19 package org.sleuthkit.autopsy.datamodel;
21 import java.beans.PropertyChangeEvent;
22 import java.beans.PropertyChangeListener;
23 import java.util.ArrayList;
24 import java.util.Collections;
25 import java.util.Comparator;
26 import java.util.HashMap;
27 import java.util.List;
28 import java.util.logging.Level;
29 import org.openide.nodes.ChildFactory;
30 import org.openide.nodes.Children;
31 import org.openide.nodes.Node;
32 import org.openide.nodes.Sheet;
33 import org.openide.util.NbBundle;
34 import org.openide.util.lookup.Lookups;
40 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_PAIRING;
41 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALENDAR_ENTRY;
42 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CALLLOG;
43 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_CONTACT;
44 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_ATTACHED;
45 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_DETECTED;
46 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_EXT_MISMATCH_DETECTED;
47 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_BOOKMARK;
48 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_LAST_KNOWN_LOCATION;
49 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_SEARCH;
50 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_INSTALLED_PROG;
51 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_MESSAGE;
52 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA_EXIF;
53 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_RECENT_OBJECT;
54 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SERVICE_ACCOUNT;
55 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_SPEED_DIAL_ENTRY;
56 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK;
57 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE;
58 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD;
59 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY;
60 import static org.
sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_SEARCH_QUERY;
72 public static final String
NAME = NbBundle.getMessage(
RootNode.class,
"ExtractedContentNode.name.text");
79 public <T> T accept(AutopsyItemVisitor<T> v) {
87 static String getIconFilePath(
int typeID) {
88 String filePath =
"org/sleuthkit/autopsy/images/";
89 if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK.getTypeID()) {
90 return filePath +
"bookmarks.png";
91 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE.getTypeID()) {
92 return filePath +
"cookies.png";
93 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY.getTypeID()) {
94 return filePath +
"history.png";
95 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD.getTypeID()) {
96 return filePath +
"downloads.png";
97 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_RECENT_OBJECT.getTypeID()) {
98 return filePath +
"recent_docs.png";
99 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_TRACKPOINT.getTypeID()) {
100 return filePath +
"gps_trackpoint.png";
101 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_INSTALLED_PROG.getTypeID()) {
102 return filePath +
"programs.png";
103 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_DEVICE_ATTACHED.getTypeID()) {
104 return filePath +
"usb_devices.png";
105 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_EMAIL_MSG.getTypeID()) {
106 return filePath +
"mail-icon-16.png";
107 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_EXTRACTED_TEXT.getTypeID()) {
108 return filePath +
"text-file.png";
109 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_SEARCH_QUERY.getTypeID()) {
110 return filePath +
"searchquery.png";
111 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_METADATA_EXIF.getTypeID()) {
112 return filePath +
"camera-icon-16.png";
113 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_OS_INFO.getTypeID()) {
114 return filePath +
"computer.png";
115 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_SERVICE_ACCOUNT.getTypeID()) {
116 return filePath +
"account-icon-16.png";
117 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_CONTACT.getTypeID()) {
118 return filePath +
"contact.png";
119 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_MESSAGE.getTypeID()) {
120 return filePath +
"message.png";
121 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_CALLLOG.getTypeID()) {
122 return filePath +
"calllog.png";
123 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_CALENDAR_ENTRY.getTypeID()) {
124 return filePath +
"calendar.png";
125 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_SPEED_DIAL_ENTRY.getTypeID()) {
126 return filePath +
"speeddialentry.png";
127 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_BLUETOOTH_PAIRING.getTypeID()) {
128 return filePath +
"bluetooth.png";
129 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_BOOKMARK.getTypeID()) {
130 return filePath +
"gpsfav.png";
131 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_LAST_KNOWN_LOCATION.getTypeID()) {
132 return filePath +
"gps-lastlocation.png";
133 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_SEARCH.getTypeID()) {
134 return filePath +
"gps-search.png";
135 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_PROG_RUN.getTypeID()) {
136 return filePath +
"installed.png";
137 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_ENCRYPTION_DETECTED.getTypeID()) {
138 return filePath +
"encrypted-file.png";
139 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_EXT_MISMATCH_DETECTED.getTypeID()) {
140 return filePath +
"mismatch-16.png";
141 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_GPS_ROUTE.getTypeID()) {
142 return filePath +
"gps_trackpoint.png";
143 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_REMOTE_DRIVE.getTypeID()) {
144 return filePath +
"drive_network.png";
145 }
else if (typeID == BlackboardArtifact.ARTIFACT_TYPE.TSK_FACE_DETECTED.getTypeID()) {
146 return filePath +
"face.png";
148 return filePath +
"artifact-icon.png";
154 super(Children.create(
new TypeFactory(),
true), Lookups.singleton(NAME));
156 super.setDisplayName(NAME);
157 this.setIconBaseWithExtension(
"org/sleuthkit/autopsy/images/extracted_content.png");
167 return v.
