Inherits org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.
|
| SingleIntraCaseCommonAttributeSearcher (Long dataSourceId, Map< Long, String > dataSourceIdMap, boolean filterByMediaMimeType, boolean filterByDocMimeType, int percentageThreshold) |
|
CommonAttributeCaseSearchResults | findMatchesByCase () throws TskCoreException, NoCurrentCaseException, SQLException, CentralRepoException |
|
CommonAttributeCountSearchResults | findMatchesByCount () throws TskCoreException, NoCurrentCaseException, SQLException |
|
|
static final String | WHERE_CLAUSE = "%s md5 in (select md5 from tsk_files where md5 in (select md5 from tsk_files where (known != " + FileKnown.KNOWN.getFileKnownValue() + " OR known IS NULL) and data_source_obj_id=%s%s) GROUP BY md5 HAVING COUNT(DISTINCT data_source_obj_id) > 1) order by md5" |
|
Provides logic for selecting common files from a single data source.
Definition at line 29 of file SingleIntraCaseCommonAttributeSearcher.java.
org.sleuthkit.autopsy.commonpropertiessearch.SingleIntraCaseCommonAttributeSearcher.SingleIntraCaseCommonAttributeSearcher |
( |
Long |
dataSourceId, |
|
|
Map< Long, String > |
dataSourceIdMap, |
|
|
boolean |
filterByMediaMimeType, |
|
|
boolean |
filterByDocMimeType, |
|
|
int |
percentageThreshold |
|
) |
| |
Implements the algorithm for getting common files that appear at least once in the given data source
- Parameters
-
dataSourceId | data source id for which common files must appear at least once |
dataSourceIdMap | a map of obj_id to datasource name |
filterByMediaMimeType | match only on files whose mime types can be broadly categorized as media types |
filterByDocMimeType | match only on files whose mime types can be broadly categorized as document types |
percentageThreshold | omit any matches with frequency above this threshold |
Definition at line 48 of file SingleIntraCaseCommonAttributeSearcher.java.
String org.sleuthkit.autopsy.commonpropertiessearch.SingleIntraCaseCommonAttributeSearcher.buildSqlSelectStatement |
( |
| ) |
|
|
protected |
final String org.sleuthkit.autopsy.commonpropertiessearch.SingleIntraCaseCommonAttributeSearcher.dataSourceName |
|
private |
final Long org.sleuthkit.autopsy.commonpropertiessearch.SingleIntraCaseCommonAttributeSearcher.selectedDataSourceId |
|
private |
final String org.sleuthkit.autopsy.commonpropertiessearch.SingleIntraCaseCommonAttributeSearcher.WHERE_CLAUSE = "%s md5 in (select md5 from tsk_files where md5 in (select md5 from tsk_files where (known != " + FileKnown.KNOWN.getFileKnownValue() + " OR known IS NULL) and data_source_obj_id=%s%s) GROUP BY md5 HAVING COUNT(DISTINCT data_source_obj_id) > 1) order by md5" |
|
staticprivate |
The documentation for this class was generated from the following file: