Autopsy  4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Static Public Member Functions | Private Member Functions | Static Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.casemodule.Case Class Reference

Classes

class  BackgroundOpenFileSystemsTask
 
class  CancelButtonListener
 
interface  CaseAction
 
enum  CaseLockType
 
enum  CaseType
 
enum  Events
 
class  SleuthkitEventListener
 
class  TaskThreadFactory
 

Public Member Functions

Image addImage (String imgPath, long imgId, String timeZone) throws CaseActionException
 
void addReport (String localPath, String srcModuleName, String reportName) throws TskCoreException
 
Report addReport (String localPath, String srcModuleName, String reportName, Content parent) throws TskCoreException
 
void closeCase () throws CaseActionException
 
SleuthkitCase createPortableCase (String caseName, File portableCaseFolder) throws TskCoreException
 
void deleteReports (Collection<?extends Report > reports) throws TskCoreException
 
void deleteReports (Collection<?extends Report > reports, boolean deleteFromDisk) throws TskCoreException
 
List< Report > getAllReports () throws TskCoreException
 
String getCacheDirectory ()
 
String getCaseDirectory ()
 
String getCaseNotes ()
 
CaseType getCaseType ()
 
String getConfigDirectory ()
 
String getCreatedDate ()
 
List< Content > getDataSources () throws TskCoreException
 
String getDisplayName ()
 
String getExaminer ()
 
String getExaminerEmail ()
 
String getExaminerPhone ()
 
String getExportDirectory ()
 
String getLogDirectoryPath ()
 
CaseMetadata getMetadata ()
 
String getModuleDirectory ()
 
String getModuleOutputDirectoryRelativePath ()
 
String getModulesOutputDirAbsPath ()
 
String getName ()
 
String getNumber ()
 
String getOutputDirectory ()
 
String getReportDirectory ()
 
Services getServices ()
 
SleuthkitCase getSleuthkitCase ()
 
String getTempDirectory ()
 
String getTextIndexName ()
 
Set< TimeZone > getTimeZone ()
 
Set< TimeZone > getTimeZones ()
 
boolean hasData ()
 
boolean hasDataSource ()
 
void notifyAddingDataSource (UUID eventId)
 
void notifyBlackBoardArtifactTagAdded (BlackboardArtifactTag newTag)
 
void notifyBlackBoardArtifactTagAdded (BlackboardArtifactTag newTag, List< BlackboardArtifactTag > removedTagList)
 
void notifyBlackBoardArtifactTagDeleted (BlackboardArtifactTag deletedTag)
 
void notifyCentralRepoCommentChanged (long contentId, String newComment)
 
void notifyContentTagAdded (ContentTag newTag)
 
void notifyContentTagAdded (ContentTag newTag, List< ContentTag > deletedTagList)
 
void notifyContentTagDeleted (ContentTag deletedTag)
 
void notifyDataSourceAdded (Content dataSource, UUID addingDataSourceEventId)
 
void notifyDataSourceNameChanged (Content dataSource, String newName)
 
void notifyFailedAddingDataSource (UUID addingDataSourceEventId)
 
void notifyTagDefinitionChanged (String changedTagName)
 

Static Public Member Functions

static void addEventSubscriber (Set< String > eventNames, PropertyChangeListener subscriber)
 
static void addEventSubscriber (String eventName, PropertyChangeListener subscriber)
 
static void addEventTypeSubscriber (Set< Events > eventTypes, PropertyChangeListener subscriber)
 
static void addPropertyChangeListener (PropertyChangeListener listener)
 
static void closeCurrentCase () throws CaseActionException
 
static String convertTimeZone (String timeZoneId)
 
static void create (String caseDir, String caseDisplayName, String caseNumber, String examiner) throws CaseActionException
 
static void create (String caseDir, String caseDisplayName, String caseNumber, String examiner, CaseType caseType) throws CaseActionException
 
static void createAsCurrentCase (String caseDir, String caseDisplayName, String caseNumber, String examiner, CaseType caseType) throws CaseActionException, CaseActionCancelledException
 
static void createAsCurrentCase (CaseType caseType, String caseDir, CaseDetails caseDetails) throws CaseActionException, CaseActionCancelledException
 
static void createCaseDirectory (String caseDirPath, CaseType caseType) throws CaseActionException
 
static void deleteCase (CaseMetadata metadata) throws CaseActionException
 
static void deleteCurrentCase () throws CaseActionException
 
static boolean deleteMultiUserCase (CaseNodeData caseNodeData, CaseMetadata metadata, ProgressIndicator progressIndicator, Logger logger) throws InterruptedException
 
static boolean existsCurrentCase ()
 
static String getAppName ()
 
static String getAutopsyVersion ()
 
static Case getCurrentCase ()
 
static Case getCurrentCaseThrows () throws NoCurrentCaseException
 
static String getModulesOutputDirRelPath ()
 
static PropertyChangeSupport getPropertyChangeSupport ()
 
static void invokeStartupDialog ()
 
static boolean isCaseOpen ()
 
static boolean isValidName (String caseName)
 
static void open (String caseMetadataFilePath) throws CaseActionException
 
static void openAsCurrentCase (String caseMetadataFilePath) throws CaseActionException
 
static boolean pathExists (String filePath)
 
static void removeEventSubscriber (String eventName, PropertyChangeListener subscriber)
 
static void removeEventSubscriber (Set< String > eventNames, PropertyChangeListener subscriber)
 
static void removeEventTypeSubscriber (Set< Events > eventTypes, PropertyChangeListener subscriber)
 
static void removePropertyChangeListener (PropertyChangeListener listener)
 

Private Member Functions

 Case (CaseType caseType, String caseDir, CaseDetails caseDetails)
 
 Case (CaseMetadata caseMetaData)
 
void acquireCaseLock (CaseLockType lockType) throws CaseActionException
 
void close (ProgressIndicator progressIndicator)
 
void closeAppServiceCaseResources ()
 
Void create (ProgressIndicator progressIndicator, Object additionalParams) throws CaseActionException
 
void createCaseDatabase (ProgressIndicator progressIndicator) throws CaseActionException
 
void createCaseDirectoryIfDoesNotExist (ProgressIndicator progressIndicator) throws CaseActionException
 
void createCaseNodeData (ProgressIndicator progressIndicator) throws CaseActionException
 
boolean dbHasData () throws TskCoreException
 
boolean dbHasDataSource () throws TskCoreException
 
void deleteTempfilesFromCaseDirectory (ProgressIndicator progressIndicator)
 
void doCloseCaseAction () throws CaseActionException
 
void doOpenCaseAction (String progressIndicatorTitle, CaseAction< ProgressIndicator, Object, Void > caseAction, CaseLockType caseLockType, boolean allowCancellation, Object additionalParams) throws CaseActionException
 
Path getBaseSystemTempPath ()
 
String getOrCreateSubdirectory (String subDirectoryName)
 
Void open (ProgressIndicator progressIndicator, Object additionalParams) throws CaseActionException
 
void openAppServiceCaseResources (ProgressIndicator progressIndicator, boolean isNewCase) throws CaseActionException
 
void openCaseDataBase (ProgressIndicator progressIndicator) throws CaseActionException
 
void openCaseLevelServices (ProgressIndicator progressIndicator)
 
void openCommunicationChannels (ProgressIndicator progressIndicator) throws CaseActionException
 
void openFileSystemsInBackground ()
 
void releaseCaseLock ()
 
void saveCaseMetadataToFile (ProgressIndicator progressIndicator) throws CaseActionException
 
void switchLoggingToCaseLogsDirectory (ProgressIndicator progressIndicator)
 
void updateCaseNodeData (ProgressIndicator progressIndicator) throws CaseActionException
 
void updateDataParameters () throws TskCoreException
 

Static Private Member Functions

static CoordinationService.Lock acquireCaseResourcesLock (String caseDir) throws CaseActionException
 
static void checkForCancellation () throws CaseActionCancelledException
 
static void deleteCaseDirectory (CaseMetadata metadata, ProgressIndicator progressIndicator) throws CaseActionException
 
static void deleteFromRecentCases (CaseMetadata metadata, ProgressIndicator progressIndicator)
 
static void deleteMultiUserCase (CaseMetadata metadata, ProgressIndicator progressIndicator) throws CaseActionException, InterruptedException
 
static void deleteMultiUserCaseDatabase (CaseNodeData caseNodeData, CaseMetadata metadata, ProgressIndicator progressIndicator, Logger logger) throws UserPreferencesException, ClassNotFoundException, SQLException, InterruptedException
 
static void deleteMultiUserCaseDirectory (CaseNodeData caseNodeData, CaseMetadata metadata, ProgressIndicator progressIndicator, Logger logger) throws CaseActionException, InterruptedException
 
static void deleteMultiUserCaseTextIndex (CaseNodeData caseNodeData, CaseMetadata metadata, ProgressIndicator progressIndicator, Logger logger) throws KeywordSearchServiceException, InterruptedException
 
static void deleteSingleUserCase (CaseMetadata metadata, ProgressIndicator progressIndicator) throws CaseActionException
 
static void deleteTextIndex (CaseMetadata metadata, ProgressIndicator progressIndicator) throws KeywordSearchServiceException
 
static String displayNameToUniqueName (String caseDisplayName)
 
static String getNameForTitle ()
 
static boolean isNoNodeException (CoordinationServiceException ex)
 
static void openAsCurrentCase (Case newCurrentCase, boolean isNewCase) throws CaseActionException, CaseActionCancelledException
 
static void setDeletedItemFlag (CaseNodeData caseNodeData, CaseNodeData.DeletedFlags flag) throws InterruptedException
 
static void updateGUIForCaseClosed ()
 
static void updateGUIForCaseOpened (Case newCurrentCase)
 

Private Attributes

volatile ExecutorService caseActionExecutor
 
SleuthkitCase caseDb
 
CoordinationService.Lock caseLock
 
Services caseServices
 
CollaborationMonitor collaborationMonitor
 
volatile boolean hasData = false
 
volatile boolean hasDataSource = false
 
final CaseMetadata metadata
 
final SleuthkitEventListener sleuthkitEventListener
 

Static Private Attributes

static final String APP_NAME = UserPreferences.getAppName()
 
static Future<?> backgroundOpenFileSystemsFuture = null
 
static final String CACHE_FOLDER = "Cache"
 
static final String CASE_ACTION_THREAD_NAME = "%s-case-action"
 
static final int CASE_LOCK_TIMEOUT_MINS = 1
 
static final int CASE_RESOURCES_LOCK_TIMEOUT_HOURS = 1
 
static final String CASE_RESOURCES_THREAD_NAME = "%s-manage-case-resources"
 
static final Object caseActionSerializationLock = new Object()
 
static final String CONFIG_FOLDER = "Config"
 
static volatile Case currentCase
 
static final String EVENT_CHANNEL_NAME = "%s-Case-Events"
 
static final AutopsyEventPublisher eventPublisher = new AutopsyEventPublisher()
 
static final String EXPORT_FOLDER = "Export"
 
static final String LOG_FOLDER = "Log"
 
static final Logger logger = Logger.getLogger(Case.class.getName())
 
static volatile Frame mainFrame
 
static final String MODULE_FOLDER = "ModuleOutput"
 
static final String NO_NODE_ERROR_MSG_FRAGMENT = "KeeperErrorCode = NoNode"
 
static final ExecutorService openFileSystemsExecutor = Executors.newSingleThreadExecutor(new ThreadFactoryBuilder().setNameFormat("case-open-file-systems-%d").build())
 
static final String REPORTS_FOLDER = "Reports"
 
static final String SINGLE_USER_CASE_DB_NAME = "autopsy.db"
 
static final String TEMP_FOLDER = "Temp"
 

Detailed Description

An Autopsy case. Currently, only one case at a time may be open.

Definition at line 170 of file Case.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.casemodule.Case.Case ( CaseType  caseType,
String  caseDir,
CaseDetails  caseDetails 
)
private

Constructs a Case object for a new Autopsy case.

Parameters
caseTypeThe type of case (single-user or multi-user).
caseDirThe full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory.
caseDetailsContains details of the case, such as examiner, display name, etc

Definition at line 2068 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.displayNameToUniqueName(), and org.sleuthkit.autopsy.casemodule.CaseDetails.getCaseDisplayName().

