org.sleuthkit.autopsy.casemodule.Case Class Reference

Inherits ErrorObserver.

Classes
enum	CaseType
enum	Events

Public Member Functions
Image	addImage (String imgPath, long imgId, String timeZone) throws CaseActionException
void	addReport (String localPath, String srcModuleName, String reportName) throws TskCoreException
void	closeCase () throws CaseActionException
void	deleteReports (Collection<?extends Report > reports) throws TskCoreException
void	deleteReports (Collection<?extends Report > reports, boolean deleteFromDisk) throws TskCoreException
List< Report >	getAllReports () throws TskCoreException
String	getCacheDirectory ()
String	getCaseDirectory ()
CaseType	getCaseType ()
String	getCreatedDate ()
List< Content >	getDataSources () throws TskCoreException
String	getExaminer ()
String	getExportDirectory ()
String	getLogDirectoryPath ()
String	getModuleDirectory ()
String	getModuleOutputDirectoryRelativePath ()
String	getModulesOutputDirAbsPath ()
String	getName ()
String	getNumber ()
String	getOutputDirectory ()
String	getReportDirectory ()
Services	getServices ()
SleuthkitCase	getSleuthkitCase ()
String	getTempDirectory ()
String	getTextIndexName ()
Set< TimeZone >	getTimeZone ()
Set< TimeZone >	getTimeZones ()
boolean	hasData ()
void	notifyAddingDataSource (UUID eventId)
void	notifyBlackBoardArtifactTagAdded (BlackboardArtifactTag newTag)
void	notifyBlackBoardArtifactTagDeleted (BlackboardArtifactTag deletedTag)
void	notifyContentTagAdded (ContentTag newTag)
void	notifyContentTagDeleted (ContentTag deletedTag)
void	notifyDataSourceAdded (Content dataSource, UUID addingDataSourceEventId)
void	notifyFailedAddingDataSource (UUID addingDataSourceEventId)
void	receiveError (String context, String errorMessage)

Static Public Member Functions
static void	addEventSubscriber (Set< String > eventNames, PropertyChangeListener subscriber)
static void	addEventSubscriber (String eventName, PropertyChangeListener subscriber)
static void	addPropertyChangeListener (PropertyChangeListener listener)
static String	convertTimeZone (String timeZoneId)
static void	create (String caseDir, String caseName, String caseNumber, String examiner) throws CaseActionException
static void	create (String caseDir, String caseName, String caseNumber, String examiner, CaseType caseType) throws CaseActionException
static boolean	existsCurrentCase ()
static String	getAppName ()
static String	getAutopsyVersion ()
static Case	getCurrentCase ()
static String	getModulesOutputDirRelPath ()
static PropertyChangeSupport	getPropertyChangeSupport ()
static void	invokeStartupDialog ()
static boolean	isCaseOpen ()
static boolean	isValidName (String caseName)
static void	open (String caseMetadataFilePath) throws CaseActionException
static boolean	pathExists (String filePath)
static void	removeEventSubscriber (String eventName, PropertyChangeListener subscriber)
static void	removeEventSubscriber (Set< String > eventNames, PropertyChangeListener subscriber)
static void	removePropertyChangeListener (PropertyChangeListener listener)

Static Public Attributes
static final String	propStartup = "LBL_StartupDialog"

Private Member Functions
	Case (CaseMetadata caseMetadata, SleuthkitCase db)
String	getOrCreateSubdirectory (String subDirectoryName)

Static Private Member Functions
static void	addCaseNameToMainWindowTitle (String newCaseName)
static void	changeCurrentCase (Case newCase)
static void	clearTempFolder ()
static void	completeCaseChange (Case newCase)

Private Attributes
final CaseMetadata	caseMetadata
CollaborationMonitor	collaborationMonitor
final SleuthkitCase	db
boolean	hasDataSources
final Services	services
volatile IntervalErrorReportData	tskErrorReporter

Static Private Attributes
static String	appName
static final String	CACHE_FOLDER = "Cache"
static Case	currentCase
static final String	EVENT_CHANNEL_NAME = "%s-Case-Events"
static final AutopsyEventPublisher	eventPublisher = new AutopsyEventPublisher()
static final String	EXPORT_FOLDER = "Export"
static final String	LOG_FOLDER = "Log"
static final Logger	logger = Logger.getLogger(Case.class.getName())
static final int	MAX_SANITIZED_CASE_NAME_LEN = 47
static final int	MIN_SECS_BETWEEN_TSK_ERROR_REPORTS = 60
static final String	REPORTS_FOLDER = "Reports"
static final String	TEMP_FOLDER = "Temp"

Detailed Description

An Autopsy case. Currently, only one case at a time may be open.

Definition at line 88 of file Case.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.casemodule.Case.Case ( CaseMetadata  caseMetadata, SleuthkitCase  db  )

private

Constructs an Autopsy case. Currently, only one case at a time may be open.

