Autopsy  4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
Static Private Member Functions | Static Private Attributes | List of all members
org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML Class Reference

Static Private Member Functions

static Pattern compileRegex (String regex)
 
static FilesSet.Rule readFileExtensionRule (Element elem)
 
static FilesSet.Rule readFileNameRule (Element elem)
 
static void readFilesSet (Element setElem, Map< String, FilesSet > filesSets, String filePath)
 
static FilesSet.Rule.MetaTypeCondition readMetaTypeCondition (Element ruleElement)
 
static FilesSet.Rule.ParentPathCondition readPathCondition (Element ruleElement)
 
static String readRuleName (Element elem)
 
static Map< String, FilesSet > readSerializedDefinitions () throws InterestingItemDefsManagerException
 

Static Private Attributes

static final String DESC_ATTR = "description"
 
static final String EXTENSION_RULE_TAG = "EXTENSION"
 
static final String FILE_SET_TAG = "INTERESTING_FILE_SET"
 
static final String FILE_SETS_ROOT_TAG = "INTERESTING_FILE_SETS"
 
static final String IGNORE_KNOWN_FILES_ATTR = "ignoreKnown"
 
static final List< String > illegalFileNameChars = InterestingItemDefsManager.getIllegalFileNameChars()
 
static final Logger logger = Logger.getLogger(FilesSetXML.class.getName())
 
static final String NAME_ATTR = "name"
 
static final String NAME_RULE_TAG = "NAME"
 
static final String PATH_FILTER_ATTR = "pathFilter"
 
static final String PATH_REGEX_ATTR = "pathRegex"
 
static final String REGEX_ATTR = "regex"
 
static final String RULE_UUID_ATTR = "ruleUUID"
 
static final String TYPE_FILTER_ATTR = "typeFilter"
 
static final String TYPE_FILTER_VALUE_DIRS = "dir"
 
static final String TYPE_FILTER_VALUE_FILES = "file"
 
static final String TYPE_FILTER_VALUE_FILES_AND_DIRS = "files_and_dirs"
 
static final String UNNAMED_LEGACY_RULE_PREFIX = "Unnamed Rule "
 
static int unnamedLegacyRuleCounter
 
static final String XML_ENCODING = "UTF-8"
 

Detailed Description

Reads and writes interesting files set definitions to and from disk in XML format.

Definition at line 116 of file InterestingItemDefsManager.java.

Member Function Documentation

static Pattern org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.compileRegex ( String  regex)
staticprivate

Attempts to compile a regular expression.

Parameters
regexThe regular expression.
Returns
A pattern object, or null if the compilation fails.

Definition at line 435 of file InterestingItemDefsManager.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.readFileExtensionRule(), and org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.readFileNameRule().

static FilesSet.Rule org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.readFileExtensionRule ( Element  elem)
staticprivate
static FilesSet.Rule org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.readFileNameRule ( Element  elem)
staticprivate
static void org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.readFilesSet ( Element  setElem,
Map< String, FilesSet >  filesSets,
String  filePath 
)
staticprivate
static FilesSet.Rule.MetaTypeCondition org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.readMetaTypeCondition ( Element  ruleElement)
staticprivate
static FilesSet.Rule.ParentPathCondition org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.readPathCondition ( Element  ruleElement)
staticprivate
static String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.readRuleName ( Element  elem)
staticprivate
static Map<String, FilesSet> org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.readSerializedDefinitions ( ) throws InterestingItemDefsManagerException
staticprivate

Reads the definitions from the serialization file

Returns
the map representing settings saved to serialization file, empty set if the file does not exist.
Exceptions
InterestingItemDefsManagerExceptionif file could not be read

Definition at line 201 of file InterestingItemDefsManager.java.

Member Data Documentation

final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.DESC_ATTR = "description"
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.EXTENSION_RULE_TAG = "EXTENSION"
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.FILE_SET_TAG = "INTERESTING_FILE_SET"
staticprivate

Definition at line 125 of file InterestingItemDefsManager.java.

final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.FILE_SETS_ROOT_TAG = "INTERESTING_FILE_SETS"
staticprivate

Definition at line 124 of file InterestingItemDefsManager.java.

final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.IGNORE_KNOWN_FILES_ATTR = "ignoreKnown"
staticprivate
final List<String> org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.illegalFileNameChars = InterestingItemDefsManager.getIllegalFileNameChars()
staticprivate

Definition at line 120 of file InterestingItemDefsManager.java.

final Logger org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.logger = Logger.getLogger(FilesSetXML.class.getName())
staticprivate

Definition at line 118 of file InterestingItemDefsManager.java.

final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.NAME_ATTR = "name"
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.NAME_RULE_TAG = "NAME"
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.PATH_FILTER_ATTR = "pathFilter"
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.PATH_REGEX_ATTR = "pathRegex"
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.REGEX_ATTR = "regex"
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.RULE_UUID_ATTR = "ruleUUID"
staticprivate

Definition at line 129 of file InterestingItemDefsManager.java.

final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.TYPE_FILTER_ATTR = "typeFilter"
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.TYPE_FILTER_VALUE_DIRS = "dir"
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.TYPE_FILTER_VALUE_FILES = "file"
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.TYPE_FILTER_VALUE_FILES_AND_DIRS = "files_and_dirs"
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.UNNAMED_LEGACY_RULE_PREFIX = "Unnamed Rule "
staticprivate

Definition at line 140 of file InterestingItemDefsManager.java.

int org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.unnamedLegacyRuleCounter
staticprivate
final String org.sleuthkit.autopsy.modules.interestingitems.InterestingItemDefsManager.FilesSetXML.XML_ENCODING = "UTF-8"
staticprivate

Definition at line 119 of file InterestingItemDefsManager.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Tue Oct 25 2016
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.