Autopsy
4.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType, and org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.
Public Member Functions | |
BlackboardArtifact.Type | getArtifactType () |
default BaseTypes | getBaseType () |
default Color | getColor () |
BlackboardAttribute.Type | getDateTimeAttrubuteType () |
String | getDisplayName () |
Function< BlackboardArtifact, String > | getFullExtractor () |
Image | getFXImage () |
String | getIconBase () |
Function< BlackboardArtifact, String > | getMedExtractor () |
Function< BlackboardArtifact, String > | getShortExtractor () |
default List<?extends EventType > | getSiblingTypes () |
EventType | getSubType (String string) |
List<?extends EventType > | getSubTypes () |
default List<?extends EventType > | getSubTypesRecusive () |
EventType | getSuperType () |
EventTypeZoomLevel | getZoomLevel () |
int | ordinal () |
default AttributeEventDescription | parseAttributesHelper (BlackboardArtifact artf) throws TskCoreException |
Static Public Member Functions | |
static AttributeEventDescription | buildEventDescription (ArtifactEventType type, BlackboardArtifact artf) throws TskCoreException |
static BlackboardAttribute | getAttributeSafe (BlackboardArtifact artf, BlackboardAttribute.Type attrType) |
static Comparator< EventType > | getComparator () |
static String | stringValueOf (BlackboardAttribute attr) |
static String | toFrom (BlackboardAttribute dir) |
Public Attributes | |
CALL_LOG | |
DEVICES_ATTACHED | |
EXIF | |
GPS_ROUTE | |
GPS_TRACKPOINT | |
INSTALLED_PROGRAM | |
MESSAGE | |
RECENT_DOCUMENTS | |
Static Public Attributes | |
static final List<?extends EventType > | allTypes = RootEventType.getInstance().getSubTypesRecusive() |
static final EmptyExtractor | EMPTY_EXTRACTOR = new EmptyExtractor() |
static final Logger | LOGGER = Logger.getLogger(ArtifactEventType.class.getName()) |
Private Member Functions | |
MiscTypes (String displayName, String iconBase, BlackboardArtifact.Type artifactType, BlackboardAttribute.Type dateTimeAttributeType, Function< BlackboardArtifact, String > shortExtractor, Function< BlackboardArtifact, String > medExtractor, Function< BlackboardArtifact, String > longExtractor) | |
Private Attributes | |
final BlackboardArtifact.Type | artifactType |
final BlackboardAttribute.Type | dateTimeAttributeType |
final String | displayName |
final String | iconBase |
final Image | image |
final Function< BlackboardArtifact, String > | longExtractor |
final Function< BlackboardArtifact, String > | medExtractor |
final Function< BlackboardArtifact, String > | shortExtractor |
Definition at line 42 of file MiscTypes.java.
|
private |
Definition at line 230 of file MiscTypes.java.
|
staticinherited |
Build a AttributeEventDescription derived from a BlackboardArtifact. This is a template method that relies on each ArtifactEventType's implementation of ArtifactEventType#parseAttributesHelper() to know how to go from BlackboardAttributes to the event description.
artf | the BlackboardArtifact to derive the event description from |
TskCoreException | is there is a problem accessing the blackboard data |
Definition at line 144 of file ArtifactEventType.java.
Referenced by org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertEventForArtifact().
BlackboardArtifact.Type org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getArtifactType | ( | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.
Definition at line 256 of file MiscTypes.java.
|
staticinherited |
Definition at line 183 of file ArtifactEventType.java.
Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.AttributeExtractor.apply().
|
inherited |
Definition at line 42 of file EventType.java.
References org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getBaseType(), and org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSuperType().
Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getBaseType().
|
inherited |
Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType.
Definition at line 63 of file EventType.java.
References org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getColor(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSiblingTypes(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSubTypes(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSuperType(), and org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.ordinal().
Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getColor(), org.sleuthkit.autopsy.timeline.filters.TypeFilter.getColor(), and org.sleuthkit.autopsy.timeline.ui.detailview.tree.EventsTree.EventBundleTreeCell.updateHiddenState().
|
staticinherited |
Definition at line 37 of file EventType.java.
BlackboardAttribute.Type org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getDateTimeAttrubuteType | ( | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.
Definition at line 202 of file MiscTypes.java.
String org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getDisplayName | ( | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.
Definition at line 216 of file MiscTypes.java.