Definition at line 294 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.caseMetadata, and org.sleuthkit.autopsy.casemodule.Case.db.

Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), and org.sleuthkit.autopsy.casemodule.Case.open().

Member Function Documentation

static void org.sleuthkit.autopsy.casemodule.Case.addCaseNameToMainWindowTitle ( String  newCaseName )

staticprivate

Changes the title of the main window to include the case name.

Parameters

newCaseName

The name of the case.

Definition at line 1424 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getAppName().

Referenced by org.sleuthkit.autopsy.casemodule.Case.completeCaseChange().

static void org.sleuthkit.autopsy.casemodule.Case.addEventSubscriber ( Set< String >  eventNames, PropertyChangeListener  subscriber  )

static

Adds a subscriber to specific case events.

Parameters

eventNames	The events the subscriber is interested in.
subscriber	The subscriber (PropertyChangeListener) to add.

Definition at line 330 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().

Referenced by org.sleuthkit.autopsy.casemodule.Case.addPropertyChangeListener(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToCaseEvents(), and org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.subscribeToChangeEvents().

static void org.sleuthkit.autopsy.casemodule.Case.addEventSubscriber ( String  eventName, PropertyChangeListener  subscriber  )

static

Adds a subscriber to specific case events.

Parameters

eventName	The event the subscriber is interested in.
subscriber	The subscriber (PropertyChangeListener) to add.

Definition at line 340 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().

Image org.sleuthkit.autopsy.casemodule.Case.addImage	(	String	imgPath,
		long	imgId,
		String	timeZone
	)		throws CaseActionException

Adds an image to the current case after it has been added to the DB. Sends out event and reopens windows if needed.

Parameters

imgPath	The path of the image file.
imgId	The ID of the image.
timeZone	The time zone of the image.

Deprecated:

As of release 4.0

Definition at line 1645 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceAdded().

static void org.sleuthkit.autopsy.casemodule.Case.addPropertyChangeListener ( PropertyChangeListener  listener )

static

Adds a subscriber to all case events. To subscribe to only specific events, use one of the overloads of addEventSubscriber.

Parameters

listener

The subscriber (PropertyChangeListener) to add.

Definition at line 306 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.addEventSubscriber().

Referenced by org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.addNotify(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.ExtractedContent.TypeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountsRootNode.AccountTypeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.addNotify(), org.sleuthkit.autopsy.report.ReportWizardAction.ReportWizardAction(), and org.sleuthkit.autopsy.datamodel.VolumeNode.VolumeNode().

void org.sleuthkit.autopsy.casemodule.Case.addReport	(	String	localPath,
		String	srcModuleName,
		String	reportName
	)		throws TskCoreException

Adds a report to the case.

Parameters

localPath	The path of the report file, must be in the case directory or one of its subdirectories.
srcModuleName	The name of the module that created the report.
reportName	The report name, may be empty.

Exceptions

TskCoreException

if there is a problem adding the report to the case database.

Definition at line 768 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.modules.stix.STIXReportModule.generateReport(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importReports(), and org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport().

static void org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase ( Case  newCase )

staticprivate

Updates the current case to the given case, firing property change events and updating the UI.

Parameters

newCase

The new current case or null if there is no new current case.

Use the text index name as the remote event channel name prefix since it is unique, the same as the case database name for a multiuser case, and is readily available through the Case.getTextIndexName() API.

Definition at line 1268 of file Case.java.

References org.sleuthkit.autopsy.ingest.IngestManager.cancelAllIngestJobs(), org.sleuthkit.autopsy.ingest.IngestJob.CancellationReason.CASE_CLOSED, org.sleuthkit.autopsy.events.AutopsyEventPublisher.closeRemoteEventChannel(), org.sleuthkit.autopsy.casemodule.Case.collaborationMonitor, org.sleuthkit.autopsy.casemodule.Case.completeCaseChange(), org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, org.sleuthkit.autopsy.casemodule.Case.currentCase, org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.ingest.IngestManager.getInstance(), org.sleuthkit.autopsy.coreutils.PlatformUtil.getLogDirectory(), org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.casemodule.Case.getTextIndexName(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, org.sleuthkit.autopsy.events.AutopsyEventPublisher.openRemoteEventChannel(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.publishLocally(), org.sleuthkit.autopsy.coreutils.Logger.setLogDirectory(), and org.sleuthkit.autopsy.casemodule.Case.tskErrorReporter.

Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCase(), org.sleuthkit.autopsy.casemodule.Case.create(), and org.sleuthkit.autopsy.casemodule.Case.open().

static void org.sleuthkit.autopsy.casemodule.Case.clearTempFolder ( )

staticprivate

Empties the temp subdirectory for the current case.

Definition at line 1403 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getTempDirectory().

Referenced by org.sleuthkit.autopsy.casemodule.Case.completeCaseChange().

void org.sleuthkit.autopsy.casemodule.Case.closeCase

(

)

throws CaseActionException

Closes this Autopsy case.

