Autopsy  4.10.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Static Public Attributes | Private Member Functions | Static Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.datamodel.KeywordHits Class Reference

Inherits org.sleuthkit.autopsy.datamodel.AutopsyVisitableItem.

Classes

class  DetachableObserverChildFactory
 
class  HitsFactory
 
class  KeywordResults
 
class  KWHitsNodeBase
 
class  ListFactory
 
class  ListNode
 
class  RegExpInstanceKey
 
class  RegExpInstanceNode
 
class  RegExpInstancesFactory
 
class  RootNode
 
class  TermFactory
 
class  TermNode
 

Public Member Functions

 KeywordHits (SleuthkitCase skCase, long objId)
 

Static Public Attributes

static final String NAME = BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getLabel()
 

Private Member Functions

BlackboardArtifactNode createBlackboardArtifactNode (Long artifactId)
 

Static Private Member Functions

static boolean isOnlyDefaultInstance (List< String > instances)
 

Private Attributes

final long datasourceObjId
 
final KeywordResults keywordResults
 
SleuthkitCase skCase
 

Static Private Attributes

static final String DEFAULT_INSTANCE_NAME = "DEFAULT_INSTANCE_NAME"
 
static final String KEYWORD_HIT_ATTRIBUTES_QUERY
 
static final String KEYWORD_HITS = KeywordHits_kwHits_text()
 
static final Logger logger = Logger.getLogger(KeywordHits.class.getName())
 
static final String SIMPLE_LITERAL_SEARCH = KeywordHits_simpleLiteralSearch_text()
 
static final String SIMPLE_REGEX_SEARCH = KeywordHits_singleRegexSearch_text()
 

Detailed Description

Keyword hits node support

Definition at line 64 of file KeywordHits.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordHits ( SleuthkitCase  skCase,
long  objId 
)

Constructor

Parameters
skCaseCase DB
objIdObject id of the data source

Definition at line 125 of file KeywordHits.java.

References org.sleuthkit.autopsy.datamodel.KeywordHits.skCase.

Member Function Documentation

BlackboardArtifactNode org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode ( Long  artifactId)
private
static boolean org.sleuthkit.autopsy.datamodel.KeywordHits.isOnlyDefaultInstance ( List< String >  instances)
staticprivate

Member Data Documentation

final long org.sleuthkit.autopsy.datamodel.KeywordHits.datasourceObjId
private
final String org.sleuthkit.autopsy.datamodel.KeywordHits.DEFAULT_INSTANCE_NAME = "DEFAULT_INSTANCE_NAME"
staticprivate

String used in the instance MAP so that exact matches and substring can fit into the same data structure as regexps, even though they don't use instances.

Definition at line 86 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.KEYWORD_HIT_ATTRIBUTES_QUERY
staticprivate
Initial value:
= "SELECT blackboard_attributes.value_text, "
+ "blackboard_attributes.value_int32, "
+ "blackboard_attributes.artifact_id, "
+ "blackboard_attributes.attribute_type_id "
+ "FROM blackboard_attributes, blackboard_artifacts "
+ "WHERE blackboard_attributes.artifact_id = blackboard_artifacts.artifact_id "
+ " AND blackboard_artifacts.artifact_type_id = " + BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getTypeID()
+ " AND (attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_SET_NAME.getTypeID()
+ " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD.getTypeID()
+ " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD_SEARCH_TYPE.getTypeID()
+ " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD_REGEXP.getTypeID()
+ ")"

query attributes table for the ones that we need for the tree

Definition at line 92 of file KeywordHits.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordResults.update().

final String org.sleuthkit.autopsy.datamodel.KeywordHits.KEYWORD_HITS = KeywordHits_kwHits_text()
staticprivate

Definition at line 69 of file KeywordHits.java.

final KeywordResults org.sleuthkit.autopsy.datamodel.KeywordHits.keywordResults
private

Definition at line 78 of file KeywordHits.java.

final Logger org.sleuthkit.autopsy.datamodel.KeywordHits.logger = Logger.getLogger(KeywordHits.class.getName())
staticprivate

Definition at line 66 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.NAME = BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getLabel()
static

Definition at line 75 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.SIMPLE_LITERAL_SEARCH = KeywordHits_simpleLiteralSearch_text()
staticprivate

Definition at line 71 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.SIMPLE_REGEX_SEARCH = KeywordHits_singleRegexSearch_text()
staticprivate

Definition at line 73 of file KeywordHits.java.

SleuthkitCase org.sleuthkit.autopsy.datamodel.KeywordHits.skCase
private

The documentation for this class was generated from the following file:

Copyright © 2012-2018 Basis Technology. Generated on: Fri Mar 22 2019
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.