Referenced by org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().

org.sleuthkit.autopsy.casemodule.Case.Case ( CaseMetadata  caseMetaData)
private

Constructs a Case object for an existing Autopsy case.

Parameters
caseMetaDataThe metadata for the case.

Definition at line 2077 of file Case.java.

Member Function Documentation

void org.sleuthkit.autopsy.casemodule.Case.acquireCaseLock ( CaseLockType  lockType) throws CaseActionException
private
static CoordinationService.Lock org.sleuthkit.autopsy.casemodule.Case.acquireCaseResourcesLock ( String  caseDir) throws CaseActionException
staticprivate

Acquires an exclusive case resources lock.

Parameters
caseDirThe full path of the case directory.
Returns
The lock or null if the lock could not be acquired.
Exceptions
CaseActionExceptionwith a user-friendly message if the lock cannot be acquired due to an exception.

Definition at line 1262 of file Case.java.

References org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.casemodule.multiusercases.CoordinationServiceUtils.getCaseResourcesNodePath(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), and org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetExclusiveLock().

Referenced by org.sleuthkit.autopsy.casemodule.Case.doCloseCaseAction(), and org.sleuthkit.autopsy.casemodule.Case.doOpenCaseAction().

static void org.sleuthkit.autopsy.casemodule.Case.addEventSubscriber ( Set< String >  eventNames,
PropertyChangeListener  subscriber 
)
static

Adds a subscriber to specific case events.

Parameters
eventNamesThe events the subscriber is interested in.
subscriberThe subscriber (PropertyChangeListener) to add.
Deprecated:
Use addEventTypeSubscriber instead.

Definition at line 701 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().

Referenced by org.sleuthkit.autopsy.casemodule.Case.addPropertyChangeListener().

static void org.sleuthkit.autopsy.casemodule.Case.addEventSubscriber ( String  eventName,
PropertyChangeListener  subscriber 
)
static

Adds a subscriber to specific case events.

Parameters
eventNameThe event the subscriber is interested in.
subscriberThe subscriber (PropertyChangeListener) to add.
Deprecated:
Use addEventTypeSubscriber instead.

Definition at line 726 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().

static void org.sleuthkit.autopsy.casemodule.Case.addEventTypeSubscriber ( Set< Events eventTypes,
PropertyChangeListener  subscriber 
)
static

Adds a subscriber to specific case events.

Parameters
eventTypesThe events the subscriber is interested in.
subscriberThe subscriber (PropertyChangeListener) to add.

Definition at line 711 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().

Referenced by org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesByTypeChildren.addNotify(), org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.addNotify(), org.sleuthkit.autopsy.datamodel.HostNode.HostGroupingChildren.addNotify(), org.sleuthkit.autopsy.datamodel.PersonNode.PersonChildren.addNotify(), org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNodeFactory.addNotify(), org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.addNotify(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.addNotify(), org.sleuthkit.autopsy.communications.FiltersPanel.addNotify(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.addNotify(), org.sleuthkit.autopsy.communications.VisualizationPanel.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ViewModeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.addNotify(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode(), org.sleuthkit.autopsy.communications.ContactCache.ContactCache(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.customizeComponents(), org.sleuthkit.autopsy.filesearch.DataSourcePanel.DataSourcePanel(), org.sleuthkit.autopsy.datasourcesummary.ui.DataSourceSummaryTabbedPane.DataSourceSummaryTabbedPane(), org.sleuthkit.autopsy.filesearch.FileSearchAction.FileSearchAction(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.FileTypesByExtObservable(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.GlobalSettingsPanel(), org.sleuthkit.autopsy.datamodel.HostNode.HostNode(), org.sleuthkit.autopsy.datamodel.ImageNode.ImageNode(), org.sleuthkit.autopsy.corecomponents.MultiUserSettingsPanel.MultiUserSettingsPanel(), org.sleuthkit.autopsy.datamodel.DataSourceFilesNode.DataSourcesNodeChildren.onAdd(), org.sleuthkit.autopsy.datamodel.PersonNode.PersonNode(), org.sleuthkit.autopsy.datasourcesummary.uiutils.EventUpdateHandler.register(), org.sleuthkit.autopsy.contentviewers.annotations.AnnotationsContentViewer.registerListeners(), org.sleuthkit.autopsy.report.infrastructure.ReportWizardAction.ReportWizardAction(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.startUp(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToCaseEvents(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.subscribeToChangeEvents(), org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.ViewPreferencesPanel(), and org.sleuthkit.autopsy.datamodel.VolumeNode.VolumeNode().

Image org.sleuthkit.autopsy.casemodule.Case.addImage ( String  imgPath,
long  imgId,
String  timeZone 
) throws CaseActionException

Adds an image to the current case after it has been added to the DB. Sends out event and reopens windows if needed.

Parameters
imgPathThe path of the image file.
imgIdThe ID of the image.
timeZoneThe time zone of the image.
Returns
Exceptions
org.sleuthkit.autopsy.casemodule.CaseActionException
Deprecated:
As of release 4.0

Definition at line 3970 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceAdded().

static void org.sleuthkit.autopsy.casemodule.Case.addPropertyChangeListener ( PropertyChangeListener  listener)
static

Adds a subscriber to all case events. To subscribe to only specific events, use one of the overloads of addEventSubscriber.

Parameters
listenerThe subscriber (PropertyChangeListener) to add.

Definition at line 674 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.addEventSubscriber().

Referenced by org.sleuthkit.autopsy.communications.OpenCommVisualizationToolAction.OpenCommVisualizationToolAction(), and org.sleuthkit.autopsy.geolocation.OpenGeolocationAction.OpenGeolocationAction().

void org.sleuthkit.autopsy.casemodule.Case.addReport ( String  localPath,
String  srcModuleName,
String  reportName 
) throws TskCoreException

Adds a report to the case.

Parameters
localPathThe path of the report file, must be in the case directory or one of its subdirectories.
srcModuleNameThe name of the module that created the report.
reportNameThe report name, may be empty.
Exceptions
TskCoreExceptionif there is a problem adding the report to the case database.

Definition at line 1926 of file Case.java.

Referenced by org.sleuthkit.autopsy.modules.leappanalyzers.ALeappAnalyzerIngestModule.addILeappReportToReports(), org.sleuthkit.autopsy.modules.leappanalyzers.ILeappAnalyzerIngestModule.addILeappReportToReports(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.createReport(), org.sleuthkit.autopsy.report.modules.caseuco.CaseUcoReportModule.generateReport(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport(), org.sleuthkit.autopsy.communications.VisualizationPanel.handleSnapshotEvent(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeIndex().

Report org.sleuthkit.autopsy.casemodule.Case.addReport ( String  localPath,
String  srcModuleName,
String  reportName,
Content  parent 
) throws TskCoreException

Adds a report to the case.

Parameters
localPathThe path of the report file, must be in the case directory or one of its subdirectories.
srcModuleNameThe name of the module that created the report.
reportNameThe report name, may be empty.
parentThe Content used to create the report, if available.
Returns
The new Report instance.
Exceptions
TskCoreExceptionif there is a problem adding the report to the case database.

Definition at line 1944 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

static void org.sleuthkit.autopsy.casemodule.Case.checkForCancellation ( ) throws CaseActionCancelledException
staticprivate

Checks current thread for an interrupt. Usage: checking for user cancellation of a case creation/opening operation, as reflected in the exception message.

Exceptions
CaseActionCancelledExceptionIf the current thread is interrupted, assumes interrupt was due to a user action.

Definition at line 2539 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), org.sleuthkit.autopsy.casemodule.Case.open(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), and org.sleuthkit.autopsy.casemodule.Case.openCommunicationChannels().

void org.sleuthkit.autopsy.casemodule.Case.close ( ProgressIndicator  progressIndicator)
private
void org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources ( )
private
void org.sleuthkit.autopsy.casemodule.Case.closeCase ( ) throws CaseActionException

Closes this Autopsy case.

Exceptions
CaseActionExceptionif there is a problem closing the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.
Deprecated:
Use closeCurrentCase instead.

Definition at line 3841 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase().

static void org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase ( ) throws CaseActionException
static

Closes the current case.

Exceptions
CaseActionExceptionIf there is a problem closing the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 934 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.caseActionSerializationLock, org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, org.sleuthkit.autopsy.casemodule.Case.currentCase, org.sleuthkit.autopsy.casemodule.Case.doCloseCaseAction(), org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getDisplayName(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.publishLocally(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseClosed().

Referenced by org.sleuthkit.autopsy.actions.ExitAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.CaseCloseAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.Case.closeCase(), org.sleuthkit.autopsy.testutils.CaseUtils.closeCurrentCase(), org.sleuthkit.autopsy.core.Installer.closing(), org.sleuthkit.autopsy.casemodule.Case.deleteCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.apputils.ResetWindowsAction.performAction(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.run(), and org.sleuthkit.autopsy.integrationtesting.IntegrationTestService.runIntegrationTestSuite().

static String org.sleuthkit.autopsy.casemodule.Case.convertTimeZone ( String  timeZoneId)
static

Converts a Java timezone id to a coded string with only alphanumeric characters. Example: "America/New_York" is converted to "EST5EDT" by this method.

Parameters
timeZoneIdThe time zone id.
Returns
The converted time zone string.
Deprecated:
Use org.sleuthkit.autopsy.coreutils.TimeZoneUtils.convertToAlphaNumericFormat instead.

Definition at line 3869 of file Case.java.

References org.sleuthkit.autopsy.coreutils.TimeZoneUtils.convertToAlphaNumericFormat().

Void org.sleuthkit.autopsy.casemodule.Case.create ( ProgressIndicator  progressIndicator,
Object  additionalParams 
) throws CaseActionException
private

A case action (interface CaseAction<T, V, R>) that creates the case directory and case database and opens the application services for this case.

Parameters
progressIndicatorA progress indicator.
additionalParamsAn Object that holds any additional parameters for a case action. For this action, this is null.
Exceptions
CaseActionExceptionIf there is a problem completing the action. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 2220 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.checkForCancellation(), org.sleuthkit.autopsy.casemodule.Case.close(), org.sleuthkit.autopsy.casemodule.Case.createCaseDatabase(), org.sleuthkit.autopsy.casemodule.Case.createCaseDirectoryIfDoesNotExist(), org.sleuthkit.autopsy.casemodule.Case.createCaseNodeData(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), org.sleuthkit.autopsy.casemodule.Case.openCaseLevelServices(), org.sleuthkit.autopsy.casemodule.Case.openCommunicationChannels(), org.sleuthkit.autopsy.casemodule.Case.saveCaseMetadataToFile(), and org.sleuthkit.autopsy.casemodule.Case.switchLoggingToCaseLogsDirectory().

Referenced by org.sleuthkit.autopsy.report.modules.caseuco.CaseUcoReportModule.generateReport().

static void org.sleuthkit.autopsy.casemodule.Case.create ( String  caseDir,
String  caseDisplayName,
String  caseNumber,
String  examiner 
) throws CaseActionException
static

Creates a new, single-user Autopsy case.

Parameters
caseDirThe full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory.
caseDisplayNameThe display name of case, which may be changed later by the user.
caseNumberThe case number, can be the empty string.
examinerThe examiner to associate with the case, can be the empty string.
Exceptions
CaseActionExceptionif there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.
Deprecated:
Use createAsCurrentCase instead.

Definition at line 3786 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE.

static void org.sleuthkit.autopsy.casemodule.Case.create ( String  caseDir,
String  caseDisplayName,
String  caseNumber,
String  examiner,
CaseType  caseType 
) throws CaseActionException
static

Creates a new Autopsy case and makes it the current case.

Parameters
caseDirThe full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory.
caseDisplayNameThe display name of case, which may be changed later by the user.
caseNumberThe case number, can be the empty string.
examinerThe examiner to associate with the case, can be the empty string.
caseTypeThe type of case (single-user or multi-user).
Exceptions
CaseActionExceptionif there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.
Deprecated:
Use createAsCurrentCase instead.

Definition at line 3811 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase().

static void org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase ( String  caseDir,
String  caseDisplayName,
String  caseNumber,
String  examiner,
CaseType  caseType 
) throws CaseActionException, CaseActionCancelledException
static

Creates a new case and makes it the current case.