Exceptions

CaseActionException

if there is a problem closing the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 834 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase(), and org.sleuthkit.autopsy.casemodule.services.Services.close().

Referenced by org.sleuthkit.autopsy.actions.ExitAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.CaseOpenAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.CaseCloseAction.actionPerformed(), and org.sleuthkit.autopsy.corecomponents.Installer.close().

static void org.sleuthkit.autopsy.casemodule.Case.completeCaseChange ( Case  newCase )

staticprivate

Updates the UI and does miscellaneous other things to complete changing the current case.

Parameters

newCase

The new current case or null if there is no new current case.

Definition at line 1337 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.addCaseNameToMainWindowTitle(), org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.clear(), org.sleuthkit.autopsy.casemodule.Case.clearTempFolder(), org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.closeCoreWindows(), org.sleuthkit.autopsy.core.RuntimeProperties.coreComponentsAreActive(), org.sleuthkit.autopsy.coreutils.PlatformUtil.getAllMemUsageInfo(), org.sleuthkit.autopsy.casemodule.Case.getAppName(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.casemodule.Case.hasData(), and org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.openCoreWindows().

Referenced by org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase().

static String org.sleuthkit.autopsy.casemodule.Case.convertTimeZone ( String  timeZoneId )

static

Converts a Java timezone id to a coded string with only alphanumeric characters. Example: "America/New_York" is converted to "EST5EDT" by this method.

Parameters

timeZoneId

The time zone id.

Returns

The converted time zone string.

Deprecated:

Use org.sleuthkit.autopsy.coreutils.TimeZoneUtils.convertToAlphaNumericFormat instead.

Definition at line 1523 of file Case.java.

References org.sleuthkit.autopsy.coreutils.TimeZoneUtils.convertToAlphaNumericFormat().

static void org.sleuthkit.autopsy.casemodule.Case.create ( String  caseDir, String  caseName, String  caseNumber, String  examiner  ) throws CaseActionException

static

Creates a new single-user Autopsy case.

Parameters

caseDir	The full path of the case directory. It will be created if it doesn't already exist; if it exists, it should have been created using Case.createCaseDirectory to ensure that the required sub-directories were created.
caseName	The name of case.
caseNumber	The case number, can be the empty string.
examiner	The examiner to associate with the case, can be the empty string.

Exceptions

CaseActionException

if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 917 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE.

static void org.sleuthkit.autopsy.casemodule.Case.create ( String  caseDir, String  caseName, String  caseNumber, String  examiner, CaseType  caseType  ) throws CaseActionException

static

Creates a new Autopsy case.

Parameters

caseDir	The full path of the case directory. It will be created if it doesn't already exist; if it exists, it should have been created using Case.createCaseDirectory() to ensure that the required sub-directories were created.
caseName	The name of case.
caseNumber	The case number, can be the empty string.
examiner	The examiner to associate with the case, can be the empty string.
caseType	The type of case (single-user or multi-user).

Exceptions

CaseActionException

if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 940 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.Case(), org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, and org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE.

void org.sleuthkit.autopsy.casemodule.Case.deleteReports

(

Collection<?extends Report >

reports

)

throws TskCoreException

Deletes one or more reports from the case database. Does not delete the report files.

Parameters

reports

The report(s) to be deleted from the case.

Exceptions

TskCoreException

if there is an error deleting the report(s).

Definition at line 800 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish(), and org.sleuthkit.autopsy.casemodule.Case.Events.REPORT_DELETED.

Referenced by org.sleuthkit.autopsy.datamodel.Reports.ReportNode.DeleteReportAction.actionPerformed(), and org.sleuthkit.autopsy.casemodule.Case.deleteReports().

void org.sleuthkit.autopsy.casemodule.Case.deleteReports	(	Collection<?extends Report >	reports,
		boolean	deleteFromDisk
	)		throws TskCoreException

Deletes reports from the case.

Parameters

reports	Collection of Report to be deleted from the case.
deleteFromDisk	No longer supported - ignored.

Exceptions

TskCoreException

Deprecated:

Use deleteReports(Collection<? extends Report> reports) instead.

Definition at line 1681 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.deleteReports().

static boolean org.sleuthkit.autopsy.casemodule.Case.existsCurrentCase ( )

static

Check if case is currently open.

Returns

True if a case is open.

Deprecated:

Use isCaseOpen instead.

Definition at line 1577 of file Case.java.

List<Report> org.sleuthkit.autopsy.casemodule.Case.getAllReports

(

)

throws TskCoreException

Gets the reports that have been added to the case.

Returns

A collection of report objects.

Exceptions

TskCoreException

if there is a problem querying the case database.

Definition at line 788 of file Case.java.

Referenced by org.sleuthkit.autopsy.datamodel.Reports.ReportNodeFactory.createKeys().

static String org.sleuthkit.autopsy.casemodule.Case.getAppName ( )

static

Gets the application name.

Returns

The application name.

Definition at line 877 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.appName.

Referenced by org.sleuthkit.autopsy.casemodule.Case.addCaseNameToMainWindowTitle(), org.sleuthkit.autopsy.casemodule.Case.completeCaseChange(), and org.sleuthkit.autopsy.casemodule.Case.open().

static String org.sleuthkit.autopsy.casemodule.Case.getAutopsyVersion ( )

static

Gets the Autopsy version.

Returns

The Autopsy version.

Deprecated:

Use org.sleuthkit.autopsy.coreutils.Version.getVersion instead

Definition at line 1550 of file Case.java.

References org.sleuthkit.autopsy.coreutils.Version.getVersion().

String org.sleuthkit.autopsy.casemodule.Case.getCacheDirectory

(

)

Gets the full path to the cache directory for this case, creating it if it does not exist.

Returns

The cache directory path.

Definition at line 534 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().

Referenced by org.sleuthkit.autopsy.coreutils.ImageUtils.getCachedThumbnailLocation().

String org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory

(

)

Gets the path to the top-level case directory.

Returns

The top-level case directory path.

Definition at line 492 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory().

Referenced by org.sleuthkit.autopsy.casemodule.CaseOpenAction.actionPerformed(), org.sleuthkit.autopsy.corecomponents.Installer.close(), org.sleuthkit.autopsy.ingest.IngestMonitor.MonitorTimerAction.findRootDirectoryForCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory(), and org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.getPathRelativeToCaseFolder().

CaseType org.sleuthkit.autopsy.casemodule.Case.getCaseType

(

)

Gets the case type.

Returns

The case type.

Definition at line 420 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType().

Referenced by org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath(), org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory(), org.sleuthkit.autopsy.ingest.IngestManager.startIngestJob(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToServiceMonitorEvents(), and org.sleuthkit.autopsy.casemodule.ImageFilePanel.warnIfPathIsInvalid().

String org.sleuthkit.autopsy.casemodule.Case.getCreatedDate

(

)

Gets the case create date.

Returns

case The case create date.

Definition at line 429 of file Case.java.

static Case org.sleuthkit.autopsy.casemodule.Case.getCurrentCase ( )

static

Gets the current case, if there is one.

Returns

The current case.

Exceptions

IllegalStateException

if there is no current case.

Definition at line 380 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.currentCase.

Referenced by org.sleuthkit.autopsy.actions.ExitAction.actionPerformed(), org.sleuthkit.autopsy.actions.AddBookmarkTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteContentTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteBlackboardArtifactTagAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.CaseOpenAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.CaseCloseAction.actionPerformed(), org.sleuthkit.autopsy.directorytree.ExternalViewerAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.Reports.ReportNode.DeleteReportAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag(), org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.addTag(), org.sleuthkit.autopsy.actions.AddContentTagAction.addTag(), org.sleuthkit.autopsy.corecomponents.DataContentTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.Installer.close(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), org.sleuthkit.autopsy.timeline.explorernodes.EventNode.createEventNode(), org.sleuthkit.autopsy.datamodel.Reports.ReportNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.VirtualDirectoryNode.createSheet(), org.sleuthkit.autopsy.datamodel.ImageNode.createSheet(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeDetector.detect(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeDetector.detectUserDefinedType(), org.sleuthkit.autopsy.actions.GetTagNameDialog.display(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.display(), org.sleuthkit.autopsy.directorytree.ExtractAction.extractFile(), org.sleuthkit.autopsy.directorytree.ExtractAction.extractFiles(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.findFileInCaseDatabase(), org.sleuthkit.autopsy.ingest.IngestMonitor.MonitorTimerAction.findRootDirectoryForCurrentCase(), org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.modules.stix.STIXReportModule.generateReport(), org.sleuthkit.autopsy.actions.AddTagAction.TagMenu.getAndAddTag(), org.sleuthkit.autopsy.coreutils.ImageUtils.getCachedThumbnailLocation(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentCase(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentSleuthkitCaseDb(), org.sleuthkit.autopsy.ingest.events.DataSourceAnalysisEvent.getDataSource(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getModuleOutputPath(), org.sleuthkit.autopsy.casemodule.events.ReportAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue(), org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.getOldValue(), org.sleuthkit.autopsy.report.TableReportGenerator.ArtifactData.getOrderedRowDataAsStrings(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.getPathRelativeToCaseFolder(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getRelModuleOutputPath(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getTempPath(), org.sleuthkit.autopsy.coreutils.VideoUtils.getTempVideoFile(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.IngestJobTableModel.getValueAt(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importArtifacts(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importDerivedFiles(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importReports(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importResults(), org.sleuthkit.autopsy.keywordsearch.SolrSearchService.indexArtifact(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.actions.GetTagNameDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction(), org.sleuthkit.autopsy.report.ArtifactSelectionDialog.populateList(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.process(), org.sleuthkit.autopsy.modules.exif.ExifParserFileIngestModule.process(), org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule.process(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule.process(), org.sleuthkit.autopsy.filesearch.DateSearchFilter.CasePropertyChangeListener.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), org.sleuthkit.autopsy.timeline.TimeLineController.AutopsyIngestModuleListener.propertyChange(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.reloadKeys(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayName(), org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.setNode(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.showTimeline(), org.sleuthkit.autopsy.ingest.IngestManager.startIngestJob(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.startUp(), org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp(), org.sleuthkit.autopsy.examples.SampleExecutableDataSourceIngestModule.startUp(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToServiceMonitorEvents(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagTypeNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagTypeNode.updateDisplayName(), and org.sleuthkit.autopsy.casemodule.ImageFilePanel.warnIfPathIsInvalid().

