Inherits org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.

Public Member Functions
	UserActivitySummaryGetter ()

Set< Integer >	getArtifactTypeIdsForRefresh ()

default Set< Case.Events >	getCaseEventUpdates ()

default Set< IngestJobEvent >	getIngestJobEventUpdates ()

List< TopWebSearchResult >	getMostRecentWebSearches (DataSource dataSource, int count) throws SleuthkitCaseProviderException, TskCoreException

List< TopAccountResult >	getRecentAccounts (DataSource dataSource, int count) throws SleuthkitCaseProviderException, TskCoreException

List< TopDeviceAttachedResult >	getRecentDevices (DataSource dataSource, int count) throws SleuthkitCaseProviderException, TskCoreException

List< TopDomainsResult >	getRecentDomains (DataSource dataSource, int count) throws TskCoreException, SleuthkitCaseProviderException

List< TopProgramsResult >	getTopPrograms (DataSource dataSource, int count) throws SleuthkitCaseProviderException, TskCoreException

default boolean	isRefreshRequired (ModuleDataEvent evt)

default boolean	isRefreshRequired (ModuleContentEvent evt)

default boolean	isRefreshRequired (IngestManager.IngestJobEvent evt)

default boolean	isRefreshRequired (AbstractFile evt)

boolean	isRefreshRequired (IngestJobEvent evt)

default boolean	isRefreshRequiredForCaseEvent (PropertyChangeEvent evt)

Public Attributes
Set< IngestJobEvent >	INGEST_JOB_EVENTS

Private Attributes
final UserActivitySummary	userActivity

Static Private Attributes
static final Set< Integer >	ARTIFACT_UPDATE_TYPE_IDS

Detailed Description

Wrapper class for converting org.sleuthkit.autopsy.contentutils.UserActivitySummary functionality into a DefaultArtifactUpdateGovernor used by UserActivityPanel tab.

Definition at line 44 of file UserActivitySummaryGetter.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datasourcesummary.ui.UserActivitySummaryGetter.UserActivitySummaryGetter ( )

Definition at line 58 of file UserActivitySummaryGetter.java.

Member Function Documentation

Set<Integer> org.sleuthkit.autopsy.datasourcesummary.ui.UserActivitySummaryGetter.getArtifactTypeIdsForRefresh ( )

Returns: The set of artifact type id's that should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.

Definition at line 63 of file UserActivitySummaryGetter.java.

default Set<Case.Events> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.getCaseEventUpdates ( )

inherited

Returns: The set of Case Events for which data should be updated.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Definition at line 57 of file DefaultUpdateGovernor.java.

default Set<IngestJobEvent> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getIngestJobEventUpdates ( )

inherited

Returns: The set of Ingest Job Events for which data should be updated.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.

Definition at line 52 of file DefaultArtifactUpdateGovernor.java.

References org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.INGEST_JOB_EVENTS.

List<TopWebSearchResult> org.sleuthkit.autopsy.datasourcesummary.ui.UserActivitySummaryGetter.getMostRecentWebSearches	(	DataSource	dataSource,
		int	count
	)		throws SleuthkitCaseProviderException, TskCoreException

Retrieves most recent web searches by most recent date grouped by search term.

Parameters

dataSource	The data source.
count	The maximum number of records to be shown (must be > 0).

Returns: The list of most recent web searches where most recent search appears first.

Exceptions

org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.SleuthkitCaseProviderException
TskCoreException

Definition at line 96 of file UserActivitySummaryGetter.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.UserActivitySummary.getMostRecentWebSearches().

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.UserActivityPanel.UserActivityPanel().

List<TopAccountResult> org.sleuthkit.autopsy.datasourcesummary.ui.UserActivitySummaryGetter.getRecentAccounts	(	DataSource	dataSource,
		int	count
	)		throws SleuthkitCaseProviderException, TskCoreException

Retrieves most recent account used by most recent date for a message sent.

Parameters

dataSource	The data source.
count	The maximum number of records to be shown (must be > 0).

Returns: The list of most recent accounts used where the most recent account by last message sent occurs first.

Exceptions

org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.SleuthkitCaseProviderException
TskCoreException

Definition at line 136 of file UserActivitySummaryGetter.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.UserActivitySummary.getRecentAccounts().

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.UserActivityPanel.UserActivityPanel().

List<TopDeviceAttachedResult> org.sleuthkit.autopsy.datasourcesummary.ui.UserActivitySummaryGetter.getRecentDevices	(	DataSource	dataSource,
		int	count
	)		throws SleuthkitCaseProviderException, TskCoreException

Retrieves most recent devices used by most recent date attached.

Parameters

dataSource	The data source.
count	The maximum number of records to be shown (must be > 0).

Returns: The list of most recent devices attached where most recent device attached appears first.

Exceptions

org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.SleuthkitCaseProviderException
TskCoreException

Definition at line 114 of file UserActivitySummaryGetter.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.UserActivitySummary.getRecentDevices().

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.UserActivityPanel.UserActivityPanel().

List<TopDomainsResult> org.sleuthkit.autopsy.datasourcesummary.ui.UserActivitySummaryGetter.getRecentDomains	(	DataSource	dataSource,
		int	count
	)		throws TskCoreException, SleuthkitCaseProviderException

Gets a list of recent domains based on the datasource.