IMPORTANT: This method should not be called in the event dispatch thread (EDT).

Parameters
caseDirThe full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory.
caseDisplayNameThe display name of case, which may be changed later by the user.
caseNumberThe case number, can be the empty string.
examinerThe examiner to associate with the case, can be the empty string.
caseTypeThe type of case (single-user or multi-user).
Exceptions
CaseActionExceptionIf there is a problem creating the case.
CaseActionCancelledExceptionIf creating the case is cancelled.
Deprecated:
use createAsCurrentCase(CaseType caseType, String caseDir, CaseDetails caseDetails) instead

Definition at line 801 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), org.sleuthkit.autopsy.testutils.CaseUtils.createAsCurrentCase(), and org.sleuthkit.autopsy.integrationtesting.IntegrationTestService.createCaseWithDataSources().

static void org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase ( CaseType  caseType,
String  caseDir,
CaseDetails  caseDetails 
) throws CaseActionException, CaseActionCancelledException
static

Creates a new case and makes it the current case.

IMPORTANT: This method should not be called in the event dispatch thread (EDT).

Parameters
caseDirThe full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory.
caseTypeThe type of case (single-user or multi-user).
caseDetailsContains the modifiable details of the case such as the case display name, the case number, and the examiner related data.
Exceptions
CaseActionExceptionIf there is a problem creating the case.
CaseActionCancelledExceptionIf creating the case is cancelled.

Definition at line 828 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.Case(), org.sleuthkit.autopsy.casemodule.CaseDetails.getCaseDisplayName(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().

void org.sleuthkit.autopsy.casemodule.Case.createCaseDatabase ( ProgressIndicator  progressIndicator) throws CaseActionException
private

Creates the node data for the case directory lock coordination service node, the case directory, the case database and the case metadata file.

Parameters
progressIndicatorA progress indicator.
Exceptions
CaseActionExceptionIf there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 2695 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.casemodule.Case.SINGLE_USER_CASE_DB_NAME.

Referenced by org.sleuthkit.autopsy.casemodule.Case.create().

static void org.sleuthkit.autopsy.casemodule.Case.createCaseDirectory ( String  caseDirPath,
CaseType  caseType 
) throws CaseActionException
static

Creates a case directory and its subdirectories.

Parameters
caseDirPathPath to the case directory (typically base + case name).
caseTypeThe type of case, single-user or multi-user.
Exceptions
CaseActionExceptionthrow if could not create the case dir

Definition at line 1170 of file Case.java.

References org.sleuthkit.autopsy.coreutils.NetworkUtils.getLocalHostName(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.

Referenced by org.sleuthkit.autopsy.casemodule.Case.createCaseDirectoryIfDoesNotExist().

void org.sleuthkit.autopsy.casemodule.Case.createCaseDirectoryIfDoesNotExist ( ProgressIndicator  progressIndicator) throws CaseActionException
private

Creates the case directory, if it does not already exist.

Parameters
progressIndicatorA progress indicator.
Exceptions
CaseActionExceptionIf there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 2558 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.createCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().

Referenced by org.sleuthkit.autopsy.casemodule.Case.create().

void org.sleuthkit.autopsy.casemodule.Case.createCaseNodeData ( ProgressIndicator  progressIndicator) throws CaseActionException
private

Creates the node data for the case directory lock coordination service node.

Parameters
progressIndicatorA progress indicator.
Exceptions
CaseActionExceptionIf there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 2623 of file Case.java.

References org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.createCaseNodeData(), org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().

Referenced by org.sleuthkit.autopsy.casemodule.Case.create().

SleuthkitCase org.sleuthkit.autopsy.casemodule.Case.createPortableCase ( String  caseName,
File  portableCaseFolder 
) throws TskCoreException
boolean org.sleuthkit.autopsy.casemodule.Case.dbHasData ( ) throws TskCoreException
private

Returns true if the case has data. A case has data if there is at least one row in either the tsk_objects or tsk_hosts table.

Returns
True if there is data in this case.
Exceptions
TskCoreException

Definition at line 3580 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteReports(), org.sleuthkit.autopsy.casemodule.Case.SleuthkitEventListener.publishHostsDeletedEvent(), org.sleuthkit.autopsy.casemodule.Case.SleuthkitEventListener.publishOsAccountDeletedEvent(), and org.sleuthkit.autopsy.casemodule.Case.updateDataParameters().

boolean org.sleuthkit.autopsy.casemodule.Case.dbHasDataSource ( ) throws TskCoreException
private

Returns true of there are any data sources in the case database.

Returns
True if this case as a data source.
Exceptions
TskCoreException

Definition at line 3558 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.updateDataParameters().

static void org.sleuthkit.autopsy.casemodule.Case.deleteCase ( CaseMetadata  metadata) throws CaseActionException
static
static void org.sleuthkit.autopsy.casemodule.Case.deleteCaseDirectory ( CaseMetadata  metadata,
ProgressIndicator  progressIndicator 
) throws CaseActionException
staticprivate

Attempts to delete the case directory for a case.

Parameters
metadataThe case metadata.
progressIndicatorA progress indicator.
Exceptions
CaseActionExceptionIf there is an error deleting the case directory.

Definition at line 3464 of file Case.java.

References org.sleuthkit.autopsy.coreutils.FileUtil.deleteDir(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().

Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDirectory(), and org.sleuthkit.autopsy.casemodule.Case.deleteSingleUserCase().

static void org.sleuthkit.autopsy.casemodule.Case.deleteCurrentCase ( ) throws CaseActionException
static

Deletes the current case.

Exceptions
CaseActionExceptionIf there is a problem deleting the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 965 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.caseActionSerializationLock, org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.deleteCase(), and org.sleuthkit.autopsy.casemodule.Case.getMetadata().

static void org.sleuthkit.autopsy.casemodule.Case.deleteFromRecentCases ( CaseMetadata  metadata,
ProgressIndicator  progressIndicator 
)
staticprivate
static void org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase ( CaseMetadata  metadata,
ProgressIndicator  progressIndicator 
) throws CaseActionException, InterruptedException
staticprivate

Deletes a multi-user case. This method does so after acquiring the case directory coordination service lock and is intended to be used for deleting simple multi-user cases without auto ingest input. Note that the case directory coordination service node for the case is only deleted if no errors occurred.

Parameters
metadataThe case metadata.
progressIndicatorA progress indicator.
Exceptions
CaseActionExceptionIf there were one or more errors deleting the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.
InterruptedExceptionIf the thread this code is running in is interrupted while blocked, i.e., if cancellation of the operation is detected during a wait.

Definition at line 3236 of file Case.java.

References org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.coordinationservice.CoordinationService.deleteNode(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CoordinationServiceUtils.getCaseDirectoryNodePath(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName(), org.sleuthkit.autopsy.casemodule.multiusercases.CoordinationServiceUtils.getCaseResourcesNodePath(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDirectory(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), org.sleuthkit.autopsy.casemodule.Case.isNoNodeException(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.readCaseNodeData(), and org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetExclusiveLock().

Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteCase().

static boolean org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase ( CaseNodeData  caseNodeData,
CaseMetadata  metadata,
ProgressIndicator  progressIndicator,
Logger  logger 
) throws InterruptedException
static

IMPORTANT: This is a "beta" method and is subject to change or removal without notice!

Deletes a mulit-user case by attempting to delete the case database, the text index, the case directory, and the case resources coordination service node for a case, and removes the case from the recent cases menu of the main application window. Callers of this method MUST acquire and release the case directory lock for the case and are responsible for deleting the corresponding coordination service nodes, if desired.

Parameters
caseNodeDataThe coordination service node data for the case.
metadataThe case metadata.
progressIndicatorA progress indicator.
loggerA logger.
Returns
True if one or more errors occurred (see log for details), false otherwise.
Exceptions
InterruptedExceptionIf the thread this code is running in is interrupted while blocked, i.e., if cancellation of the operation is detected during a wait.

Definition at line 3323 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.deleteFromRecentCases(), org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDatabase(), org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseTextIndex(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), and org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName().

static void org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDatabase ( CaseNodeData  caseNodeData,
CaseMetadata  metadata,
ProgressIndicator  progressIndicator,
Logger  logger 
) throws UserPreferencesException, ClassNotFoundException, SQLException, InterruptedException
staticprivate

Attempts to delete the case database for a multi-user case.

Parameters
caseNodeDataThe coordination service node data for the case.
metadataThe case metadata.
progressIndicatorA progress indicator.
loggerA logger.
Exceptions
UserPreferencesExceptionif there is an error getting the database server connection info.
ClassNotFoundExceptionif there is an error gettting the required JDBC driver.
SQLExceptionif there is an error executing the SQL to drop the database from the database server.
InterruptedExceptionIf interrupted while blocked waiting for coordination service data to be written to the coordination service node database.

Definition at line 3366 of file Case.java.

References org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.DeletedFlags.CASE_DB, org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDatabaseName(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDisplayName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.isDeletedFlagSet(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), and org.sleuthkit.autopsy.casemodule.Case.setDeletedItemFlag().

Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase().

static void org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDirectory ( CaseNodeData  caseNodeData,
CaseMetadata  metadata,
ProgressIndicator  progressIndicator,
Logger  logger 
) throws CaseActionException, InterruptedException
staticprivate

Attempts to delete the case directory for a multi-user case.

Parameters
caseNodeDataThe coordination service node data for the case.
metadataThe case metadata.
progressIndicatorA progress indicator.
loggerA logger.
Exceptions
CaseActionExceptionif there is an error deleting the case directory.
InterruptedExceptionIf interrupted while blocked waiting for coordination service data to be written to the coordination service node database.

Definition at line 3444 of file Case.java.

References org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.DeletedFlags.CASE_DIR, org.sleuthkit.autopsy.casemodule.Case.deleteCaseDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDisplayName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.isDeletedFlagSet(), and org.sleuthkit.autopsy.casemodule.Case.setDeletedItemFlag().

Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase().

static void org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseTextIndex ( CaseNodeData  caseNodeData,
CaseMetadata  metadata,
ProgressIndicator  progressIndicator,
Logger  logger 
) throws KeywordSearchServiceException, InterruptedException
staticprivate

Attempts to delete the text index for a multi-user case.

Parameters
caseNodeDataThe coordination service node data for the case.
metadataThe case metadata.
progressIndicatorA progress indicator.
loggerA logger.
Exceptions
KeywordSearchServiceExceptionIf there is an error deleting the text index.
InterruptedExceptionIf interrupted while blocked waiting for coordination service data to be written to the coordination service node database.

Definition at line 3401 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.deleteTextIndex(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDisplayName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.isDeletedFlagSet(), org.sleuthkit.autopsy.casemodule.Case.setDeletedItemFlag(), and org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.DeletedFlags.TEXT_INDEX.

Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase().

void org.sleuthkit.autopsy.casemodule.Case.deleteReports ( Collection<?extends Report >  reports) throws TskCoreException

Deletes one or more reports from the case database. Does not delete the report files.

Parameters
reportsThe report(s) to be deleted from the case.
Exceptions
TskCoreExceptionif there is an error deleting the report(s).

Definition at line 1983 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.dbHasData(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish(), and org.sleuthkit.autopsy.casemodule.Case.Events.REPORT_DELETED.

Referenced by org.sleuthkit.autopsy.datamodel.Reports.ReportNode.DeleteReportAction.actionPerformed(), and org.sleuthkit.autopsy.casemodule.Case.deleteReports().

void org.sleuthkit.autopsy.casemodule.Case.deleteReports ( Collection<?extends Report >  reports,
boolean  deleteFromDisk 
) throws TskCoreException

Deletes reports from the case.

Parameters
reportsCollection of Report to be deleted from the case.
deleteFromDiskNo longer supported - ignored.
Exceptions
TskCoreException
Deprecated:
Use deleteReports(Collection<? extends Report> reports) instead.

Definition at line 4003 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.deleteReports().

static void org.sleuthkit.autopsy.casemodule.Case.deleteSingleUserCase ( CaseMetadata  metadata,
ProgressIndicator  progressIndicator 
) throws CaseActionException
staticprivate

Deletes a single-user case.

