Autopsy
3.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits SwingWorker< Void, ProgressWindow.ProgressUpdate >.
Public Member Functions | |
DBPopulationWorker (Runnable r) | |
Protected Member Functions | |
Void | doInBackground () throws Exception |
void | process (List< ProgressWindow.ProgressUpdate > chunks) |
void | done () |
Private Member Functions | |
void | populateEventType (final ArtifactEventType type, EventDB.EventTransaction trans, SleuthkitCase skCase) |
Private Attributes | |
final ProgressWindow | progressDialog |
final Runnable | r |
SwingWorker to populate event db with data from main autopsy database.
has only local state. accesses eventDB but that is internally synchronized/ thread-safe.
Definition at line 206 of file EventsRepository.java.
org.sleuthkit.autopsy.timeline.events.db.EventsRepository.DBPopulationWorker.DBPopulationWorker | ( | Runnable | r | ) |
Definition at line 214 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.db.EventsRepository.DBPopulationWorker.r.
|
protected |
Definition at line 221 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.type.EventType.allTypes, org.sleuthkit.autopsy.timeline.events.type.FileSystemTypes.FILE_ACCESSED, org.sleuthkit.autopsy.timeline.events.type.FileSystemTypes.FILE_CHANGED, org.sleuthkit.autopsy.timeline.events.type.FileSystemTypes.FILE_CREATED, org.sleuthkit.autopsy.timeline.events.type.FileSystemTypes.FILE_MODIFIED, org::sleuthkit::datamodel::SleuthkitCase.findAllFileIdsWhere(), org::sleuthkit::datamodel::SleuthkitCase.getAbstractFileById(), org::sleuthkit::datamodel::AbstractFile.getAtime(), org::sleuthkit::datamodel::AbstractFile.getCrtime(), org::sleuthkit::datamodel::AbstractFile.getCtime(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org::sleuthkit::datamodel::AbstractFile.getKnown(), org::sleuthkit::datamodel::AbstractFile.getMtime(), org::sleuthkit::datamodel::AbstractContent.getName(), org::sleuthkit::datamodel::AbstractFile.getParentPath(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org::sleuthkit::datamodel::AbstractContent.getUniquePath(), org.sleuthkit.autopsy.timeline.events.db.EventsRepository.invalidateCaches(), org.sleuthkit.autopsy.timeline.events.db.EventsRepository.DBPopulationWorker.populateEventType(), and org.sleuthkit.autopsy.timeline.events.db.EventsRepository.DBPopulationWorker.process().
|
protected |
Definition at line 322 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.ProgressWindow.close().
|
private |
populate all the events of one subtype
subType | the subtype to populate |
trans | the db transaction to use |
skCase | a reference to the sleuthkit case |
Definition at line 349 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.events.type.ArtifactEventType.AttributeEventDescription.buildEventDescription(), org.sleuthkit.autopsy.timeline.events.type.ArtifactEventType.getArtifactType(), org::sleuthkit::datamodel::SleuthkitCase.getBlackboardArtifacts(), and org.sleuthkit.autopsy.timeline.events.db.EventsRepository.DBPopulationWorker.process().
Referenced by org.sleuthkit.autopsy.timeline.events.db.EventsRepository.DBPopulationWorker.doInBackground().
|
protected |
handle intermediate 'results': just update progress dialog
chunks |
Definition at line 315 of file EventsRepository.java.
References org.sleuthkit.autopsy.timeline.ProgressWindow.update().
Referenced by org.sleuthkit.autopsy.timeline.events.db.EventsRepository.DBPopulationWorker.doInBackground(), and org.sleuthkit.autopsy.timeline.events.db.EventsRepository.DBPopulationWorker.populateEventType().
|
private |
Definition at line 208 of file EventsRepository.java.
|
private |
Definition at line 212 of file EventsRepository.java.
Referenced by org.sleuthkit.autopsy.timeline.events.db.EventsRepository.DBPopulationWorker.DBPopulationWorker().
Copyright © 2012-2015 Basis Technology. Generated on: Mon Oct 19 2015
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.