visit(
this);
172 Sheet s = super.createSheet();
173 Sheet.Set ss = s.get(Sheet.PROPERTIES);
175 ss = Sheet.createPropertiesSet();
179 ss.put(
new NodeProperty<>(NbBundle.getMessage(
this.getClass(),
"ExtractedContentNode.createSheet.name.name"),
180 NbBundle.getMessage(
this.getClass(),
"ExtractedContentNode.createSheet.name.displayName"),
181 NbBundle.getMessage(
this.getClass(),
"ExtractedContentNode.createSheet.name.desc"),
202 private class TypeFactory extends ChildFactory.Detachable<BlackboardArtifact.Type> {
204 private final ArrayList<BlackboardArtifact.Type>
doNotShow =
new ArrayList<>();
212 doNotShow.add(
new BlackboardArtifact.Type(
213 BlackboardArtifact.ARTIFACT_TYPE.TSK_GEN_INFO));
214 doNotShow.add(
new BlackboardArtifact.Type(
215 BlackboardArtifact.ARTIFACT_TYPE.TSK_EMAIL_MSG));
216 doNotShow.add(
new BlackboardArtifact.Type(
217 BlackboardArtifact.ARTIFACT_TYPE.TSK_HASHSET_HIT));
218 doNotShow.add(
new BlackboardArtifact.Type(
219 BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT));
220 doNotShow.add(
new BlackboardArtifact.Type(
221 BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT));
222 doNotShow.add(
new BlackboardArtifact.Type(
223 BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_ARTIFACT_HIT));
226 private final PropertyChangeListener
pcl = (PropertyChangeEvent evt) -> {
227 String eventType = evt.getPropertyName();
242 if (null != event && !(this.
doNotShow.contains(event.getBlackboardArtifactType()))) {
245 }
catch (IllegalStateException notUsed) {
260 }
catch (IllegalStateException notUsed) {
267 if (evt.getNewValue() == null) {
286 typeNodeList.clear();
290 protected boolean createKeys(List<BlackboardArtifact.Type> list) {
292 if (skCase != null) {
294 List<BlackboardArtifact.Type> types = skCase.getArtifactTypesInUse();
296 Collections.sort(types,
297 new Comparator<BlackboardArtifact.Type>() {
299 public int compare(BlackboardArtifact.Type a, BlackboardArtifact.Type b) {
300 return a.getDisplayName().compareTo(b.getDisplayName());
307 for (BlackboardArtifact.Type art : types) {
308 TypeNode node = typeNodeList.get(art);
310 node.updateDisplayName();
313 }
catch (TskCoreException ex) {
314 Logger.
getLogger(
TypeFactory.class.getName()).log(Level.SEVERE,
"Error getting list of artifacts in use: " + ex.getLocalizedMessage());
323 typeNodeList.put(key, node);
336 private BlackboardArtifact.Type
type;
341 super.setName(
type.getTypeName());
347 final void updateDisplayName() {
348 if (skCase == null) {
356 this.childCount = skCase.getBlackboardArtifactsTypeCount(
type.getTypeID());
357 }
catch (TskException ex) {
358 Logger.getLogger(TypeNode.class.getName())
359 .log(Level.WARNING,
"Error getting child count", ex);
361 super.setDisplayName(
type.getDisplayName() +
" (" + childCount +
")");
366 Sheet s = super.createSheet();
367 Sheet.Set ss = s.get(Sheet.PROPERTIES);
369 ss = Sheet.createPropertiesSet();
373 ss.put(
new NodeProperty<>(NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.artType.name"),
374 NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.artType.displayName"),
375 NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.artType.desc"),
376 type.getDisplayName()));
378 ss.put(
new NodeProperty<>(NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.childCnt.name"),
379 NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.childCnt.displayName"),
380 NbBundle.getMessage(
this.getClass(),
"ArtifactTypeNode.createSheet.childCnt.desc"),
388 return v.
visit(
this);
412 private BlackboardArtifact.Type
type;
419 private final PropertyChangeListener
pcl =
new PropertyChangeListener() {
421 public void propertyChange(PropertyChangeEvent evt) {
422 String eventType = evt.getPropertyName();
439 if (null != event && event.getBlackboardArtifactType().equals(
type)) {
442 }
catch (IllegalStateException notUsed) {
458 }
catch (IllegalStateException notUsed) {
480 protected boolean createKeys(List<BlackboardArtifact> list) {
481 if (skCase != null) {
483 List<BlackboardArtifact> arts = skCase.getBlackboardArtifacts(
type.getTypeID());
485 }
catch (TskException ex) {
void removeIngestModuleEventListener(final PropertyChangeListener listener)
static synchronized IngestManager getInstance()
T visit(DataSourcesNode in)
void removeIngestJobEventListener(final PropertyChangeListener listener)
void addIngestJobEventListener(final PropertyChangeListener listener)
static synchronized void removePropertyChangeListener(PropertyChangeListener listener)
void addIngestModuleEventListener(final PropertyChangeListener listener)
static synchronized void addPropertyChangeListener(PropertyChangeListener listener)
static Case getCurrentCase()
synchronized static Logger getLogger(String name)