Parameters
metadataThe case metadata.
progressIndicatorA progress indicator.
Exceptions
CaseActionExceptionIf there were one or more errors deleting the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 3184 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.deleteCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.deleteFromRecentCases(), org.sleuthkit.autopsy.casemodule.Case.deleteTextIndex(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), and org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName().

Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteCase().

void org.sleuthkit.autopsy.casemodule.Case.deleteTempfilesFromCaseDirectory ( ProgressIndicator  progressIndicator)
private

Deletes any files in the temp subdirectory of the case directory.

Parameters
progressIndicatorA progress indicator.

Definition at line 2670 of file Case.java.

References org.sleuthkit.autopsy.coreutils.FileUtil.deleteDir(), org.sleuthkit.autopsy.casemodule.Case.getTempDirectory(), and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().

Referenced by org.sleuthkit.autopsy.casemodule.Case.close(), and org.sleuthkit.autopsy.casemodule.Case.open().

static void org.sleuthkit.autopsy.casemodule.Case.deleteTextIndex ( CaseMetadata  metadata,
ProgressIndicator  progressIndicator 
) throws KeywordSearchServiceException
staticprivate

Attempts to delete the text index for a case.

Parameters
metadataThe case metadata.
progressIndicatorA progress indicator.
Exceptions
KeywordSearchServiceExceptionIf there is an error deleting the text index.

Definition at line 3421 of file Case.java.

References org.sleuthkit.autopsy.progress.ProgressIndicator.progress().

Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseTextIndex(), and org.sleuthkit.autopsy.casemodule.Case.deleteSingleUserCase().

static String org.sleuthkit.autopsy.casemodule.Case.displayNameToUniqueName ( String  caseDisplayName)
staticprivate

Transforms a case display name into a unique case name that can be used to identify the case even if the display name is changed.

Parameters
caseDisplayNameA case display name.
Returns
The unique case name.

Definition at line 1130 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.Case().

void org.sleuthkit.autopsy.casemodule.Case.doCloseCaseAction ( ) throws CaseActionException
private

Performs a case action that involves closing a case opened by calling doOpenCaseAction. If the case is a multi-user case, the coordination service case lock acquired by the call to doOpenCaseAction is released. This case lock must be released in the same thread in which it was acquired, as required by the coordination service. The single-threaded executor saved during the case opening action is therefore used to do the case closing action.

Exceptions
CaseActionExceptionIf there is a problem completing the action. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 2938 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.acquireCaseResourcesLock(), org.sleuthkit.autopsy.casemodule.Case.close(), org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.Case.releaseCaseLock(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.coreutils.ThreadUtils.shutDownTaskExecutor(), org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.progress.ProgressIndicator.start().

Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase().

void org.sleuthkit.autopsy.casemodule.Case.doOpenCaseAction ( String  progressIndicatorTitle,
CaseAction< ProgressIndicator, Object, Void >  caseAction,
CaseLockType  caseLockType,
boolean  allowCancellation,
Object  additionalParams 
) throws CaseActionException
private

Performs a case action that involves creating or opening a case. If the case is a multi-user case, the action is done after acquiring a coordination service case lock. This case lock must be released in the same thread in which it was acquired, as required by the coordination service. A single-threaded executor is therefore created to do the case opening action, and is saved for an eventual case closing action.

IMPORTANT: If an open case action for a multi-user case is terminated because an exception is thrown or the action is cancelled, the action is responsible for releasing the case lock while still running in the case action executor's thread. This method assumes this has been done and performs an orderly shut down of the case action executor.

Parameters
progressIndicatorTitleA title for the progress indicator for the case action.
caseActionThe case action method.
caseLockTypeThe type of case lock required for the case action.
allowCancellationWhether or not to allow the action to be cancelled.
additionalParamsAn Object that holds any additional parameters for a case action.
Exceptions
CaseActionExceptionIf there is a problem completing the action. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 2118 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.acquireCaseLock(), org.sleuthkit.autopsy.casemodule.Case.acquireCaseResourcesLock(), org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.actionPerformed(), org.sleuthkit.autopsy.casemodule.Case.CaseAction< T, V, R >.execute(), org.sleuthkit.autopsy.progress.ProgressIndicator.finish(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.releaseCaseLock(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.setCaseActionFuture(), org.sleuthkit.autopsy.coreutils.ThreadUtils.shutDownTaskExecutor(), org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.progress.ProgressIndicator.start().

Referenced by org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().

static boolean org.sleuthkit.autopsy.casemodule.Case.existsCurrentCase ( )
static

Check if case is currently open.

Returns
True if a case is open.
Deprecated:
Use isCaseOpen instead.

Definition at line 3908 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.isCaseOpen().

List<Report> org.sleuthkit.autopsy.casemodule.Case.getAllReports ( ) throws TskCoreException

Gets the reports that have been added to the case.

Returns
A collection of report objects.
Exceptions
TskCoreExceptionif there is a problem querying the case database.

Definition at line 1971 of file Case.java.

Referenced by org.sleuthkit.autopsy.datamodel.Reports.ReportNodeFactory.createKeys().

static String org.sleuthkit.autopsy.casemodule.Case.getAppName ( )
static

Gets the application name.

Returns
The application name.
Deprecated:

Definition at line 3762 of file Case.java.

References org.sleuthkit.autopsy.core.UserPreferences.getAppName().

static String org.sleuthkit.autopsy.casemodule.Case.getAutopsyVersion ( )
static

Gets the Autopsy version.

Returns
The Autopsy version.
Deprecated:
Use org.sleuthkit.autopsy.coreutils.Version.getVersion instead

Definition at line 3896 of file Case.java.

References org.sleuthkit.autopsy.coreutils.Version.getVersion().

Path org.sleuthkit.autopsy.casemodule.Case.getBaseSystemTempPath ( )
private
String org.sleuthkit.autopsy.casemodule.Case.getCacheDirectory ( )

Gets the full path to the cache directory for this case, creating it if it does not exist.

Returns
The cache directory path.

Definition at line 1624 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().

Referenced by org.sleuthkit.autopsy.coreutils.ImageUtils.getCachedThumbnailLocation().

String org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory ( )
String org.sleuthkit.autopsy.casemodule.Case.getCaseNotes ( )
CaseType org.sleuthkit.autopsy.casemodule.Case.getCaseType ( )
String org.sleuthkit.autopsy.casemodule.Case.getConfigDirectory ( )

Gets the full path to the config directory for this case, creating it if it does not exist.

Returns
The config directory path.

Definition at line 1664 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().

Referenced by org.sleuthkit.autopsy.casemodule.CasePreferences.loadFromStorage(), and org.sleuthkit.autopsy.casemodule.CasePreferences.saveToStorage().

String org.sleuthkit.autopsy.casemodule.Case.getCreatedDate ( )

Gets the case create date.

Returns
case The case create date.

Definition at line 1465 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCreatedDate().

Referenced by org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesPanel.getCaseCreatedDate().

static Case org.sleuthkit.autopsy.casemodule.Case.getCurrentCase ( )
static

Gets the current case. This method should only be called by clients that can be sure a case is currently open. Some examples of suitable clients are data source processors, ingest modules, and report modules.

Returns
The current case.

Definition at line 884 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows().

Referenced by org.sleuthkit.autopsy.report.modules.html.HTMLReport.addThumbnailRows(), org.sleuthkit.autopsy.communications.ContactCache.buildMap(), org.sleuthkit.autopsy.guiutils.ContactCache.buildMap(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.canDeleteDataSources(), org.sleuthkit.autopsy.timeline.TimeLineTopComponent.componentOpened(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeSearchAction.createAndShowPanel(), org.sleuthkit.autopsy.actions.ThreadDumpAction.ThreadDumper.createFilePath(), org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.createReportDirectory(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.currentCaseIsSingleUserCase(), org.sleuthkit.autopsy.casemodule.DeleteDataSourceAction.DataSourceDeletionWorker.doInBackground(), org.sleuthkit.autopsy.communications.relationships.MediaViewer.SelectionWorker.doInBackground(), org.sleuthkit.autopsy.geolocation.GeoFilterPanel.DataSourceUpdater.doInBackground(), org.sleuthkit.autopsy.contentviewers.osaccount.OsAccountDataPanel.PanelDataFetcher.doInBackground(), org.sleuthkit.autopsy.contentviewers.artifactviewers.ContactArtifactViewer.ContactPersonaSearcherTask.doInBackground(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.findAbstractFile(), org.sleuthkit.autopsy.commonpropertiessearch.AllInterCaseCommonAttributeSearcher.findMatchesByCase(), org.sleuthkit.autopsy.commonpropertiessearch.SingleInterCaseCommonAttributeSearcher.findMatchesByCase(), org.sleuthkit.autopsy.commonpropertiessearch.AllInterCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.commonpropertiessearch.SingleInterCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstance.generateNodes(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.getArtifactNode(), org.sleuthkit.autopsy.casemodule.services.Services.getArtifactsBlackboard(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.getAttributeNodes(), org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesPanel.getCaseCreatedDate(), org.sleuthkit.autopsy.report.infrastructure.ReportWizardDataSourceSelectionPanel.getComponent(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentCase(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentSleuthkitCaseDb(), org.sleuthkit.autopsy.casemodule.services.Blackboard.getOrAddArtifactType(), org.sleuthkit.autopsy.casemodule.services.Blackboard.getOrAddAttributeType(), org.sleuthkit.autopsy.discovery.ui.ArtifactsListPanel.DomainArtifactTableModel.getStringForColumn(), org.sleuthkit.autopsy.casemodule.services.Blackboard.indexArtifact(), org.sleuthkit.autopsy.apputils.ResetWindowsAction.performAction(), org.sleuthkit.autopsy.geolocation.AbstractWaypointFetcher.process(), org.sleuthkit.autopsy.modules.dataSourceIntegrity.DataSourceIntegrityIngestModule.process(), org.sleuthkit.autopsy.modules.leappanalyzers.ILeappAnalyzerIngestModule.process(), org.sleuthkit.autopsy.modules.leappanalyzers.ALeappAnalyzerIngestModule.process(), org.sleuthkit.autopsy.modules.plaso.PlasoIngestModule.process(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.process(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.processWithIngestStream(), org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.run(), org.sleuthkit.autopsy.logicalimager.dsp.LogicalImagerDSProcessor.run(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.run(), org.sleuthkit.autopsy.integrationtesting.IntegrationTestService.runIntegrationTestSuite(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.runWithIngestStream(), org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.startUp(), org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp(), org.sleuthkit.autopsy.casemodule.ImageFilePanel.validatePanel(), and org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.viewOsAccount().

static Case org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows ( ) throws NoCurrentCaseException
static

Gets the current case, if there is one, or throws an exception if there is no current case. This method should only be called by methods known to run in threads where it is possible that another thread has closed the current case. The exception provides some protection from the consequences of the race condition between the calling thread and a case closing thread, but it is not fool-proof. Background threads calling this method should put all operations in an exception firewall with a try and catch-all block to handle the possibility of bad timing.

Returns
The current case.
Exceptions
NoCurrentCaseExceptionif there is no current case.

Definition at line 909 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.currentCase.