Function<BlackboardArtifact, String> org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getFullExtractor | ( | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.
Definition at line 187 of file MiscTypes.java.
Image org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getFXImage | ( | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.
Definition at line 176 of file MiscTypes.java.
String org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getIconBase | ( | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.
Definition at line 221 of file MiscTypes.java.
Function<BlackboardArtifact, String> org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getMedExtractor | ( | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.
Definition at line 192 of file MiscTypes.java.
Function<BlackboardArtifact, String> org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getShortExtractor | ( | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.
Definition at line 197 of file MiscTypes.java.
|
inherited |
Implemented in org.sleuthkit.autopsy.timeline.datamodel.eventtype.RootEventType.
Definition at line 79 of file EventType.java.
References org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSubTypes(), and org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSuperType().
Referenced by org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getColor().
EventType org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getSubType | ( | String | string | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.
Definition at line 226 of file MiscTypes.java.
List<? extends EventType> org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getSubTypes | ( | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.
Definition at line 251 of file MiscTypes.java.
|
inherited |
Definition at line 50 of file EventType.java.
References org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.getSubTypes().
EventType org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getSuperType | ( | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.
Definition at line 246 of file MiscTypes.java.
References org.sleuthkit.autopsy.timeline.datamodel.eventtype.BaseTypes.MISC_TYPES.
EventTypeZoomLevel org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.getZoomLevel | ( | ) |
Implements org.sleuthkit.autopsy.timeline.datamodel.eventtype.EventType.
Definition at line 207 of file MiscTypes.java.
References org.sleuthkit.autopsy.timeline.zooming.EventTypeZoomLevel.SUB_TYPE.
|
inherited |
|
inherited |
given an artifact, pull out the time stamp, and compose the descriptions. Each implementation of ArtifactEventType needs to implement parseAttributesHelper() as hook for to invoke. Most subtypes can use this default implementation. artf an AttributeEventDescription containing the timestamp and description information
TskCoreException |
Definition at line 59 of file ArtifactEventType.java.
References org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getDateTimeAttrubuteType(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getFullExtractor(), org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getMedExtractor(), and org.sleuthkit.autopsy.timeline.datamodel.eventtype.ArtifactEventType.getShortExtractor().
|
static |
Definition at line 148 of file MiscTypes.java.
|
static |
Definition at line 154 of file MiscTypes.java.
|
staticinherited |
Definition at line 35 of file EventType.java.
Referenced by org.sleuthkit.autopsy.timeline.db.EventDB.constructTimeLineEvent(), org.sleuthkit.autopsy.timeline.db.EventDB.countEventsByType(), org.sleuthkit.autopsy.timeline.db.EventDB.eventClusterHelper(), and org.sleuthkit.autopsy.timeline.db.EventsRepository.DBPopulationWorker.insertArtifactDerivedEvents().
|
private |
Definition at line 213 of file MiscTypes.java.
org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.CALL_LOG |
Definition at line 80 of file MiscTypes.java.
|
private |
Definition at line 169 of file MiscTypes.java.
org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.DEVICES_ATTACHED |
Definition at line 141 of file MiscTypes.java.
|
private |
Definition at line 211 of file MiscTypes.java.
org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.EMAIL |
Definition at line 86 of file MiscTypes.java.
|
staticinherited |
Definition at line 37 of file ArtifactEventType.java.
org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.EXIF |
Definition at line 125 of file MiscTypes.java.
org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.GPS_ROUTE |
Definition at line 58 of file MiscTypes.java.
org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.GPS_TRACKPOINT |
Definition at line 70 of file MiscTypes.java.
|
private |
Definition at line 171 of file MiscTypes.java.
|
private |
Definition at line 173 of file MiscTypes.java.
org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.INSTALLED_PROGRAM |
Definition at line 119 of file MiscTypes.java.
|
staticinherited |
Definition at line 36 of file ArtifactEventType.java.
|
private |
Definition at line 180 of file MiscTypes.java.
|
private |
Definition at line 182 of file MiscTypes.java.
org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.MESSAGE |
Definition at line 44 of file MiscTypes.java.
org.sleuthkit.autopsy.timeline.datamodel.eventtype.MiscTypes.RECENT_DOCUMENTS |
Definition at line 96 of file MiscTypes.java.
|
private |
Definition at line 184 of file MiscTypes.java.
Copyright © 2012-2015 Basis Technology. Generated on: Wed Apr 6 2016
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.