List<Content> org.sleuthkit.autopsy.casemodule.Case.getDataSources

(

)

throws TskCoreException

Gets the data sources for the case.

Returns

A list of data sources.

Exceptions

org.sleuthkit.datamodel.TskCoreException

if there is a problem querying the case database.

Definition at line 617 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.getTimeZones(), org.sleuthkit.autopsy.casemodule.Case.hasData(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), and org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.reloadKeys().

String org.sleuthkit.autopsy.casemodule.Case.getExaminer

(

)

Gets the examiner name.

Returns

The examiner name.

Definition at line 483 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminer().

String org.sleuthkit.autopsy.casemodule.Case.getExportDirectory

(

)

Gets the full path to the export directory for this case, creating it if it does not exist.

Returns

The export directory path.

Definition at line 544 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().

Referenced by org.sleuthkit.autopsy.directorytree.ExtractAction.extractFile(), and org.sleuthkit.autopsy.directorytree.ExtractAction.extractFiles().

String org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath

(

)

Gets the full path to the log directory for this case, creating it if it does not exist.

Returns

The log directory path.

Definition at line 554 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().

Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), and org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase().

String org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory

(

)

Gets the full path to the module output directory for this case, creating it if it does not exist.

Returns

The module output directory path.

Definition at line 574 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().

Referenced by org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getModuleOutputPath(), org.sleuthkit.autopsy.casemodule.Case.getModulesOutputDirAbsPath(), org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.getRAOutputPath(), org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp(), and org.sleuthkit.autopsy.examples.SampleExecutableDataSourceIngestModule.startUp().

String org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath

(

)

Gets the path of the module output directory for this case, relative to the case directory, creating it if it does not exist.

Returns

The path to the module output directory, relative to the case directory.

Definition at line 585 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.

Referenced by org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getRelModuleOutputPath(), and org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp().

String org.sleuthkit.autopsy.casemodule.Case.getModulesOutputDirAbsPath

(

)

Get module output directory path where modules should save their permanent data.

Returns

absolute path to the module output directory

Deprecated:

Use getModuleDirectory() instead.

Definition at line 1590 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory().

static String org.sleuthkit.autopsy.casemodule.Case.getModulesOutputDirRelPath ( )

static

Get relative (with respect to case dir) module output directory path where modules should save their permanent data. The directory is a subdirectory of this case dir.

Returns

relative path to the module output dir

Deprecated:

Use getModuleOutputDirectoryRelativePath() instead

Definition at line 1604 of file Case.java.

String org.sleuthkit.autopsy.casemodule.Case.getName

(

)

Gets the case name.

Returns

The case name.

Definition at line 438 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName().

Referenced by org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.completeCaseChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), and org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport().

String org.sleuthkit.autopsy.casemodule.Case.getNumber

(

)

Gets the case number.

Returns

The case number

Definition at line 474 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseNumber().

String org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory ( String  subDirectoryName )

private

Gets the path to the specified subdirectory of the case directory, creating it if it does not already exist.

Returns

The absolute path to the specified subdirectory.

Definition at line 600 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory().

Referenced by org.sleuthkit.autopsy.casemodule.Case.getCacheDirectory(), org.sleuthkit.autopsy.casemodule.Case.getExportDirectory(), org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath(), org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory(), org.sleuthkit.autopsy.casemodule.Case.getReportDirectory(), and org.sleuthkit.autopsy.casemodule.Case.getTempDirectory().

String org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory

(

)

Gets the root case output directory for this case, creating it if it does not exist. If the case is a single-user case, this is the case directory. If the case is a multi-user case, this is a subdirectory of the case directory specific to the host machine.

Returns

the path to the host output directory.

Definition at line 504 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.coreutils.NetworkUtils.getLocalHostName(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.

Referenced by org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory(), and org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction().

static PropertyChangeSupport org.sleuthkit.autopsy.casemodule.Case.getPropertyChangeSupport ( )

static

Gets a PropertyChangeSupport object. The PropertyChangeSupport object returned is not used by instances of this class and does not have any PropertyChangeListeners.

Returns

A new PropertyChangeSupport object.

Deprecated:

Do not use.

Definition at line 1618 of file Case.java.