Referenced by org.sleuthkit.autopsy.actions.AddBookmarkTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.persons.EditPersonAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.hosts.AssociateNewPersonAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.hosts.AssociatePersonAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.hosts.RemoveParentPersonAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteBlackboardArtifactTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteContentTagAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.persons.DeletePersonAction.actionPerformed(), org.sleuthkit.autopsy.centralrepository.AddEditCentralRepoCommentAction.actionPerformed(), org.sleuthkit.autopsy.directorytree.ExternalViewerAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.Reports.ReportNode.DeleteReportAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag(), org.sleuthkit.autopsy.testutils.IngestUtils.addDataSource(), org.sleuthkit.autopsy.datamodel.hosts.ManageHostsDialog.addHost(), org.sleuthkit.autopsy.communications.VisualizationPanel.addNotify(), org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.addTag(), org.sleuthkit.autopsy.actions.AddContentTagAction.addTag(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty(), org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.analyzeOsAccounts(), org.sleuthkit.autopsy.datamodel.AttachmentNode.AttachmentNode(), org.sleuthkit.autopsy.corecomponents.DataContentTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose(), org.sleuthkit.autopsy.testutils.CaseUtils.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.events.CommentChangedEvent.CommentChangedEvent(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), org.sleuthkit.autopsy.datamodel.AbstractContentNode< UnsupportedContent >.contentHasVisibleContentChildren(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.HEICProcessor.convertToJPEG(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.copyFileToTempDirectory(), org.sleuthkit.autopsy.testutils.CaseUtils.createAsCurrentCase(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.createCalllogRelationship(), org.sleuthkit.autopsy.integrationtesting.IntegrationTestService.createCaseWithDataSources(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.createContactRelationship(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdIngestModule.createInterestingFileHit(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesByTypeChildren.createKeys(), org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.createKeys(), org.sleuthkit.autopsy.datamodel.HostNode.HostGroupingChildren.createKeys(), org.sleuthkit.autopsy.datamodel.Reports.ReportNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.PersonNode.PersonChildren.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.createKeys(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.createKeys(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.CreditCardNumberFactory.createKeys(), org.sleuthkit.autopsy.datamodel.AttachmentNode.createLookup(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.createMessageRelationship(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.Indexer.createMetadataArtifact(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.HEICProcessor.createModuleOutputFolder(), org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesFilesTableModel.createNodeKey(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.createNodesForKey(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.createNodesForKey(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.createNodesForKey(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.createReport(), org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.createReportDirectory(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.createRoute(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.createTrackpoint(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag(), org.sleuthkit.autopsy.datamodel.hosts.ManageHostsDialog.deleteHost(), org.sleuthkit.autopsy.actions.DeleteFileBlackboardArtifactTagAction.deleteTag(), org.sleuthkit.autopsy.actions.DeleteFileContentTagAction.deleteTag(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.deleteTag(), org.sleuthkit.autopsy.actions.GetTagNameDialog.display(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.display(), org.sleuthkit.autopsy.datamodel.hosts.MergeHostAction.MergeHostsBackgroundTask.doInBackground(), org.sleuthkit.autopsy.modules.embeddedfileextractor.ExtractArchiveWithPasswordAction.ExtractAndIngestWorker.doInBackground(), org.sleuthkit.autopsy.actions.GetTagNameDialog.AddTagNameWorker.doInBackground(), org.sleuthkit.autopsy.corecomponents.DataContentViewerHex.BackgroundFileCopyTask.doInBackground(), org.sleuthkit.autopsy.datamodel.hosts.ManageHostsDialog.editHost(), org.sleuthkit.autopsy.contentviewers.artifactviewers.ContactArtifactViewer.extractArtifactData(), org.sleuthkit.autopsy.directorytree.actionhelpers.ExtractActionHelper.extractFile(), org.sleuthkit.autopsy.directorytree.actionhelpers.ExtractActionHelper.extractFiles(), org.sleuthkit.autopsy.casemodule.LocalFilesDSProcessor.extractLogicalEvidenceFileContents(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountsRootNode.fetchChildCount(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.FileTypesByExtObservable(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeCaseSearchResults.filterMetadata(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteDB(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.ingest.IngestMonitor.MonitorTimerAction.findRootDirectoryForCurrentCase(), org.sleuthkit.autopsy.ingest.IngestServices.fireModuleDataEvent(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationDataSource.fromTSKDataSource(), org.sleuthkit.autopsy.report.modules.datasourcesummaryexport.DataSourceSummaryReport.generateReport(), org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.report.modules.caseuco.CaseUcoReportModule.generateReport(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateReport(), org.sleuthkit.autopsy.datamodel.HostNode.getActions(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNNode.getActions(), org.sleuthkit.autopsy.datamodel.hosts.AssociateNewPersonAction.getAddDialogName(), org.sleuthkit.autopsy.datamodel.utils.DataSourceLoader.getAllDataSources(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getAllInterestingItemsSets(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAllTagsFromDatabase(), org.sleuthkit.autopsy.coreutils.ImageUtils.getCachedThumbnailLocation(), org.sleuthkit.autopsy.contentviewers.artifactviewers.CallLogArtifactViewer.getCallLogViewData(), org.sleuthkit.autopsy.ingest.IngestServices.getCase(), org.sleuthkit.autopsy.ingest.IngestServices.getCaseDatabase(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.getCorrAttrForFile(), org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getCorrelatedInstances(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.casemodule.events.DataSourceNameChangedEvent.getDataSource(), org.sleuthkit.autopsy.ingest.events.DataSourceAnalysisEvent.getDataSource(), org.sleuthkit.autopsy.filesearch.DataSourcePanel.getDataSourceArray(), org.sleuthkit.autopsy.datasourcesummary.datamodel.CaseDataSourcesSummary.getDataSourceTypes(), org.sleuthkit.autopsy.tags.TagUtils.getDecoratedTagDisplayName(), org.sleuthkit.autopsy.datamodel.persons.EditPersonAction.getEditedPersonName(), org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.getFiles(), org.sleuthkit.autopsy.contentviewers.annotations.AnnotationUtils.getFileSetHits(), org.sleuthkit.autopsy.datamodel.hosts.ManageHostsDialog.getHostListData(), org.sleuthkit.autopsy.timeline.events.TimelineEventAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.TskDataModelChangedEvent< TagSet, TagSet >.getNewValue(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getNotableTagDisplayNames(), org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue(), org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.getOldValue(), org.sleuthkit.autopsy.casemodule.events.TskDataModelChangedEvent< TagSet, TagSet >.getOldValue(), org.sleuthkit.autopsy.report.infrastructure.TableReportGenerator.ArtifactData.getOrderedRowDataAsStrings(), org.sleuthkit.autopsy.directorytree.ViewContextAction.getParentNodeGroupedByPersonHost(), org.sleuthkit.autopsy.datamodel.hosts.MergeHostMenuAction.getPopupPresenter(), org.sleuthkit.autopsy.datamodel.hosts.AssociatePersonsMenuAction.getPopupPresenter(), org.sleuthkit.autopsy.keywordsearch.ExtractedTextViewer.getRawArtifactText(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getRelativeFilePath(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.getSleuthkitCase(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getStandardTagNames(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.getTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getTagDisplayNames(), org.sleuthkit.autopsy.contentviewers.annotations.AnnotationUtils.getTags(), org.sleuthkit.autopsy.modules.yara.YaraIngestModule.getTempDirectory(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.getType(), org.sleuthkit.autopsy.datasourcesummary.datamodel.CaseDataSourcesSummary.getValuesMap(), org.sleuthkit.autopsy.coreutils.VideoUtils.getVideoFileInTempDir(), org.sleuthkit.autopsy.communications.VisualizationPanel.handleSnapshotEvent(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.handleTagChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ArtifactTagTask.handleTagChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.handleTagDeleted(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ArtifactTagTask.handleTagDeleted(), org.sleuthkit.autopsy.ingest.IngestJobSettingsPanel.IngestJobSettingsPanel(), org.sleuthkit.autopsy.ingest.RunIngestAction.isEnabled(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.isRefreshRequired(), org.sleuthkit.autopsy.datamodel.Artifacts.ArtifactFactory.isRefreshRequired(), org.sleuthkit.autopsy.contentviewers.analysisresults.AnalysisResultsContentViewer.isSupported(), org.sleuthkit.autopsy.corecomponents.DataArtifactContentViewer.isSupported(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.LeappFileProcessor(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttr(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsToSave(), org.sleuthkit.autopsy.datamodel.DataSourceFilesNode.DataSourcesNodeChildren.makeKeys(), org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.MediaSubTypeNodeChildren.makeKeys(), org.sleuthkit.autopsy.datamodel.Artifacts.ArtifactFactory.makeKeys(), org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction(), org.sleuthkit.autopsy.healthmonitor.HealthMonitor.performDatabaseQuery(), org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.populateHashMap(), org.sleuthkit.autopsy.contentviewers.contextviewer.ContextViewer.populatePanels(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.EXIFProcessor.process(), org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule.process(), org.sleuthkit.autopsy.modules.yara.YaraIngestModule.process(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule.process(), org.sleuthkit.autopsy.datasourceprocessors.xry.XRYDataSourceProcessor.process(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.processFile(), org.sleuthkit.autopsy.timeline.TimeLineModule.CaseEventListener.propertyChange(), org.sleuthkit.autopsy.filesearch.DateSearchFilter.CasePropertyChangeListener.propertyChange(), org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.rebuildTree(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), org.sleuthkit.autopsy.report.modules.html.HTMLReport.refresh(), org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.refreshMimeTypes(), org.sleuthkit.autopsy.actions.ReplaceContentTagAction.replaceTag(), org.sleuthkit.autopsy.actions.ReplaceBlackboardArtifactTagAction.replaceTag(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.run(), org.sleuthkit.autopsy.datasourceprocessors.xry.XRYDataSourceProcessor.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceAddedTask.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.DataSourceNameChangedTask.run(), org.sleuthkit.autopsy.directorytree.ExportCSVAction.saveNodesToCSV(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.saveTag(), org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesPanel.saveToCSV(), org.sleuthkit.autopsy.contentviewers.artifactviewers.GeneralPurposeArtifactViewer.setArtifact(), org.sleuthkit.autopsy.datamodel.persons.DeletePersonAction.setEnabled(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.showTimeline(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.startTransaction(), org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.startUp(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.startUp(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToServiceMonitorEvents(), org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.syncDataSourceHashes(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.tooManyFiles(), org.sleuthkit.autopsy.centralrepository.application.UniquePathKey.UniquePathKey(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeResults.update(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagTypeNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagTypeNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ByFileNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ByBINNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINNode.updateDisplayName(), org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesPanel.updateOnCaseSelection(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.updateOrAddFileToCaseRec(), org.sleuthkit.autopsy.discovery.search.ResultFile.updateScoreAndDescription(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.updateTag(), org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeIndex(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeSummary().

List<Content> org.sleuthkit.autopsy.casemodule.Case.getDataSources ( ) throws TskCoreException
String org.sleuthkit.autopsy.casemodule.Case.getDisplayName ( )

Gets the case name that can be changed by the user.

Returns
The case display name.

Definition at line 1483 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName().

Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.createReportDirectory(), org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.createReportDirectory(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeCaseSearchResults.filterMetadata(), org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCount(), org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstance.generateNodes(), org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateReport(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getRelativeFilePath(), org.sleuthkit.autopsy.communications.VisualizationPanel.handleSnapshotEvent(), org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport(), org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened(), org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeIndex(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeSummaryCaseDetails().

String org.sleuthkit.autopsy.casemodule.Case.getExaminer ( )
String org.sleuthkit.autopsy.casemodule.Case.getExaminerEmail ( )

Gets the examiner email address.

Returns
The examiner email address.

Definition at line 1519 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminerEmail().

Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase().

String org.sleuthkit.autopsy.casemodule.Case.getExaminerPhone ( )

Gets the examiner phone number.

Returns
The examiner phone number.

Definition at line 1510 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getExaminerPhone().

Referenced by org.sleuthkit.autopsy.casemodule.Case.createPortableCase().

String org.sleuthkit.autopsy.casemodule.Case.getExportDirectory ( )
String org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath ( )
CaseMetadata org.sleuthkit.autopsy.casemodule.Case.getMetadata ( )
String org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory ( )
String org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath ( )

Gets the path of the module output directory for this case, relative to the case directory, creating it if it does not exist.

Returns
The path to the module output directory, relative to the case directory.

Definition at line 1685 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.

Referenced by org.sleuthkit.autopsy.modules.embeddedfileextractor.ExtractArchiveWithPasswordAction.ExtractAndIngestWorker.doInBackground(), and org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp().

String org.sleuthkit.autopsy.casemodule.Case.getModulesOutputDirAbsPath ( )

Get module output directory path where modules should save their permanent data.

Returns
absolute path to the module output directory
Deprecated:
Use getModuleDirectory() instead.

Definition at line 3951 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory().

static String org.sleuthkit.autopsy.casemodule.Case.getModulesOutputDirRelPath ( )
static

Get relative (with respect to case dir) module output directory path where modules should save their permanent data. The directory is a subdirectory of this case dir.

Returns
relative path to the module output dir
Deprecated:
Use getModuleOutputDirectoryRelativePath() instead

Definition at line 3922 of file Case.java.

String org.sleuthkit.autopsy.casemodule.Case.getName ( )
static String org.sleuthkit.autopsy.casemodule.Case.getNameForTitle ( )
staticprivate
String org.sleuthkit.autopsy.casemodule.Case.getNumber ( )
String org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory ( String  subDirectoryName)
private
String org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory ( )

Gets the root case output directory for this case, creating it if it does not exist. If the case is a single-user case, this is the case directory. If the case is a multi-user case, this is a subdirectory of the case directory specific to the host machine.

Returns
the path to the host output directory.

Definition at line 1549 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.coreutils.NetworkUtils.getLocalHostName(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.

Referenced by org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory(), and org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction().

static PropertyChangeSupport org.sleuthkit.autopsy.casemodule.Case.getPropertyChangeSupport ( )
static

Gets a PropertyChangeSupport object. The PropertyChangeSupport object returned is not used by instances of this class and does not have any PropertyChangeListeners.

Returns
A new PropertyChangeSupport object.
Deprecated:
Do not use.

Definition at line 3937 of file Case.java.

String org.sleuthkit.autopsy.casemodule.Case.getReportDirectory ( )
Services org.sleuthkit.autopsy.casemodule.Case.getServices ( )

Gets the case services manager.

Returns
The case services manager.

Definition at line 1447 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.caseServices.

Referenced by org.sleuthkit.autopsy.actions.AddBookmarkTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteBlackboardArtifactTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteContentTagAction.actionPerformed(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.addArtifactsToPortableCase(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.addFilesToPortableCase(), org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.addTag(), org.sleuthkit.autopsy.actions.AddContentTagAction.addTag(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty(), org.sleuthkit.autopsy.report.modules.html.HTMLReport.addThumbnailRows(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagNodeFactory.createKeys(), org.sleuthkit.autopsy.actions.DeleteFileBlackboardArtifactTagAction.deleteTag(), org.sleuthkit.autopsy.actions.DeleteFileContentTagAction.deleteTag(), org.sleuthkit.autopsy.actions.GetTagNameDialog.display(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.display(), org.sleuthkit.autopsy.actions.GetTagNameDialog.AddTagNameWorker.doInBackground(), org.sleuthkit.autopsy.datasourceprocessors.xry.XRYDataSourceProcessor.XRYReportProcessorSwingWorker.doInBackground(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.findAbstractFile(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateCaseUcoReport(), org.sleuthkit.autopsy.report.modules.taggedhashes.SaveTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateReport(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAllTagsFromDatabase(), org.sleuthkit.autopsy.tags.TagUtils.getDecoratedTagDisplayName(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getNotableTagDisplayNames(), org.sleuthkit.autopsy.report.infrastructure.TableReportGenerator.ArtifactData.getOrderedRowDataAsStrings(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getTagDisplayNames(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.handleTagChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ArtifactTagTask.handleTagChange(), org.sleuthkit.autopsy.modules.dataSourceIntegrity.DataSourceIntegrityIngestModule.process(), org.sleuthkit.autopsy.modules.plaso.PlasoIngestModule.process(), org.sleuthkit.autopsy.actions.ReplaceContentTagAction.replaceTag(), org.sleuthkit.autopsy.actions.ReplaceBlackboardArtifactTagAction.replaceTag(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.startUp(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagTypeNode.updateDisplayName(), and org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagTypeNode.updateDisplayName().

SleuthkitCase org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase ( )

Gets the case database.

Returns
The case database.

Definition at line 1438 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.caseDb.

Referenced by org.sleuthkit.autopsy.datamodel.persons.EditPersonAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.hosts.AssociateNewPersonAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.hosts.AssociatePersonAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.hosts.RemoveParentPersonAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.persons.DeletePersonAction.actionPerformed(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.addEmailArtifact(), org.sleuthkit.autopsy.datamodel.hosts.ManageHostsDialog.addHost(), org.sleuthkit.autopsy.communications.VisualizationPanel.addNotify(), org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.analyzeOsAccounts(), org.sleuthkit.autopsy.datamodel.AttachmentNode.AttachmentNode(), org.sleuthkit.autopsy.communications.ContactCache.buildMap(), org.sleuthkit.autopsy.guiutils.ContactCache.buildMap(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.canDeleteDataSources(), org.sleuthkit.autopsy.keywordsearch.SolrSearchService.closeCaseResources(), org.sleuthkit.autopsy.timeline.TimeLineTopComponent.componentOpened(), org.sleuthkit.autopsy.datamodel.AbstractContentNode< UnsupportedContent >.contentHasVisibleContentChildren(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.HEICProcessor.convertToJPEG(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.copyArtifact(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.copyAttachments(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.copyOsAccount(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.copyPathID(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.createCalllogRelationship(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.createContactRelationship(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeIdIngestModule.createInterestingFileHit(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesByTypeChildren.createKeys(), org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.createKeys(), org.sleuthkit.autopsy.datamodel.HostNode.HostGroupingChildren.createKeys(), org.sleuthkit.autopsy.datamodel.PersonNode.PersonChildren.createKeys(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.createKeys(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.createKeys(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.createKeys(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.CreditCardNumberFactory.createKeys(), org.sleuthkit.autopsy.datamodel.AttachmentNode.createLookup(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.createMessageRelationship(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.Indexer.createMetadataArtifact(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.createNodesForKey(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.createNodesForKey(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.createNodesForKey(), org.sleuthkit.autopsy.modules.plaso.PlasoIngestModule.createPlasoArtifacts(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.createRoute(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.createTrackpoint(), org.sleuthkit.autopsy.datamodel.hosts.ManageHostsDialog.deleteHost(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.deleteTag(), org.sleuthkit.autopsy.datamodel.hosts.MergeHostAction.MergeHostsBackgroundTask.doInBackground(), org.sleuthkit.autopsy.communications.relationships.MediaViewer.SelectionWorker.doInBackground(), org.sleuthkit.autopsy.datasourceprocessors.xry.XRYDataSourceProcessor.XRYReportProcessorSwingWorker.doInBackground(), org.sleuthkit.autopsy.geolocation.GeoFilterPanel.DataSourceUpdater.doInBackground(), org.sleuthkit.autopsy.contentviewers.osaccount.OsAccountDataPanel.PanelDataFetcher.doInBackground(), org.sleuthkit.autopsy.contentviewers.artifactviewers.ContactArtifactViewer.ContactPersonaSearcherTask.doInBackground(), org.sleuthkit.autopsy.datamodel.hosts.ManageHostsDialog.editHost(), org.sleuthkit.autopsy.timeline.EventsModel.EventsModel(), org.sleuthkit.autopsy.contentviewers.artifactviewers.ContactArtifactViewer.extractArtifactData(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountsRootNode.fetchChildCount(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteDB(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.ingest.IngestServices.fireModuleDataEvent(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationDataSource.fromTSKDataSource(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateCaseUcoReport(), org.sleuthkit.autopsy.report.modules.datasourcesummaryexport.DataSourceSummaryReport.generateReport(), org.sleuthkit.autopsy.report.modules.caseuco.CaseUcoReportModule.generateReport(), org.sleuthkit.autopsy.report.modules.kml.KMLReport.generateReport(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateReport(), org.sleuthkit.autopsy.datamodel.HostNode.getActions(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNNode.getActions(), org.sleuthkit.autopsy.datamodel.hosts.AssociateNewPersonAction.getAddDialogName(), org.sleuthkit.autopsy.datamodel.utils.DataSourceLoader.getAllDataSources(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getAllInterestingItemsSets(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.getArtifactNode(), org.sleuthkit.autopsy.casemodule.services.Services.getArtifactsBlackboard(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.getAttributeNodes(), org.sleuthkit.autopsy.contentviewers.artifactviewers.CallLogArtifactViewer.getCallLogViewData(), org.sleuthkit.autopsy.ingest.IngestServices.getCaseDatabase(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentSleuthkitCaseDb(), org.sleuthkit.autopsy.casemodule.events.DataSourceNameChangedEvent.getDataSource(), org.sleuthkit.autopsy.ingest.events.DataSourceAnalysisEvent.getDataSource(), org.sleuthkit.autopsy.filesearch.DataSourcePanel.getDataSourceArray(), org.sleuthkit.autopsy.datasourcesummary.datamodel.CaseDataSourcesSummary.getDataSourceTypes(), org.sleuthkit.autopsy.datamodel.persons.EditPersonAction.getEditedPersonName(), org.sleuthkit.autopsy.report.infrastructure.ReportGenerator.getFiles(), org.sleuthkit.autopsy.contentviewers.annotations.AnnotationUtils.getFileSetHits(), org.sleuthkit.autopsy.datamodel.hosts.ManageHostsDialog.getHostListData(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getImageTagDataForContentTag(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.getNewArtifactTypeId(), org.sleuthkit.autopsy.timeline.events.TimelineEventAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.TskDataModelChangedEvent< TagSet, TagSet >.getNewValue(), org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue(), org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.getOldValue(), org.sleuthkit.autopsy.casemodule.events.TskDataModelChangedEvent< TagSet, TagSet >.getOldValue(), org.sleuthkit.autopsy.casemodule.services.Blackboard.getOrAddArtifactType(), org.sleuthkit.autopsy.casemodule.services.Blackboard.getOrAddAttributeType(), org.sleuthkit.autopsy.directorytree.ViewContextAction.getParentNodeGroupedByPersonHost(), org.sleuthkit.autopsy.datamodel.hosts.MergeHostMenuAction.getPopupPresenter(), org.sleuthkit.autopsy.datamodel.hosts.AssociatePersonsMenuAction.getPopupPresenter(), org.sleuthkit.autopsy.keywordsearch.ExtractedTextViewer.getRawArtifactText(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.getSleuthkitCase(), org.sleuthkit.autopsy.timeline.EventsModel.getSleuthkitCase(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getStandardTagNames(), org.sleuthkit.autopsy.discovery.ui.ArtifactsListPanel.DomainArtifactTableModel.getStringForColumn(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.getTag(), org.sleuthkit.autopsy.contentviewers.annotations.AnnotationUtils.getTags(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.getType(), org.sleuthkit.autopsy.datasourcesummary.datamodel.CaseDataSourcesSummary.getValuesMap(), org.sleuthkit.autopsy.timeline.EventsModel.handleArtifactTagDeleted(), org.sleuthkit.autopsy.timeline.EventsModel.handleContentTagDeleted(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.handleTagChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.handleTagDeleted(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ArtifactTagTask.handleTagDeleted(), org.sleuthkit.autopsy.casemodule.services.Blackboard.indexArtifact(), org.sleuthkit.autopsy.ingest.IngestJobSettingsPanel.IngestJobSettingsPanel(), org.sleuthkit.autopsy.timeline.actions.AddManualEvent.JEventCreationDialog.EventCreationDialogPane.initialize(), org.sleuthkit.autopsy.contentviewers.analysisresults.AnalysisResultsContentViewer.isSupported(), org.sleuthkit.autopsy.corecomponents.DataArtifactContentViewer.isSupported(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.LeappFileProcessor(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttr(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), org.sleuthkit.autopsy.datamodel.DataSourceFilesNode.DataSourcesNodeChildren.makeKeys(), org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.MediaSubTypeNodeChildren.makeKeys(), org.sleuthkit.autopsy.datamodel.Artifacts.ArtifactFactory.makeKeys(), org.sleuthkit.autopsy.keywordsearch.SolrSearchService.openCaseResources(), org.sleuthkit.autopsy.healthmonitor.HealthMonitor.performDatabaseQuery(), org.sleuthkit.autopsy.timeline.EventsModel.populateDataSourcesCache(), org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.populateHashMap(), org.sleuthkit.autopsy.contentviewers.contextviewer.ContextViewer.populatePanels(), org.sleuthkit.autopsy.modules.pictureanalyzer.impls.EXIFProcessor.process(), org.sleuthkit.autopsy.geolocation.AbstractWaypointFetcher.process(), org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule.process(), org.sleuthkit.autopsy.modules.dataSourceIntegrity.DataSourceIntegrityIngestModule.process(), org.sleuthkit.autopsy.modules.yara.YaraIngestModule.process(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.process(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule.process(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.process(), org.sleuthkit.autopsy.modules.leappanalyzers.LeappFileProcessor.processFile(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.processWithIngestStream(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.run(), org.sleuthkit.autopsy.casemodule.LocalDiskDSProcessor.run(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.runWithIngestStream(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.saveHighestIds(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.saveTag(), org.sleuthkit.autopsy.contentviewers.artifactviewers.GeneralPurposeArtifactViewer.setArtifact(), org.sleuthkit.autopsy.datamodel.persons.DeletePersonAction.setEnabled(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.startTransaction(), org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.startUp(), org.sleuthkit.autopsy.timeline.ui.ViewFrame.syncViewMode(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.tooManyFiles(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeResults.update(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ByFileNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ByBINNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINNode.updateDisplayName(), org.sleuthkit.autopsy.timeline.EventsModel.updateEventsForHashSetHits(), org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened(), org.sleuthkit.autopsy.modules.embeddedfileextractor.SevenZipExtractor.UnpackedTree.updateOrAddFileToCaseRec(), org.sleuthkit.autopsy.discovery.search.ResultFile.updateScoreAndDescription(), org.sleuthkit.autopsy.casemodule.services.contentviewertags.ContentViewerTagManager.updateTag(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.viewOsAccount(), org.sleuthkit.autopsy.communications.snapshot.CommSnapShotReportWriter.writeSnapShotHTMLFile(), and org.sleuthkit.autopsy.report.modules.html.HTMLReport.writeSummary().

