Autopsy
4.19.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.
Public Member Functions | |
void | addNodeProperty (NodeProperty<?> property) |
Action[] | getActions (boolean context) |
BlackboardArtifact | getArtifact () |
T | getContent () |
List< Content > | getContentChildren () |
int | getContentChildrenCount () |
List< Long > | getContentChildrenIds () |
String | getItemType () |
String | getName () |
String | getSourceName () |
boolean | hasContentChildren () |
boolean | hasVisibleContentChildren () |
boolean | isLeafTypeNode () |
int | read (byte[] buf, long offset, long len) throws TskException |
void | setName (String name) |
Static Public Member Functions | |
static boolean | contentHasVisibleContentChildren (Content c) |
Protected Member Functions | |
final void | addCommentProperty (Sheet.Set sheetSet, List< Tag > tags, CorrelationAttributeInstance attribute) |
final void | addCountProperty (Sheet.Set sheetSet, CorrelationAttributeInstance attribute) |
final void | addScorePropertyAndDescription (Sheet.Set sheetSet, List< Tag > tags) |
void | addTagProperty (Sheet.Set sheetSet) throws MissingResourceException |
final void | addTagProperty (Sheet.Set sheetSet, List< Tag > tags) |
Sheet | createSheet () |
void | finalize () throws Throwable |
final List< Tag > | getAllTagsFromDatabase () |
DataResultViewerTable.HasCommentStatus | getCommentProperty (List< Tag > tags, List< CorrelationAttributeInstance > attributes) |
Pair< Long, String > | getCountPropertyAndDescription (CorrelationAttributeInstance attribute, String defaultDescription) |
Pair< Score, String > | getScorePropertyAndDescription (List< Tag > tags) |
synchronized void | updateSheet (NodeProperty<?>...newProps) |
Protected Attributes | |
final T | content |
Static Protected Attributes | |
static final String | NO_DESCR |
static final String | VALUE_LOADING |
Private Member Functions | |
AccountArtifactNode (BlackboardArtifact artifact) | |
void | updateSheet () |
Private Attributes | |
final BlackboardArtifact | artifact |
Definition at line 1798 of file Accounts.java.
|
private |
Definition at line 1802 of file Accounts.java.
|
protectedinherited |
Adds the other occurrences property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
tags | The tags that have been applied to the artifact and its source content. |
attribute | The correlation attribute instance to use for the central repository lookup. |
Definition at line 1690 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
protectedinherited |
Adds the count property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
attribute | The correlation attribute instance to use for the central repository lookup. |
Definition at line 1668 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription().
|
inherited |
Adds a "custom" property to the property sheet of this node, independent of the artifact this node represents or its source content.
property | The custom property. |
Definition at line 1278 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode().
|
protectedinherited |
Adds the score property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
tags | The tags that have been applied to the artifact and its source content. |
Definition at line 1603 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.getScorePropertyAndDescription().
|
protectedinherited |
Adds the tags property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
Definition at line 1621 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
protectedinherited |
Adds the tags property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
tags | The tags that have been applied to the artifact and its source content. |
Definition at line 1644 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
staticinherited |
Return true if the given content object has children. Useful for lazy loading.
c | The content object to look for children on |
Definition at line 157 of file AbstractContentNode.java.
|
protected |
Definition at line 1822 of file Accounts.java.
|
protectedinherited |
Unregisters the application event listener when this node is garbage collected, if this finalizer is actually called.
RC: Isn't there some node lifecycle property change event that could be used to unregister the listener instead?
Throwable |
Definition at line 467 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener().
Action [] org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.getActions | ( | boolean | context | ) |
Definition at line 1811 of file Accounts.java.
|
protectedinherited |
Gets all of the tags applied to the artifact represented by this node and its source content.
Definition at line 1164 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), and org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager().
|
inherited |
Gets the artifact represented by this node.
Definition at line 484 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact.
Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.IsLeafItemVisitor.visit(), org.sleuthkit.autopsy.directorytree.DataResultFilterNode.GetPreferredActionsDisplayableItemNodeVisitor.visit(), and org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.ShowItemVisitor.visit().
|
protectedinherited |
Computes the value of the comment property ("C" in S, C, O) for the artifact represented by this node.
An icon is displayed in the property sheet if a commented tag has been applied to the artifact or its source content, or if there is a corresponding commented correlation attribute instance in the central repository.
tags | The tags applied to the artifact and its source content. |
attributes | A correlation attribute instance for the central repository lookup. |
Definition at line 1192 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_AND_TAG_COMMENTS, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.NO_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_COMMENT, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_NO_COMMENT.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty().
|
inherited |
Return the content data associated with this node
Definition at line 125 of file AbstractContentNode.java.
|
inherited |
Return children of the underlying content.
Definition at line 237 of file AbstractContentNode.java.
|
inherited |
Get count of the underlying content object children.
Useful for lazy loading.
Definition at line 259 of file AbstractContentNode.java.
|
inherited |
Return ids of children of the underlying content. The ids can be treated as keys - useful for lazy loading.
Definition at line 217 of file AbstractContentNode.java.
|
protectedinherited |
Definition at line 1227 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue(), org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getCountCasesWithOtherInstances(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.Type.getDisplayName(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getInstance().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty().
|
inherited |
Definition at line 1393 of file BlackboardArtifactNode.java.
|
inherited |
Definition at line 135 of file AbstractContentNode.java.
|
protectedinherited |
Returns Score property for the node.
tags | list of tags. |
Definition at line 339 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addScorePropertyAndDescription().
|
inherited |
Gets the name of the source content of the artifact represented by this node.
Definition at line 850 of file BlackboardArtifactNode.java.
|
inherited |
Return true if the underlying content object has children Useful for lazy loading.
Definition at line 197 of file AbstractContentNode.java.
|
inherited |
Return true if the underlying content object has children Useful for lazy loading.
Definition at line 145 of file AbstractContentNode.java.
|
inherited |
Definition at line 1388 of file BlackboardArtifactNode.java.
|
inherited |
Reads the content of this node (of the underlying content object).
buf | buffer to read into |
offset | the starting offset in the content object |
len | the length to read |
TskException | exception thrown if the requested part of content could not be read |
Definition at line 285 of file AbstractContentNode.java.
|
inherited |
Definition at line 130 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::BlackboardArtifactNode().
|
protectedinherited |
Updates the values of the properties in the current property sheet with the new properties being passed in. Only if that property exists in the current sheet will it be applied. That way, we allow for subclasses to add their own (or omit some!) properties and we will not accidentally disrupt their UI.
Race condition if not synchronized. Only one update should be applied at a time.
newProps | New file property instances to be updated in the current sheet. |
Definition at line 302 of file AbstractContentNode.java.
|
private |
Definition at line 1848 of file Accounts.java.
|
private |
Definition at line 1800 of file Accounts.java.
|
protectedinherited |
Underlying Sleuth Kit Content object
Definition at line 62 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createLookup(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::getViewSrcContentAction().
|
staticprotectedinherited |
Default no description string
Definition at line 77 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addCommentProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addTagProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createSheet(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::updateSCOColumns(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::updateSheetForAnalysisResult().
|
staticprotectedinherited |
Definition at line 78 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addSCOColumns().
Copyright © 2012-2021 Basis Technology. Generated on: Thu Sep 30 2021
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.