String org.sleuthkit.autopsy.casemodule.Case.getReportDirectory

(

)

Gets the full path to the reports directory for this case, creating it if it does not exist.

Returns

The report directory path.

Definition at line 564 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().

Referenced by org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport().

Services org.sleuthkit.autopsy.casemodule.Case.getServices

(

)

Gets the case services manager.

Returns

The case services manager.

Definition at line 402 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.services.

Referenced by org.sleuthkit.autopsy.actions.AddBookmarkTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteContentTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteBlackboardArtifactTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.addTag(), org.sleuthkit.autopsy.actions.AddContentTagAction.addTag(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagNodeFactory.createKeys(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeDetector.detectUserDefinedType(), org.sleuthkit.autopsy.actions.GetTagNameDialog.display(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.display(), org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.actions.AddTagAction.TagMenu.getAndAddTag(), org.sleuthkit.autopsy.report.TableReportGenerator.ArtifactData.getOrderedRowDataAsStrings(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleArtifactTagDeleted(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleContentTagDeleted(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importDerivedFiles(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importResults(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.actions.GetTagNameDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.process(), org.sleuthkit.autopsy.modules.exif.ExifParserFileIngestModule.process(), org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule.process(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule.process(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.startUp(), org.sleuthkit.autopsy.timeline.filters.TagNameFilter.TagNameFilter(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagTypeNode.updateDisplayName(), and org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagTypeNode.updateDisplayName().

SleuthkitCase org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase

(

)

Gets the case database.

Returns

The case database.

Definition at line 393 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.db.

Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), org.sleuthkit.autopsy.timeline.explorernodes.EventNode.createEventNode(), org.sleuthkit.autopsy.datamodel.VirtualDirectoryNode.createSheet(), org.sleuthkit.autopsy.datamodel.ImageNode.createSheet(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeDetector.detect(), org.sleuthkit.autopsy.timeline.db.EventsRepository.EventsRepository(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.findFileInCaseDatabase(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentSleuthkitCaseDb(), org.sleuthkit.autopsy.ingest.events.DataSourceAnalysisEvent.getDataSource(), org.sleuthkit.autopsy.casemodule.events.ReportAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue(), org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.getOldValue(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.IngestJobTableModel.getValueAt(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleArtifactTagDeleted(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleContentTagDeleted(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importArtifacts(), org.sleuthkit.autopsy.keywordsearch.SolrSearchService.indexArtifact(), org.sleuthkit.autopsy.timeline.db.EventsRepository.invalidateCaches(), org.sleuthkit.autopsy.report.ArtifactSelectionDialog.populateList(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayName(), org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.setNode(), and org.sleuthkit.autopsy.timeline.filters.TagNameFilter.TagNameFilter().

String org.sleuthkit.autopsy.casemodule.Case.getTempDirectory

(

)

Gets the full path to the temp directory for this case, creating it if it does not exist.

Returns

The temp subdirectory path.

Definition at line 524 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().

Referenced by org.sleuthkit.autopsy.directorytree.ExternalViewerAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.Case.clearTempFolder(), org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.getRATempPath(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getTempPath(), and org.sleuthkit.autopsy.coreutils.VideoUtils.getTempVideoFile().

String org.sleuthkit.autopsy.casemodule.Case.getTextIndexName

(

)

Gets the name of the keyword search index for the case.

Returns

The index name.

Definition at line 649 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getTextIndexName().

Referenced by org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase().

Set<TimeZone> org.sleuthkit.autopsy.casemodule.Case.getTimeZone

(

)

Gets the time zone(s) of the image data source(s) in this case.

Returns

The set of time zones in use.

Deprecated:

Use getTimeZones instead.

Definition at line 1451 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getTimeZones().

Set<TimeZone> org.sleuthkit.autopsy.casemodule.Case.getTimeZones

(

)

Gets the time zone(s) of the image data source(s) in this case.

Returns

The set of time zones in use.

Definition at line 628 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getDataSources().

Referenced by org.sleuthkit.autopsy.casemodule.Case.getTimeZone().

boolean org.sleuthkit.autopsy.casemodule.Case.hasData

(

)

Queries whether or not the case has data, i.e., whether or not at least one data source has been added to the case.

Returns

True or false.

Definition at line 659 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getDataSources(), and org.sleuthkit.autopsy.casemodule.Case.hasDataSources.

Referenced by org.sleuthkit.autopsy.corecomponents.DataContentTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose(), org.sleuthkit.autopsy.casemodule.Case.completeCaseChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), and org.sleuthkit.autopsy.timeline.OpenTimelineAction.showTimeline().

static void org.sleuthkit.autopsy.casemodule.Case.invokeStartupDialog ( )

static

Invokes the startup dialog window.

Deprecated:

Use StartupWindowProvider.getInstance().open() instead.

Definition at line 1505 of file Case.java.