String org.sleuthkit.autopsy.casemodule.Case.getTempDirectory ( )

Gets the full path to the temp directory for this case, creating it if it does not exist.

Returns
The temp subdirectory path.

Definition at line 1576 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getBaseSystemTempPath(), org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.machinesettings.UserMachinePreferences.getCustomTempDirectory(), org.sleuthkit.autopsy.coreutils.NetworkUtils.getLocalHostName(), org.sleuthkit.autopsy.casemodule.Case.getName(), org.sleuthkit.autopsy.machinesettings.UserMachinePreferences.getTempDirChoice(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, and org.sleuthkit.autopsy.casemodule.Case.TEMP_FOLDER.

Referenced by org.sleuthkit.autopsy.directorytree.ExternalViewerAction.actionPerformed(), org.sleuthkit.autopsy.coreutils.SQLiteTableReader.copyFileToTempDirectory(), org.sleuthkit.autopsy.casemodule.Case.deleteTempfilesFromCaseDirectory(), org.sleuthkit.autopsy.corecomponents.DataContentViewerHex.BackgroundFileCopyTask.doInBackground(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteDB(), org.sleuthkit.autopsy.coreutils.AppSQLiteDB.findAndCopySQLiteMetaFile(), org.sleuthkit.autopsy.report.modules.portablecase.PortableCaseReportModule.generateCaseUcoReport(), org.sleuthkit.autopsy.modules.yara.YaraIngestModule.getTempDirectory(), org.sleuthkit.autopsy.coreutils.VideoUtils.getVideoFileInTempDir(), org.sleuthkit.autopsy.modules.leappanalyzers.ILeappAnalyzerIngestModule.process(), and org.sleuthkit.autopsy.modules.leappanalyzers.ALeappAnalyzerIngestModule.process().

String org.sleuthkit.autopsy.casemodule.Case.getTextIndexName ( )

Gets the name of the legacy keyword search index for the case. Not for general use.

Returns
The index name.

Definition at line 1735 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getMetadata(), and org.sleuthkit.autopsy.casemodule.CaseMetadata.getTextIndexName().

Set<TimeZone> org.sleuthkit.autopsy.casemodule.Case.getTimeZone ( )

Gets the time zone(s) of the image data source(s) in this case.

Returns
The set of time zones in use.
Deprecated:
Use getTimeZones instead.

Definition at line 3988 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getTimeZones().

Set<TimeZone> org.sleuthkit.autopsy.casemodule.Case.getTimeZones ( )

Gets the time zone(s) of the image data source(s) in this case.

Returns
The set of time zones in use.

Definition at line 1712 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.getTimeZone().

boolean org.sleuthkit.autopsy.casemodule.Case.hasData ( )

Returns true if there is any data in the case.

Returns
True or false.

Definition at line 1744 of file Case.java.

boolean org.sleuthkit.autopsy.casemodule.Case.hasDataSource ( )

Returns true if there is one or more data sources in the case.

Returns
True or false.

Definition at line 1753 of file Case.java.

static void org.sleuthkit.autopsy.casemodule.Case.invokeStartupDialog ( )
static
static boolean org.sleuthkit.autopsy.casemodule.Case.isCaseOpen ( )
static

Checks if a case, the current case, is open at the time it is called.

Returns
True or false.

Definition at line 873 of file Case.java.

Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.addIngestJobEventsListener(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.canDeleteDataSources(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.cbUseCentralRepoActionPerformed(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeSearchAction.createAndShowPanel(), org.sleuthkit.autopsy.actions.ThreadDumpAction.ThreadDumper.createFilePath(), org.sleuthkit.autopsy.featureaccess.FeatureAccessUtils.currentCaseIsSingleUserCase(), org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesPanel.customizeComponents(), org.sleuthkit.autopsy.casemodule.DeleteDataSourceAction.DataSourceDeletionWorker.done(), org.sleuthkit.autopsy.casemodule.Case.existsCurrentCase(), org.sleuthkit.autopsy.filesearch.FileSearchAction.FileSearchAction(), org.sleuthkit.autopsy.keywordsearch.ExtractAllTermsReport.generateReport(), org.sleuthkit.autopsy.allcasessearch.AllCasesSearchAction.isEnabled(), org.sleuthkit.autopsy.diagnostics.PerformancePanelAction.isEnabled(), org.sleuthkit.autopsy.discovery.ui.OpenDiscoveryAction.isEnabled(), org.sleuthkit.autopsy.actions.ShowIngestProgressSnapshotAction.isEnabled(), org.sleuthkit.autopsy.commonpropertiessearch.CommonAttributeSearchAction.isEnabled(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.isEnabled(), org.sleuthkit.autopsy.actions.OpenOutputFolderAction.isEnabled(), org.sleuthkit.autopsy.corecomponents.MultiUserSettingsPanelController.isValid(), org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.load(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.onSettingsChange(), org.sleuthkit.autopsy.apputils.ResetWindowsAction.performAction(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.IngestJobEventPropertyChangeListener.propertyChange(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), org.sleuthkit.autopsy.casemodule.CasePreferences.setGroupItemsInTreeByDataSource(), org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.storeGroupItemsInTreeByDataSource(), and org.sleuthkit.autopsy.corecomponents.MultiUserSettingsPanelController.update().

static boolean org.sleuthkit.autopsy.casemodule.Case.isNoNodeException ( CoordinationServiceException  ex)
staticprivate

Examines a coordination service exception to try to determine if it is a "no node" exception, i.e., an operation was attempted on a node that does not exist.

Parameters
exA coordination service exception.
Returns
True or false.

Definition at line 3499 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCase().

static boolean org.sleuthkit.autopsy.casemodule.Case.isValidName ( String  caseName)
static

Checks if a case display name is valid, i.e., does not include any characters that cannot be used in file names.

Parameters
caseNameThe candidate case name.
Returns
True or false.

Definition at line 770 of file Case.java.

void org.sleuthkit.autopsy.casemodule.Case.notifyAddingDataSource ( UUID  eventId)

Notifies case event subscribers that a data source is being added to the case.

This should not be called from the event dispatch thread (EDT)

Parameters
eventIdA unique identifier for the event. This UUID must be used to call notifyFailedAddingDataSource or notifyNewDataSource after the data source is added.

Definition at line 1767 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.testutils.IngestUtils.addDataSource(), and org.sleuthkit.autopsy.commandlineingest.CommandLineIngestManager.JobProcessingTask.runDataSourceProcessor().

void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagAdded ( BlackboardArtifactTag  newTag)

Notifies case event subscribers that an artifact tag has been added.

This should not be called from the event dispatch thread (EDT)

Parameters
newTagnew BlackboardArtifactTag added

Definition at line 1887 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag().

void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagAdded ( BlackboardArtifactTag  newTag,
List< BlackboardArtifactTag >  removedTagList 
)

Notifies case event subscribers that an artifact tag has been added.

This should not be called from the event dispatch thread (EDT)

Parameters
newTagThe added ContentTag.
removedTagListList of ContentTags that were removed as a result of the addition of newTag.

Definition at line 1900 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagDeleted ( BlackboardArtifactTag  deletedTag)

Notifies case event subscribers that an artifact tag has been deleted.

This should not be called from the event dispatch thread (EDT)

Parameters
deletedTagBlackboardArtifactTag deleted

Definition at line 1911 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag().

void org.sleuthkit.autopsy.casemodule.Case.notifyCentralRepoCommentChanged ( long  contentId,
String  newComment 
)

Notifies case event subscribers that a central repository comment has been changed.

This should not be called from the event dispatch thread (EDT)

Parameters
contentIdthe objectId for the Content which has had its central repo comment changed
newCommentthe new value of the comment

Definition at line 1872 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.centralrepository.AddEditCentralRepoCommentAction.actionPerformed().

void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagAdded ( ContentTag  newTag)

Notifies case event subscribers that a content tag has been added.

This should not be called from the event dispatch thread (EDT)

Parameters
newTagnew ContentTag added

Definition at line 1822 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag().

void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagAdded ( ContentTag  newTag,
List< ContentTag >  deletedTagList 
)

Notifies case event subscribers that a content tag has been added.

This should not be called from the event dispatch thread (EDT)

Parameters
newTagThe added ContentTag.
deletedTagListList of ContentTags that were removed as a result of the addition of newTag.

Definition at line 1835 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagDeleted ( ContentTag  deletedTag)

Notifies case event subscribers that a content tag has been deleted.

This should not be called from the event dispatch thread (EDT)

Parameters
deletedTagContentTag deleted

Definition at line 1846 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag().

void org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceAdded ( Content  dataSource,
UUID  addingDataSourceEventId 
)

Notifies case event subscribers that a data source has been added to the case database.

This should not be called from the event dispatch thread (EDT)

Parameters
dataSourceThe data source.
addingDataSourceEventIdThe unique identifier for the corresponding adding data source event (see notifyAddingDataSource).

Definition at line 1798 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.testutils.IngestUtils.addDataSource(), org.sleuthkit.autopsy.casemodule.Case.addImage(), and org.sleuthkit.autopsy.datasourceprocessors.AddDataSourceCallback.done().

void org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceNameChanged ( Content  dataSource,
String  newName 
)

Notifies case event subscribers that a data source has been added to the case database.

This should not be called from the event dispatch thread (EDT)

Parameters
dataSourceThe data source.
newNameThe new name for the data source

Definition at line 1811 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

void org.sleuthkit.autopsy.casemodule.Case.notifyFailedAddingDataSource ( UUID  addingDataSourceEventId)

Notifies case event subscribers that a data source failed to be added to the case.

This should not be called from the event dispatch thread (EDT)

Parameters
addingDataSourceEventIdThe unique identifier for the corresponding adding data source event (see notifyAddingDataSource).

Definition at line 1783 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().

Referenced by org.sleuthkit.autopsy.datasourceprocessors.AddDataSourceCallback.done().

void org.sleuthkit.autopsy.casemodule.Case.notifyTagDefinitionChanged ( String  changedTagName)

Notifies case event subscribers that a tag definition has changed.

This should not be called from the event dispatch thread (EDT)

Parameters
changedTagNamethe name of the tag definition which was changed

Definition at line 1857 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish(), and org.sleuthkit.autopsy.casemodule.Case.Events.TAG_DEFINITION_CHANGED.

Void org.sleuthkit.autopsy.casemodule.Case.open ( ProgressIndicator  progressIndicator,
Object  additionalParams 
) throws CaseActionException
private
static void org.sleuthkit.autopsy.casemodule.Case.open ( String  caseMetadataFilePath) throws CaseActionException
static

Opens an existing Autopsy case and makes it the current case.

Parameters
caseMetadataFilePathThe path of the case metadata (.aut) file.
Exceptions
CaseActionExceptionif there is a problem opening the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.
Deprecated:
Use openAsCurrentCase instead.

