodel::BlackboardArtifact.getArtifactID(), org::sleuthkit::datamodel::BlackboardArtifact.getArtifactTypeID(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getIcon(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayName().
|
staticprivate |
Create a Lookup based on what is in the passed in artifact.
artifact |
Definition at line 357 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAssociatedContent(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getHighlightLookup().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().
|
protected |
Definition at line 137 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.fillPropertyMap(), org::sleuthkit::datamodel::Content.getAllArtifacts(), org::sleuthkit::datamodel::BlackboardArtifact.getArtifactTypeID(), org::sleuthkit::datamodel::AbstractFile.getAtime(), org::sleuthkit::datamodel::AbstractFile.getCrtime(), org::sleuthkit::datamodel::AbstractFile.getCtime(), org::sleuthkit::datamodel::Content.getDataSource(), org::sleuthkit::datamodel::AbstractFile.getMtime(), org::sleuthkit::datamodel::Content.getName(), org::sleuthkit::datamodel::AbstractFile.getNameExtension(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getRootParentName(), org::sleuthkit::datamodel::Content.getSize(), org.sleuthkit.autopsy.datamodel.ContentUtils.getStringTime(), org::sleuthkit::datamodel::Content.getUniquePath(), org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_EXT_MISMATCH_DETECTED, and org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_FILE_TYPE_SIG.
|
private |
Fill map with Artifact properties
map | map with preserved ordering, where property names/values are put |
artifact | to extract properties from |
Definition at line 307 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.associated, org.sleuthkit.autopsy.datamodel.ContentUtils.getStringTime(), org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_ASSOCIATED_ARTIFACT, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_DATETIME, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_DATETIME_CREATED, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_DATETIME_END, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_DATETIME_MODIFIED, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_DATETIME_RCVD, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_DATETIME_SENT, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_DATETIME_START, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_PATH_ID, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_SET_NAME, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_TAGGED_ARTIFACT, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_TEXT, and org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_TOOL_OUTPUT.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
|
staticprivate |
Definition at line 377 of file BlackboardArtifactNode.java.
References org::sleuthkit::datamodel::SleuthkitCase.getContentById(), org::sleuthkit::datamodel::BlackboardArtifact.getObjectID(), and org::sleuthkit::datamodel::BlackboardArtifact.getSleuthkitCase().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createLookup().
|
staticprivate |
Definition at line 387 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.TextMarkupLookup.createInstance(), org::sleuthkit::datamodel::BlackboardArtifact.getArtifactTypeID(), org::sleuthkit::datamodel::BlackboardArtifact.getAttributes(), org::sleuthkit::datamodel::Content.getId(), org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_ASSOCIATED_ARTIFACT, org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_KEYWORD, org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_KEYWORD_HIT, and org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_KEYWORD_REGEXP.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createLookup().
|
private |
Definition at line 428 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().
|
private |
Definition at line 270 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.associated, org::sleuthkit::datamodel::Content.getName(), and org::sleuthkit::datamodel::Content.getParent().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().
boolean org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.isLeafTypeNode | ( | ) |
Definition at line 486 of file BlackboardArtifactNode.java.
|
private |
Set the filter node display name. The value will either be the file name or something along the lines of e.g. "Messages Artifact" for keyword hits on artifacts.
Definition at line 110 of file BlackboardArtifactNode.java.
References org::sleuthkit::datamodel::BlackboardArtifact.getArtifactTypeID(), org::sleuthkit::datamodel::BlackboardArtifact.getAttributes(), org::sleuthkit::datamodel::SleuthkitCase.getBlackboardArtifact(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org::sleuthkit::datamodel::BlackboardArtifact.getDisplayName(), org::sleuthkit::datamodel::Content.getName(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_ASSOCIATED_ARTIFACT, and org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_KEYWORD_HIT.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().
|
private |
Definition at line 49 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().
|
private |
Definition at line 50 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.fillPropertyMap(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getRootParentName().
|
private |
Definition at line 51 of file BlackboardArtifactNode.java.
|
staticprivate |
Definition at line 66 of file BlackboardArtifactNode.java.
|
staticprivate |
Definition at line 57 of file BlackboardArtifactNode.java.
Copyright © 2012-2015 Basis Technology. Generated on: Mon Oct 19 2015
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.