Parameters

dataSource	The datasource to query for recent domains.
count	The max count of items to return.

Returns: The list of items retrieved from the database.

Exceptions

InterruptedException

Definition at line 77 of file UserActivitySummaryGetter.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.UserActivitySummary.getRecentDomains().

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.UserActivityPanel.UserActivityPanel().

List<TopProgramsResult> org.sleuthkit.autopsy.datasourcesummary.ui.UserActivitySummaryGetter.getTopPrograms	(	DataSource	dataSource,
		int	count
	)		throws SleuthkitCaseProviderException, TskCoreException

Retrieves the top programs results for the given data source limited to the count provided as a parameter. The highest run times are at the top of the list. If that information isn't available the last run date is used. If both, the last run date and the number of run times are unavailable, the programs will be sorted alphabetically, the count will be ignored and all items will be returned.

Parameters

dataSource	The datasource. If the datasource is null, an empty list will be returned.
count	The number of results to return. This value must be > 0 or an IllegalArgumentException will be thrown.

Returns: The sorted list and limited to the count if last run or run count information is available on any item.

Exceptions

SleuthkitCaseProviderException
TskCoreException

Definition at line 159 of file UserActivitySummaryGetter.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.UserActivitySummary.getTopPrograms().

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.UserActivityPanel.UserActivityPanel().

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.isRefreshRequired ( ModuleDataEvent evt )

inherited

Given a module data event, whether or not an update should occur.

Parameters

evt	The ModuleDataEvent that is occurring.

Returns: Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.

Definition at line 38 of file DefaultArtifactUpdateGovernor.java.

References org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getArtifactTypeIdsForRefresh(), and org.sleuthkit.autopsy.ingest.ModuleDataEvent.getBlackboardArtifactType().

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.isRefreshRequired ( ModuleContentEvent evt )

inherited

Given a module content event, whether or not an update should occur.

Parameters

evt	The ModuleContentEvent.

Returns: Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Implemented in org.sleuthkit.autopsy.datasourcesummary.ui.ContainerSummaryGetter, org.sleuthkit.autopsy.datasourcesummary.ui.TypesSummaryGetter, org.sleuthkit.autopsy.datasourcesummary.ui.MimeTypeSummaryGetter, and org.sleuthkit.autopsy.datasourcesummary.ui.TimelineSummaryGetter.

Definition at line 42 of file DefaultUpdateGovernor.java.

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.isRefreshRequired ( IngestManager.IngestJobEvent evt )

inherited

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.

Definition at line 47 of file DefaultArtifactUpdateGovernor.java.

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.isRefreshRequired ( AbstractFile evt )

inherited

Whether or not a newly added AbstractFile should trigger an update.

Parameters

evt	The AbstractFile.

Returns: True if an update should occur.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Implemented in org.sleuthkit.autopsy.datasourcesummary.ui.ContainerSummaryGetter, org.sleuthkit.autopsy.datasourcesummary.ui.TypesSummaryGetter, org.sleuthkit.autopsy.datasourcesummary.ui.MimeTypeSummaryGetter, and org.sleuthkit.autopsy.datasourcesummary.ui.TimelineSummaryGetter.

Definition at line 67 of file DefaultUpdateGovernor.java.

boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.isRefreshRequired ( IngestJobEvent evt )

inherited

Given an ingest job event, determines whether or not an update should occur.

Parameters

evt	The event.

Returns: Whether or not this event should trigger an update.

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.isRefreshRequiredForCaseEvent ( PropertyChangeEvent evt )

inherited

Given a case event, whether or not an update should occur.

Parameters

evt	The event.

Returns: Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Definition at line 37 of file DefaultUpdateGovernor.java.

Member Data Documentation

final Set<Integer> org.sleuthkit.autopsy.datasourcesummary.ui.UserActivitySummaryGetter.ARTIFACT_UPDATE_TYPE_IDS

staticprivate

Initial value:

= new HashSet<>(Arrays.asList(
            ARTIFACT_TYPE.TSK_WEB_SEARCH_QUERY.getTypeID(),
            ARTIFACT_TYPE.TSK_MESSAGE.getTypeID(),
            ARTIFACT_TYPE.TSK_EMAIL_MSG.getTypeID(),
            ARTIFACT_TYPE.TSK_CALLLOG.getTypeID(),
            ARTIFACT_TYPE.TSK_DEVICE_ATTACHED.getTypeID(),
            ARTIFACT_TYPE.TSK_WEB_HISTORY.getTypeID(),
            ARTIFACT_TYPE.TSK_PROG_RUN.getTypeID()
    ))

Definition at line 46 of file UserActivitySummaryGetter.java.

Set<IngestJobEvent> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.INGEST_JOB_EVENTS

inherited

Initial value:

= new HashSet<>(

Arrays.asList(IngestJobEvent.COMPLETED, IngestJobEvent.CANCELLED))

Definition at line 34 of file DefaultArtifactUpdateGovernor.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getIngestJobEventUpdates().

final UserActivitySummary org.sleuthkit.autopsy.datasourcesummary.ui.UserActivitySummaryGetter.userActivity

private

Definition at line 56 of file UserActivitySummaryGetter.java.

The documentation for this class was generated from the following file: