org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences Class Reference

Static Public Member Functions
static void	addOrUpdateNodeData (final Case autopsyCase, Map< UniquePathKey, NodeData > nodeDataMap, AbstractFile newFile) throws TskCoreException, CentralRepoException
static Map< UniquePathKey, NodeData >	getCorrelatedInstances (String deviceId, String dataSourceName, CorrelationAttributeInstance corAttr)
static Collection< CorrelationAttributeInstance >	getCorrelationAttributeFromOsAccount (Node node, OsAccount osAccount)
static String	getEarliestCaseDate () throws CentralRepoException
static String	getPlaceholderUUID ()
static String	makeDataSourceString (String caseUUID, String deviceId, String dataSourceName)
static void	writeOtherOccurrencesToFileAsCSV (File destFile, Collection< CorrelationAttributeInstance > correlationAttList, String dataSourceName, String deviceId) throws IOException

Private Member Functions
	OtherOccurrences ()

Static Private Attributes
static final Logger	logger = Logger.getLogger(OtherOccurrences.class.getName())
static final String	UUID_PLACEHOLDER_STRING = "NoCorrelationAttributeInstance"

Detailed Description

Contains most of the methods for gathering data from the DB and CR for the OtherOccurrencesPanel.

Definition at line 61 of file OtherOccurrences.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.OtherOccurrences ( )

private

Definition at line 67 of file OtherOccurrences.java.

Member Function Documentation

static void org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.addOrUpdateNodeData ( final Case  autopsyCase, Map< UniquePathKey, NodeData >  nodeDataMap, AbstractFile  newFile  ) throws TskCoreException, CentralRepoException

static

Adds the file to the nodeDataMap map if it does not already exist

Parameters

autopsyCase
nodeDataMap
newFile

Exceptions

TskCoreException
CentralRepoException

Definition at line 161 of file OtherOccurrences.java.

References org.sleuthkit.autopsy.centralrepository.application.NodeData.getKnown().

static Map<UniquePathKey, NodeData> org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getCorrelatedInstances ( String  deviceId, String  dataSourceName, CorrelationAttributeInstance  corAttr  )

static

Query the central repo database (if enabled) and the case database to find all artifact instances correlated to the given central repository artifact.

Parameters

deviceId	The device ID for the current data source.
dataSourceName	The name of the current data source.
corAttr	CorrelationAttribute to query for

Returns

A collection of correlated artifact instances

Definition at line 106 of file OtherOccurrences.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getArtifactInstancesByTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFileObjectId(), org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getInstance(), org.sleuthkit.autopsy.casemodule.Case.getName(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.isEnabled().

Referenced by org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesPanel.SelectionWorker.doInBackground(), and org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.writeOtherOccurrencesToFileAsCSV().

static Collection<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getCorrelationAttributeFromOsAccount ( Node  node, OsAccount  osAccount  )

static

Determine what attributes can be used for correlation based on the node.

Parameters

node	The node to correlate
osAccount	the osAccount to correlate

Returns

A list of attributes that can be used for correlation

Definition at line 78 of file OtherOccurrences.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch().

static String org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getEarliestCaseDate ( ) throws CentralRepoException

static

Gets the list of Eam Cases and determines the earliest case creation date. Sets the label to display the earliest date string to the user.

Definition at line 206 of file OtherOccurrences.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getCases(), org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getInstance(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.isEnabled().

static String org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getPlaceholderUUID ( )

static

Get a placeholder string to use in place of case uuid when it isn't available

Returns

UUID_PLACEHOLDER_STRING

Definition at line 285 of file OtherOccurrences.java.

References org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.UUID_PLACEHOLDER_STRING.

Referenced by org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesFilesTableModel.createNodeKey(), and org.sleuthkit.autopsy.centralrepository.application.UniquePathKey.UniquePathKey().

static String org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.makeDataSourceString ( String  caseUUID, String  deviceId, String  dataSourceName  )

static

Create a unique string to be used as a key for deduping data sources as best as possible

Definition at line 198 of file OtherOccurrences.java.

static void org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.writeOtherOccurrencesToFileAsCSV ( File  destFile, Collection< CorrelationAttributeInstance >  correlationAttList, String  dataSourceName, String  deviceId  ) throws IOException

static

Create a cvs file of occurrences for the given parameters.

Parameters

destFile	Output file for the csv data.
correlationAttList	List of correclationAttributeInstances, should not be null.
dataSourceName	Name of the data source.
deviceId	Device id.

Exceptions

IOException

Definition at line 254 of file OtherOccurrences.java.

References org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getCorrelatedInstances(), and org.sleuthkit.autopsy.centralrepository.application.NodeData.getCsvItemSeparator().

Referenced by org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesPanel.CSVWorker.doInBackground().

Member Data Documentation

final Logger org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.logger = Logger.getLogger(OtherOccurrences.class.getName())

staticprivate

Definition at line 63 of file OtherOccurrences.java.

final String org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.UUID_PLACEHOLDER_STRING = "NoCorrelationAttributeInstance"

staticprivate

Definition at line 65 of file OtherOccurrences.java.

Referenced by org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getPlaceholderUUID().

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/centralrepository/application/OtherOccurrences.java