Autopsy
3.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Public Member Functions | |
FilteredEventsModel (EventsRepository repo, ReadOnlyObjectProperty< ZoomParams > currentStateProperty) | |
Interval | getBoundingEventsInterval () |
synchronized ReadOnlyObjectProperty< ZoomParams > | getRequestedZoomParamters () |
TimeLineEvent | getEventById (Long eventID) |
Set< Long > | getEventIDs (Interval timeRange, Filter filter) |
Map< EventType, Long > | getEventCounts (Interval timeRange) |
synchronized ReadOnlyObjectProperty< Interval > | timeRange () |
synchronized ReadOnlyObjectProperty< DescriptionLOD > | descriptionLOD () |
synchronized ReadOnlyObjectProperty< Filter > | filter () |
final Interval | getSpanningInterval () |
Interval | getSpanningInterval (Collection< Long > eventIDs) |
final Long | getMinTime () |
final Long | getMaxTime () |
List< AggregateEvent > | getAggregatedEvents () |
List< AggregateEvent > | getAggregatedEvents (ZoomParams params) |
synchronized ReadOnlyObjectProperty< EventTypeZoomLevel > | eventTypeZoom () |
synchronized EventTypeZoomLevel | getEventTypeZoom () |
DescriptionLOD | getDescriptionLOD () |
Private Attributes | |
final ReadOnlyObjectWrapper< Interval > | requestedTimeRange = new ReadOnlyObjectWrapper<>() |
final ReadOnlyObjectWrapper< Filter > | requestedFilter = new ReadOnlyObjectWrapper<>(Filter.getDefaultFilter()) |
final ReadOnlyObjectWrapper< EventTypeZoomLevel > | requestedTypeZoom = new ReadOnlyObjectWrapper<>(EventTypeZoomLevel.BASE_TYPE) |
final ReadOnlyObjectWrapper< DescriptionLOD > | requestedLOD = new ReadOnlyObjectWrapper<>(DescriptionLOD.SHORT) |
final ReadOnlyObjectWrapper< ZoomParams > | requestedZoomParamters = new ReadOnlyObjectWrapper<>() |
final EventsRepository | repo |
This class acts as the model for a TimeLineView
Views can register listeners on properties returned by methods.
This class is implemented as a filtered view into an underlying EventsRepository.
TODO: as many methods as possible should cache their results so as to avoid unnecessary db calls through the EventsRepository -jm
Concurrency Policy: repo is internally synchronized, so methods that only access the repo atomicaly do not need further synchronization
all other member state variables should only be accessed with intrinsic lock of containing FilteredEventsModel held. Many methods delegate to a task submitted to the dbQueryThread executor. These methods should synchronize on this object, and the tasks should too. Since the tasks execute asynchronously from the invoking methods, the methods will return and release the lock for the tasks to obtain.
Definition at line 62 of file FilteredEventsModel.java.
org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.FilteredEventsModel | ( | EventsRepository | repo, |
ReadOnlyObjectProperty< ZoomParams > | currentStateProperty | ||
) |
Definition at line 91 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.filters.Filter.copyOf(), org.sleuthkit.autopsy.timeline.zooming.ZoomParams.getDescrLOD(), org.sleuthkit.autopsy.timeline.zooming.ZoomParams.getFilter(), org.sleuthkit.autopsy.timeline.zooming.ZoomParams.getTimeRange(), org.sleuthkit.autopsy.timeline.zooming.ZoomParams.getTypeZoomLevel(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.repo, org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedFilter, org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedLOD, org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedTimeRange, org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedTypeZoom, and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedZoomParamters.
synchronized ReadOnlyObjectProperty<DescriptionLOD> org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.descriptionLOD | ( | ) |
Definition at line 167 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedLOD.
Referenced by org.sleuthkit.autopsy.timeline.zooming.ZoomSettingsPane.setModel().
synchronized ReadOnlyObjectProperty<EventTypeZoomLevel> org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.eventTypeZoom | ( | ) |
Definition at line 240 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedTypeZoom.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.AggregateEventNode.loadSubClusters(), and org.sleuthkit.autopsy.timeline.zooming.ZoomSettingsPane.setModel().
synchronized ReadOnlyObjectProperty<Filter> org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.filter | ( | ) |
Definition at line 171 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedFilter.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getAggregatedEvents(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventCounts(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventIDs(), org.sleuthkit.autopsy.timeline.ui.detailview.AggregateEventNode.loadSubClusters(), org.sleuthkit.autopsy.timeline.ui.filtering.FilterSetPanel.refresh(), and org.sleuthkit.autopsy.timeline.ui.filtering.FilterSetPanel.setModel().
List<AggregateEvent> org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getAggregatedEvents | ( | ) |
aggregation |
Definition at line 215 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.filter(), org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getAggregatedEvents(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.repo, org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedFilter, org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedLOD, org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedTimeRange, and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedTypeZoom.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.AggregateEventNode.loadSubClusters().
List<AggregateEvent> org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getAggregatedEvents | ( | ZoomParams | params | ) |
aggregation |
Definition at line 236 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getAggregatedEvents(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.repo.
Interval org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getBoundingEventsInterval | ( | ) |
Definition at line 113 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getBoundingEventsInterval(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getRequestedZoomParamters(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.repo.
Referenced by org.sleuthkit.autopsy.timeline.TimeLineController.zoomOutToActivity().
DescriptionLOD org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getDescriptionLOD | ( | ) |
Definition at line 262 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedLOD.
Referenced by org.sleuthkit.autopsy.timeline.zooming.ZoomSettingsPane.setModel().
TimeLineEvent org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventById | ( | Long | eventID | ) |
Definition at line 121 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getEventById(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.repo.
Referenced by org.sleuthkit.autopsy.timeline.explorernodes.EventRootNode.EventNodeChildFactory.createNodeForKey().
Map<EventType, Long> org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventCounts | ( | Interval | timeRange | ) |
return the number of events that pass the requested filter and are within the given time range.
NOTE: this method does not change the requested time range
timeRange |
Definition at line 145 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.countEvents(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.filter(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.repo, org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedFilter, and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedTypeZoom.
Referenced by org.sleuthkit.autopsy.timeline.ui.countsview.CountsViewPane.getUpdateTask(), org.sleuthkit.autopsy.timeline.TimeLineController.pushDescrLOD(), and org.sleuthkit.autopsy.timeline.ui.VisualizationPanel.refreshHistorgram().
Set<Long> org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventIDs | ( | Interval | timeRange, |
Filter | filter | ||
) |
Definition at line 125 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.filter(), org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getEventIDs(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getSpanningInterval(), org.sleuthkit.autopsy.timeline.filters.Filter.intersect(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.repo, and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedFilter.
Referenced by org.sleuthkit.autopsy.timeline.TimeLineController.selectTimeAndType().
synchronized EventTypeZoomLevel org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventTypeZoom | ( | ) |
Definition at line 244 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedTypeZoom.
final Long org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getMaxTime | ( | ) |
Definition at line 204 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getMaxTime(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.repo.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getSpanningInterval().
final Long org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getMinTime | ( | ) |
Definition at line 195 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getMinTime(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.repo.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getSpanningInterval().
synchronized ReadOnlyObjectProperty<ZoomParams> org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getRequestedZoomParamters | ( | ) |
Definition at line 117 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedZoomParamters.
