Autopsy  3.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Static Public Member Functions | Public Attributes | Static Public Attributes | Private Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.timeline.events.type.WebTypes Enum Reference

Inherits org.sleuthkit.autopsy.timeline.events.type.EventType, and org.sleuthkit.autopsy.timeline.events.type.ArtifactEventType.

Public Member Functions

Image getFXImage ()
 
BlackboardAttribute.ATTRIBUTE_TYPE getDateTimeAttrubuteType ()
 
EventTypeZoomLevel getZoomLevel ()
 
BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String > getFullExtractor ()
 
BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String > getMedExtractor ()
 
BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String > getShortExtractor ()
 
String getIconBase ()
 
BlackboardArtifact.ARTIFACT_TYPE getArtifactType ()
 
EventType getSuperType ()
 
String getDisplayName ()
 
EventType getSubType (String string)
 
List<?extends EventTypegetSubTypes ()
 
default BaseTypes getBaseType ()
 
default List<?extends EventTypegetSubTypesRecusive ()
 
default Color getColor ()
 
default List<?extends EventTypegetSiblingTypes ()
 
int ordinal ()
 
default AttributeEventDescription parseAttributesHelper (BlackboardArtifact artf, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute > attrMap) throws TskCoreException
 

Static Public Member Functions

static Comparator< EventTypegetComparator ()
 

Public Attributes

 WEB_DOWNLOADS
 
 WEB_COOKIE
 
 WEB_BOOKMARK
 
 WEB_HISTORY
 
 WEB_SEARCH
 
BlackboardArtifact.ARTIFACT_TYPE artifactType
 

Static Public Attributes

static final List<?extends EventTypeallTypes = RootEventType.getInstance().getSubTypesRecusive()
 

Private Member Functions

 WebTypes (String displayName, String iconBase, BlackboardArtifact.ARTIFACT_TYPE artifactType, BlackboardAttribute.ATTRIBUTE_TYPE dateTimeAttributeType, BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String > shortExtractor, BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String > medExtractor, BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String > longExtractor)
 

Private Attributes

final BlackboardAttribute.ATTRIBUTE_TYPE dateTimeAttributeType
 
final String iconBase
 
final Image image
 
final BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String > longExtractor
 
final BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String > medExtractor
 
final BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String > shortExtractor
 
final String displayName
 

Detailed Description

Definition at line 35 of file WebTypes.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.timeline.events.type.WebTypes.WebTypes ( String  displayName,
String  iconBase,
BlackboardArtifact.ARTIFACT_TYPE  artifactType,
BlackboardAttribute.ATTRIBUTE_TYPE  dateTimeAttributeType,
BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String >  shortExtractor,
BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String >  medExtractor,
BiFunction< BlackboardArtifact, Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute >, String >  longExtractor 
)
private

Definition at line 152 of file WebTypes.java.

Member Function Documentation

BlackboardArtifact.ARTIFACT_TYPE org.sleuthkit.autopsy.timeline.events.type.WebTypes.getArtifactType ( )
Returns
the Artifact type this event type is derived form, or null if there is no artifact type (eg file system events)

Implements org.sleuthkit.autopsy.timeline.events.type.ArtifactEventType.

Definition at line 148 of file WebTypes.java.

default BaseTypes org.sleuthkit.autopsy.timeline.events.type.EventType.getBaseType ( )
inherited
default Color org.sleuthkit.autopsy.timeline.events.type.EventType.getColor ( )
inherited
static Comparator<EventType> org.sleuthkit.autopsy.timeline.events.type.EventType.getComparator ( )
staticinherited

Definition at line 37 of file EventType.java.

BlackboardAttribute.ATTRIBUTE_TYPE org.sleuthkit.autopsy.timeline.events.type.WebTypes.getDateTimeAttrubuteType ( )
String org.sleuthkit.autopsy.timeline.events.type.WebTypes.getDisplayName ( )
BiFunction<BlackboardArtifact, Map<BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute>, String> org.sleuthkit.autopsy.timeline.events.type.WebTypes.getFullExtractor ( )
Returns
a function from an artifact and a map of its attributes, to a String to use as part of the full event description

Implements org.sleuthkit.autopsy.timeline.events.type.ArtifactEventType.

Definition at line 124 of file WebTypes.java.

Image org.sleuthkit.autopsy.timeline.events.type.WebTypes.getFXImage ( )
String org.sleuthkit.autopsy.timeline.events.type.WebTypes.getIconBase ( )
BiFunction<BlackboardArtifact, Map<BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute>, String> org.sleuthkit.autopsy.timeline.events.type.WebTypes.getMedExtractor ( )
Returns
a function from an artifact and a map of its attributes, to a String to use as part of the medium event description

Implements org.sleuthkit.autopsy.timeline.events.type.ArtifactEventType.

Definition at line 129 of file WebTypes.java.

BiFunction<BlackboardArtifact, Map<BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute>, String> org.sleuthkit.autopsy.timeline.events.type.WebTypes.getShortExtractor ( )
Returns
a function from an artifact and a map of its attributes, to a String to use as part of the short event description

Implements org.sleuthkit.autopsy.timeline.events.type.ArtifactEventType.

Definition at line 134 of file WebTypes.java.

default List<? extends EventType> org.sleuthkit.autopsy.timeline.events.type.EventType.getSiblingTypes ( )
inherited
EventType org.sleuthkit.autopsy.timeline.events.type.WebTypes.getSubType ( String  string)
List<? extends EventType> org.sleuthkit.autopsy.timeline.events.type.WebTypes.getSubTypes ( )
Returns
a list of event types, one for each subtype of this eventype, or an empty list if this event type has no subtypes

Implements org.sleuthkit.autopsy.timeline.events.type.EventType.

Definition at line 183 of file WebTypes.java.

default List<? extends EventType> org.sleuthkit.autopsy.timeline.events.type.EventType.getSubTypesRecusive ( )
inherited
EventType org.sleuthkit.autopsy.timeline.events.type.WebTypes.getSuperType ( )
Returns
the super type of this event

Implements org.sleuthkit.autopsy.timeline.events.type.EventType.

Definition at line 168 of file WebTypes.java.

References org.sleuthkit.autopsy.timeline.events.type.BaseTypes.WEB_ACTIVITY.

EventTypeZoomLevel org.sleuthkit.autopsy.timeline.events.type.WebTypes.getZoomLevel ( )
int org.sleuthkit.autopsy.timeline.events.type.EventType.ordinal ( )
inherited
default AttributeEventDescription org.sleuthkit.autopsy.timeline.events.type.ArtifactEventType.parseAttributesHelper ( BlackboardArtifact  artf,
Map< BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute attrMap 
) throws TskCoreException
inherited

Member Data Documentation

final List<? extends EventType> org.sleuthkit.autopsy.timeline.events.type.EventType.allTypes = RootEventType.getInstance().getSubTypesRecusive()
staticinherited
BlackboardArtifact.ARTIFACT_TYPE org.sleuthkit.autopsy.timeline.events.type.WebTypes.artifactType

Definition at line 140 of file WebTypes.java.

final BlackboardAttribute.ATTRIBUTE_TYPE org.sleuthkit.autopsy.timeline.events.type.WebTypes.dateTimeAttributeType
private

Definition at line 96 of file WebTypes.java.

final String org.sleuthkit.autopsy.timeline.events.type.WebTypes.displayName
private

Definition at line 138 of file WebTypes.java.

final String org.sleuthkit.autopsy.timeline.events.type.WebTypes.iconBase
private

Definition at line 98 of file WebTypes.java.

final Image org.sleuthkit.autopsy.timeline.events.type.WebTypes.image
private

Definition at line 100 of file WebTypes.java.

final BiFunction<BlackboardArtifact, Map<BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute>, String> org.sleuthkit.autopsy.timeline.events.type.WebTypes.longExtractor
private

Definition at line 117 of file WebTypes.java.

final BiFunction<BlackboardArtifact, Map<BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute>, String> org.sleuthkit.autopsy.timeline.events.type.WebTypes.medExtractor
private

Definition at line 119 of file WebTypes.java.

final BiFunction<BlackboardArtifact, Map<BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute>, String> org.sleuthkit.autopsy.timeline.events.type.WebTypes.shortExtractor
private

Definition at line 121 of file WebTypes.java.

org.sleuthkit.autopsy.timeline.events.type.WebTypes.WEB_BOOKMARK
Initial value:
=(NbBundle.getMessage(WebTypes.class, "WebTypes.webBookmarks.name"),
"bookmarks.png",
BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK,
BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_CREATED,
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN),
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL),
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_TITLE))

Definition at line 72 of file WebTypes.java.

org.sleuthkit.autopsy.timeline.events.type.WebTypes.WEB_COOKIE
Initial value:
=(NbBundle.getMessage(WebTypes.class, "WebTypes.webCookies.name"),
"cookies.png",
BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE,
BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME,
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN),
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_NAME),
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_VALUE))

Definition at line 64 of file WebTypes.java.

org.sleuthkit.autopsy.timeline.events.type.WebTypes.WEB_DOWNLOADS
Initial value:
=(NbBundle.getMessage(WebTypes.class, "WebTypes.webDownloads.name"),
"downloads.png",
BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD,
BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED,
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN),
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PATH),
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL)) {
@Override
public AttributeEventDescription parseAttributesHelper(BlackboardArtifact artf, Map<BlackboardAttribute.ATTRIBUTE_TYPE, BlackboardAttribute> attrMap) {
long time = attrMap.get(getDateTimeAttrubuteType()).getValueLong();
String domain = getShortExtractor().apply(artf, attrMap);
String path = getMedExtractor().apply(artf, attrMap);
String fileName = StringUtils.substringAfterLast(path, "/");
String url = getFullExtractor().apply(artf, attrMap);
String shortDescription = fileName + " from " + domain;
String medDescription = fileName + " from " + url;
String fullDescription = path + " from " + url;
return new AttributeEventDescription(time, shortDescription, medDescription, fullDescription);
}
}

Definition at line 37 of file WebTypes.java.

org.sleuthkit.autopsy.timeline.events.type.WebTypes.WEB_HISTORY
Initial value:
=(NbBundle.getMessage(WebTypes.class, "WebTypes.webHistory.name"),
"history.png",
BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY,
BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED,
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN),
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_URL),
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_TITLE))

Definition at line 80 of file WebTypes.java.

org.sleuthkit.autopsy.timeline.events.type.WebTypes.WEB_SEARCH
Initial value:
=(NbBundle.getMessage(WebTypes.class, "WebTypes.webSearch.name"),
"searchquery.png",
BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_SEARCH_QUERY,
BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED,
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_TEXT),
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DOMAIN),
new AttributeExtractor(BlackboardAttribute.ATTRIBUTE_TYPE.TSK_PROG_NAME))

Definition at line 88 of file WebTypes.java.


The documentation for this enum was generated from the following file:

Copyright © 2012-2015 Basis Technology. Generated on: Mon Oct 19 2015
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.