References org.sleuthkit.autopsy.casemodule.StartupWindowProvider.getInstance(), and org.sleuthkit.autopsy.casemodule.StartupWindowProvider.open().

static boolean org.sleuthkit.autopsy.casemodule.Case.isCaseOpen ( )

static

Checks if case is currently open.

Returns

True or false.

Definition at line 369 of file Case.java.

Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.CaseOpenAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.CaseCloseAction.actionPerformed(), org.sleuthkit.autopsy.corecomponents.DataContentTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.Installer.close(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), org.sleuthkit.autopsy.diagnostics.PerformancePanelAction.isEnabled(), org.sleuthkit.autopsy.actions.ShowIngestProgressSnapshotAction.isEnabled(), org.sleuthkit.autopsy.actions.OpenOutputFolderAction.isEnabled(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.isEnabled(), org.sleuthkit.autopsy.ingest.RunIngestAction.isEnabled(), org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.ExplorerManagerNodeSelectionListener.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.respondSelection(), and org.sleuthkit.autopsy.ingest.IngestManager.subscribeToServiceMonitorEvents().

static boolean org.sleuthkit.autopsy.casemodule.Case.isValidName ( String  caseName )

static

Checks if a string is a valid case name.

TODO( AUT-2221): This should incorporate the vlaidity checks of sanitizeCaseName.

Parameters

caseName

The candidate string.

Returns

True or false.

Definition at line 894 of file Case.java.

void org.sleuthkit.autopsy.casemodule.Case.notifyAddingDataSource

(

UUID

eventId

)

Notifies case event subscribers that a data source is being added to the case.

This should not be called from the event dispatch thread (EDT)

Parameters

eventId

A unique identifier for the event. This UUID must be used to call notifyFailedAddingDataSource or notifyNewDataSource after the data source is added.

Definition at line 680 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagAdded

(

BlackboardArtifactTag

newTag

)

Notifies case event subscribers that an artifact tag has been added.

This should not be called from the event dispatch thread (EDT)

Parameters

newTag

new BlackboardArtifactTag added

Definition at line 742 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag().

void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagDeleted

(

BlackboardArtifactTag

deletedTag

)

Notifies case event subscribers that an artifact tag has been deleted.

This should not be called from the event dispatch thread (EDT)

Parameters

deletedTag

BlackboardArtifactTag deleted

Definition at line 753 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag().

void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagAdded

(

ContentTag

newTag

)

Notifies case event subscribers that a content tag has been added.

This should not be called from the event dispatch thread (EDT)

Parameters

newTag

new ContentTag added

Definition at line 720 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag().

void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagDeleted

(

ContentTag

deletedTag

)

Notifies case event subscribers that a content tag has been deleted.

This should not be called from the event dispatch thread (EDT)

Parameters

deletedTag

ContentTag deleted

Definition at line 731 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag().

void org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceAdded	(	Content	dataSource,
		UUID	addingDataSourceEventId
	)

Notifies case event subscribers that a data source has been added to the case database.

This should not be called from the event dispatch thread (EDT)

Parameters

dataSource	The data source.
addingDataSourceEventId	The unique identifier for the corresponding adding data source event (see notifyAddingDataSource).

Definition at line 709 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.casemodule.Case.addImage().

void org.sleuthkit.autopsy.casemodule.Case.notifyFailedAddingDataSource

(

UUID

addingDataSourceEventId

)

Notifies case event subscribers that a data source failed to be added to the case.

This should not be called from the event dispatch thread (EDT)

Parameters

addingDataSourceEventId

The unique identifier for the corresponding adding data source event (see notifyAddingDataSource).

Definition at line 694 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

static void org.sleuthkit.autopsy.casemodule.Case.open ( String  caseMetadataFilePath ) throws CaseActionException

static

Opens an existing Autopsy case.

Parameters

caseMetadataFilePath

The path of the case metadata (.aut) file.

Exceptions

CaseActionException

if there is a problem opening the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 1144 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.Case(), org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase(), org.sleuthkit.autopsy.core.RuntimeProperties.coreComponentsAreActive(), org.sleuthkit.autopsy.casemodule.Case.db, org.sleuthkit.autopsy.casemodule.Case.getAppName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDatabaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDatabasePath(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getFileExtension(), org.sleuthkit.autopsy.core.UserPreferences.getIsMultiUserModeEnabled(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE.

Referenced by org.sleuthkit.autopsy.casemodule.CaseOpenAction.actionPerformed(), and org.sleuthkit.autopsy.corecomponents.Installer.restored().

static boolean org.sleuthkit.autopsy.casemodule.Case.pathExists ( String  filePath )

static

Check if file exists and is a normal file.

Parameters

filePath

The file path.

Returns

True or false.

Deprecated:

Use java.io.File.exists or java.io.File.isFile instead

Definition at line 1537 of file Case.java.

void org.sleuthkit.autopsy.casemodule.Case.receiveError	(	String	context,
		String	errorMessage
	)

Allows the case database to report internal error conditions in situations where throwing an exception is not appropriate.

Parameters

context	The context of the error condition.
errorMessage	An error message.

Definition at line 815 of file Case.java.

static void org.sleuthkit.autopsy.casemodule.Case.removeEventSubscriber ( String  eventName, PropertyChangeListener  subscriber  )

static

Removes a subscriber to specific case events.

Parameters

eventName	The event the subscriber is no longer interested in.
subscriber	The subscriber (PropertyChangeListener) to remove.

Definition at line 350 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().

Referenced by org.sleuthkit.autopsy.casemodule.Case.removePropertyChangeListener().

static void org.sleuthkit.autopsy.casemodule.Case.removeEventSubscriber ( Set< String >  eventNames, PropertyChangeListener  subscriber  )

static

Removes a subscriber to specific case events.

Parameters

eventNames	The event the subscriber is no longer interested in.
subscriber	The subscriber (PropertyChangeListener) to remove.

Definition at line 360 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().

static void org.sleuthkit.autopsy.casemodule.Case.removePropertyChangeListener ( PropertyChangeListener  listener )

static

Removes a subscriber to all case events. To remove a subscription to only specific events, use one of the overloads of removeEventSubscriber.

Parameters

listener

The subscriber (PropertyChangeListener) to remove.

Definition at line 318 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.removeEventSubscriber().

Referenced by org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< VirtualDirectory >.removeListeners(), org.sleuthkit.autopsy.datamodel.VolumeNode.removeListeners(), org.sleuthkit.autopsy.datamodel.FileTypesNode.FileTypesChildren.FileTypesChildrenObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.FileSize.FileSizeRootChildren.FileSizeRootChildrenObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.DeletedContent.DeletedContentsChildren.DeletedContentsChildrenObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.removeNotify(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.ExtractedContent.TypeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountsRootNode.AccountTypeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.removeNotify(), and org.sleuthkit.autopsy.timeline.TimeLineController.shutDownTimeLine().

Member Data Documentation

String org.sleuthkit.autopsy.casemodule.Case.appName

staticprivate

Definition at line 281 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.getAppName().

final String org.sleuthkit.autopsy.casemodule.Case.CACHE_FOLDER = "Cache"

staticprivate

Definition at line 272 of file Case.java.

final CaseMetadata org.sleuthkit.autopsy.casemodule.Case.caseMetadata

private

Definition at line 283 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.Case().

CollaborationMonitor org.sleuthkit.autopsy.casemodule.Case.collaborationMonitor

private

Definition at line 286 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase().

Case org.sleuthkit.autopsy.casemodule.Case.currentCase

staticprivate

Definition at line 282 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.getCurrentCase().

final SleuthkitCase org.sleuthkit.autopsy.casemodule.Case.db

private

Definition at line 284 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.Case(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), and org.sleuthkit.autopsy.casemodule.Case.open().

final String org.sleuthkit.autopsy.casemodule.Case.EVENT_CHANNEL_NAME = "%s-Case-Events"

staticprivate

Definition at line 271 of file Case.java.

final AutopsyEventPublisher org.sleuthkit.autopsy.casemodule.Case.eventPublisher = new AutopsyEventPublisher()

staticprivate

Definition at line 280 of file Case.java.

final String org.sleuthkit.autopsy.casemodule.Case.EXPORT_FOLDER = "Export"

staticprivate

Definition at line 273 of file Case.java.

boolean org.sleuthkit.autopsy.casemodule.Case.hasDataSources

private

Definition at line 287 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.hasData().

final String org.sleuthkit.autopsy.casemodule.Case.LOG_FOLDER = "Log"

staticprivate

Definition at line 274 of file Case.java.

final Logger org.sleuthkit.autopsy.casemodule.Case.logger = Logger.getLogger(Case.class.getName())

staticprivate

Definition at line 279 of file Case.java.

final int org.sleuthkit.autopsy.casemodule.Case.MAX_SANITIZED_CASE_NAME_LEN = 47

staticprivate

Definition at line 270 of file Case.java.

final int org.sleuthkit.autopsy.casemodule.Case.MIN_SECS_BETWEEN_TSK_ERROR_REPORTS = 60

staticprivate

Definition at line 278 of file Case.java.

final String org.sleuthkit.autopsy.casemodule.Case.propStartup = "LBL_StartupDialog"

static

Definition at line 1686 of file Case.java.

final String org.sleuthkit.autopsy.casemodule.Case.REPORTS_FOLDER = "Reports"

staticprivate

Definition at line 275 of file Case.java.

final Services org.sleuthkit.autopsy.casemodule.Case.services

private

Definition at line 285 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.getServices().

final String org.sleuthkit.autopsy.casemodule.Case.TEMP_FOLDER = "Temp"

staticprivate

Definition at line 276 of file Case.java.

volatile IntervalErrorReportData org.sleuthkit.autopsy.casemodule.Case.tskErrorReporter

private

Definition at line 288 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.changeCurrentCase().

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/casemodule/Case.java