Referenced by org.sleuthkit.autopsy.timeline.actions.DefaultFilters.DefaultFilters(), org.sleuthkit.autopsy.timeline.ui.AbstractVisualization< DateTime, AggregateEvent, AggregateEventNode, EventDetailChart >.dispose(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getBoundingEventsInterval(), org.sleuthkit.autopsy.timeline.TimeLineController.pushDescrLOD(), org.sleuthkit.autopsy.timeline.TimeLineController.pushEventTypeZoom(), org.sleuthkit.autopsy.timeline.TimeLineController.pushFilters(), org.sleuthkit.autopsy.timeline.TimeLineController.pushTimeAndType(), org.sleuthkit.autopsy.timeline.TimeLineController.pushTimeRange(), org.sleuthkit.autopsy.timeline.ui.AbstractVisualization< DateTime, AggregateEvent, AggregateEventNode, EventDetailChart >.setModel(), org.sleuthkit.autopsy.timeline.ui.detailview.EventDetailChart.setModel(), org.sleuthkit.autopsy.timeline.actions.ZoomOut.ZoomOut(), and org.sleuthkit.autopsy.timeline.TimeLineController.zoomOutToActivity().
final Interval org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getSpanningInterval | ( | ) |
Definition at line 179 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getMaxTime(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getMinTime().
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventIDs(), org.sleuthkit.autopsy.timeline.ui.countsview.CountsViewPane.BarClickHandler.handle(), org.sleuthkit.autopsy.timeline.ui.VisualizationPanel.refreshHistorgram(), org.sleuthkit.autopsy.timeline.ui.VisualizationPanel.refreshTimeUI(), org.sleuthkit.autopsy.timeline.TimeLineController.selectEventIDs(), org.sleuthkit.autopsy.timeline.TimeLineController.selectTimeAndType(), org.sleuthkit.autopsy.timeline.TimeLineController.showFullRange(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.timeRange(), and org.sleuthkit.autopsy.timeline.actions.ZoomOut.ZoomOut().
Interval org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getSpanningInterval | ( | Collection< Long > | eventIDs | ) |
Definition at line 186 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.getSpanningInterval(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.repo.
synchronized ReadOnlyObjectProperty<Interval> org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.timeRange | ( | ) |
Definition at line 160 of file FilteredEventsModel.java.
References org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getSpanningInterval(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.requestedTimeRange.
Referenced by org.sleuthkit.autopsy.timeline.ui.countsview.CountsViewPane.getUpdateTask(), org.sleuthkit.autopsy.timeline.TimeLineController.pushPeriod(), org.sleuthkit.autopsy.timeline.TimeLineController.pushZoomInTime(), org.sleuthkit.autopsy.timeline.TimeLineController.pushZoomOutTime(), org.sleuthkit.autopsy.timeline.zooming.ZoomSettingsPane.setModel(), and org.sleuthkit.autopsy.timeline.ui.VisualizationPanel.setModel().
|
private |
The underlying repo for events. Atomic access to repo is synchronized internally, but compound access should be done with the intrinsic lock of this FilteredEventsModel object
Definition at line 89 of file FilteredEventsModel.java.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.FilteredEventsModel(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getAggregatedEvents(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getBoundingEventsInterval(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventById(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventCounts(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventIDs(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getMaxTime(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getMinTime(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getSpanningInterval().
|
private |
Definition at line 72 of file FilteredEventsModel.java.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.filter(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.FilteredEventsModel(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getAggregatedEvents(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventCounts(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventIDs().
|
private |
Definition at line 78 of file FilteredEventsModel.java.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.descriptionLOD(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.FilteredEventsModel(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getAggregatedEvents(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getDescriptionLOD().
|
private |
time range that spans the filtered events
Definition at line 69 of file FilteredEventsModel.java.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.FilteredEventsModel(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getAggregatedEvents(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.timeRange().
|
private |
Definition at line 75 of file FilteredEventsModel.java.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.eventTypeZoom(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.FilteredEventsModel(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getAggregatedEvents(), org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventCounts(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getEventTypeZoom().
|
private |
Definition at line 81 of file FilteredEventsModel.java.
Referenced by org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.FilteredEventsModel(), and org.sleuthkit.autopsy.timeline.events.FilteredEventsModel.getRequestedZoomParamters().
Copyright © 2012-2015 Basis Technology. Generated on: Mon Oct 19 2015
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.