Definition at line 3827 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().

void org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources ( ProgressIndicator  progressIndicator,
boolean  isNewCase 
) throws CaseActionException
private
static void org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase ( String  caseMetadataFilePath) throws CaseActionException
static
static void org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase ( Case  newCurrentCase,
boolean  isNewCase 
) throws CaseActionException, CaseActionCancelledException
staticprivate
void org.sleuthkit.autopsy.casemodule.Case.openCaseDataBase ( ProgressIndicator  progressIndicator) throws CaseActionException
private

Updates the node data for an existing case directory lock coordination service node and opens an existing case database.

Parameters
progressIndicatorA progress indicator.
Exceptions
CaseActionExceptionIf there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 2741 of file Case.java.

References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDatabaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.core.UserPreferences.getIsMultiUserModeEnabled(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE, and org.sleuthkit.autopsy.casemodule.Case.updateDataParameters().

Referenced by org.sleuthkit.autopsy.casemodule.Case.open().

void org.sleuthkit.autopsy.casemodule.Case.openCaseLevelServices ( ProgressIndicator  progressIndicator)
private

Opens the case-level services: the files manager, tags manager and blackboard.

Parameters
progressIndicatorA progress indicator.

Definition at line 2770 of file Case.java.

References org.sleuthkit.autopsy.progress.ProgressIndicator.progress().

Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), and org.sleuthkit.autopsy.casemodule.Case.open().

void org.sleuthkit.autopsy.casemodule.Case.openCommunicationChannels ( ProgressIndicator  progressIndicator) throws CaseActionException
private

If this case is a multi-user case, sets up for communication with other application nodes.

Parameters
progressIndicatorA progress indicator.
Exceptions
CaseActionExceptionIf there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 2909 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.checkForCancellation(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE, org.sleuthkit.autopsy.events.AutopsyEventPublisher.openRemoteEventChannel(), and org.sleuthkit.autopsy.progress.ProgressIndicator.progress().

Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), and org.sleuthkit.autopsy.casemodule.Case.open().

void org.sleuthkit.autopsy.casemodule.Case.openFileSystemsInBackground ( )
private

Starts a background task that reads a sector from each file system of each image of a case to do an eager open of the filesystems in the case. If this method is called before another background file system read has finished the earlier one will be cancelled.

Exceptions
CaseActionCancelledExceptionException thrown if task is cancelled.

Definition at line 2322 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.openFileSystemsExecutor.

Referenced by org.sleuthkit.autopsy.casemodule.Case.open().

static boolean org.sleuthkit.autopsy.casemodule.Case.pathExists ( String  filePath)
static

Check if file exists and is a normal file.

Parameters
filePathThe file path.
Returns
True or false.
Deprecated:
Use java.io.File.exists or java.io.File.isFile instead

Definition at line 3883 of file Case.java.

void org.sleuthkit.autopsy.casemodule.Case.releaseCaseLock ( )
private
static void org.sleuthkit.autopsy.casemodule.Case.removeEventSubscriber ( String  eventName,
PropertyChangeListener  subscriber 
)
static

Removes a subscriber to specific case events.

Parameters
eventNameThe event the subscriber is no longer interested in.
subscriberThe subscriber (PropertyChangeListener) to remove.

Definition at line 736 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().

Referenced by org.sleuthkit.autopsy.casemodule.Case.removePropertyChangeListener().

static void org.sleuthkit.autopsy.casemodule.Case.removeEventSubscriber ( Set< String >  eventNames,
PropertyChangeListener  subscriber 
)
static

Removes a subscriber to specific case events.

Parameters
eventNamesThe event the subscriber is no longer interested in.
subscriberThe subscriber (PropertyChangeListener) to remove.

Definition at line 746 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().

static void org.sleuthkit.autopsy.casemodule.Case.removeEventTypeSubscriber ( Set< Events eventTypes,
PropertyChangeListener  subscriber 
)
static

Removes a subscriber to specific case events.

Parameters
eventTypesThe events the subscriber is no longer interested in.
subscriberThe subscriber (PropertyChangeListener) to remove.

Definition at line 756 of file Case.java.

References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.DataSourceSummaryTabbedPane.close(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesByTypeChildren.finalize(), org.sleuthkit.autopsy.datamodel.AutopsyTreeChildFactory.finalize(), org.sleuthkit.autopsy.datamodel.HostNode.HostGroupingChildren.finalize(), org.sleuthkit.autopsy.datamodel.PersonNode.PersonChildren.finalize(), org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNodeFactory.finalize(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.finalize(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.finalize(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.finalize(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.finalize(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ViewModeFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.finalize(), org.sleuthkit.autopsy.datamodel.DataSourceFilesNode.DataSourcesNodeChildren.onRemove(), org.sleuthkit.autopsy.datamodel.ImageNode.removeListeners(), org.sleuthkit.autopsy.datamodel.VolumeNode.removeListeners(), org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.removeListeners(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< SpecialDirectory >.removeListeners(), org.sleuthkit.autopsy.datamodel.FileSize.FileSizeRootChildren.FileSizeRootChildrenObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.DeletedContent.DeletedContentsChildren.DeletedContentsChildrenObservable.removeListeners(), org.sleuthkit.autopsy.geolocation.GeolocationTopComponent.removeNotify(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.shutdown(), org.sleuthkit.autopsy.datasourcesummary.uiutils.EventUpdateHandler.unregister(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener(), and org.sleuthkit.autopsy.contentviewers.annotations.AnnotationsContentViewer.unregisterListeners().

static void org.sleuthkit.autopsy.casemodule.Case.removePropertyChangeListener ( PropertyChangeListener  listener)
static

Removes a subscriber to all case events. To remove a subscription to only specific events, use one of the overloads of removeEventSubscriber.

Parameters
listenerThe subscriber (PropertyChangeListener) to remove.

Definition at line 686 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.removeEventSubscriber().

void org.sleuthkit.autopsy.casemodule.Case.saveCaseMetadataToFile ( ProgressIndicator  progressIndicator) throws CaseActionException
private

Saves teh case metadata to a file.SHould not be called until the case directory has been created.

Parameters
progressIndicatorA progress indicator.
Exceptions
CaseActionExceptionIf there is a problem completing the operation. The exception will have a user-friendly message and may be a wrapper for a lower-level exception.

Definition at line 2599 of file Case.java.

References org.sleuthkit.autopsy.progress.ProgressIndicator.progress().

Referenced by org.sleuthkit.autopsy.casemodule.Case.create().

static void org.sleuthkit.autopsy.casemodule.Case.setDeletedItemFlag ( CaseNodeData  caseNodeData,
CaseNodeData.DeletedFlags  flag 
) throws InterruptedException
staticprivate

Sets a deleted item flag in the coordination service node data for a multi-user case.

Parameters
caseNodeDataThe coordination service node data for the case.
flagThe flag to set.
Exceptions
InterruptedExceptionIf interrupted while blocked waiting for coordination service data to be written to the coordination service node database.

Definition at line 3520 of file Case.java.

References org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDirectory(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getDisplayName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.getName(), org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.setDeletedFlag(), and org.sleuthkit.autopsy.casemodule.multiusercases.CaseNodeData.writeCaseNodeData().

Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDatabase(), org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseDirectory(), and org.sleuthkit.autopsy.casemodule.Case.deleteMultiUserCaseTextIndex().

void org.sleuthkit.autopsy.casemodule.Case.switchLoggingToCaseLogsDirectory ( ProgressIndicator  progressIndicator)
private

Switches from writing log messages to the application logs to the logs subdirectory of the case directory.

Parameters
progressIndicatorA progress indicator.

Definition at line 2579 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath(), org.sleuthkit.autopsy.progress.ProgressIndicator.progress(), and org.sleuthkit.autopsy.coreutils.Logger.setLogDirectory().

Referenced by org.sleuthkit.autopsy.casemodule.Case.create(), and org.sleuthkit.autopsy.casemodule.Case.open().

void org.sleuthkit.autopsy.casemodule.Case.updateCaseNodeData ( ProgressIndicator  progressIndicator) throws CaseActionException
private
void org.sleuthkit.autopsy.casemodule.Case.updateDataParameters ( ) throws TskCoreException
private

Initialize the hasData and hasDataSource parameters by checking the database.

hasDataSource will be true if any data Source exists the db.

hasData will be true if hasDataSource is true or if there are entries in the tsk_object or tsk_host tables.

Exceptions
TskCoreException

Definition at line 3541 of file Case.java.

References org.sleuthkit.autopsy.casemodule.Case.dbHasData(), and org.sleuthkit.autopsy.casemodule.Case.dbHasDataSource().

Referenced by org.sleuthkit.autopsy.casemodule.Case.openCaseDataBase().

static void org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseClosed ( )
staticprivate
static void org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened ( Case  newCurrentCase)
staticprivate

Member Data Documentation

final String org.sleuthkit.autopsy.casemodule.Case.APP_NAME = UserPreferences.getAppName()
staticprivate
Future<?> org.sleuthkit.autopsy.casemodule.Case.backgroundOpenFileSystemsFuture = null
staticprivate

Definition at line 190 of file Case.java.

final String org.sleuthkit.autopsy.casemodule.Case.CACHE_FOLDER = "Cache"
staticprivate

Definition at line 178 of file Case.java.

final String org.sleuthkit.autopsy.casemodule.Case.CASE_ACTION_THREAD_NAME = "%s-case-action"
staticprivate

Definition at line 184 of file Case.java.

final int org.sleuthkit.autopsy.casemodule.Case.CASE_LOCK_TIMEOUT_MINS = 1
staticprivate

Definition at line 172 of file Case.java.

final int org.sleuthkit.autopsy.casemodule.Case.CASE_RESOURCES_LOCK_TIMEOUT_HOURS = 1
staticprivate

Definition at line 173 of file Case.java.

final String org.sleuthkit.autopsy.casemodule.Case.CASE_RESOURCES_THREAD_NAME = "%s-manage-case-resources"
staticprivate

Definition at line 185 of file Case.java.

volatile ExecutorService org.sleuthkit.autopsy.casemodule.Case.caseActionExecutor
private

Definition at line 196 of file Case.java.

final Object org.sleuthkit.autopsy.casemodule.Case.caseActionSerializationLock = new Object()
staticprivate
SleuthkitCase org.sleuthkit.autopsy.casemodule.Case.caseDb
private

Definition at line 198 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().

CoordinationService.Lock org.sleuthkit.autopsy.casemodule.Case.caseLock
private
Services org.sleuthkit.autopsy.casemodule.Case.caseServices
private

Definition at line 201 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.getServices().

CollaborationMonitor org.sleuthkit.autopsy.casemodule.Case.collaborationMonitor
private

Definition at line 200 of file Case.java.

final String org.sleuthkit.autopsy.casemodule.Case.CONFIG_FOLDER = "Config"
staticprivate

Definition at line 182 of file Case.java.

volatile Case org.sleuthkit.autopsy.casemodule.Case.currentCase
staticprivate
final String org.sleuthkit.autopsy.casemodule.Case.EVENT_CHANNEL_NAME = "%s-Case-Events"
staticprivate

Definition at line 177 of file Case.java.

final AutopsyEventPublisher org.sleuthkit.autopsy.casemodule.Case.eventPublisher = new AutopsyEventPublisher()
staticprivate

Definition at line 188 of file Case.java.

final String org.sleuthkit.autopsy.casemodule.Case.EXPORT_FOLDER = "Export"
staticprivate

Definition at line 179 of file Case.java.

volatile boolean org.sleuthkit.autopsy.casemodule.Case.hasData = false
private
volatile boolean org.sleuthkit.autopsy.casemodule.Case.hasDataSource = false
private
final String org.sleuthkit.autopsy.casemodule.Case.LOG_FOLDER = "Log"
staticprivate

Definition at line 180 of file Case.java.

final Logger org.sleuthkit.autopsy.casemodule.Case.logger = Logger.getLogger(Case.class.getName())
staticprivate
volatile Frame org.sleuthkit.autopsy.casemodule.Case.mainFrame
staticprivate

Definition at line 193 of file Case.java.

final CaseMetadata org.sleuthkit.autopsy.casemodule.Case.metadata
private
final String org.sleuthkit.autopsy.casemodule.Case.MODULE_FOLDER = "ModuleOutput"
staticprivate

Definition at line 183 of file Case.java.

final String org.sleuthkit.autopsy.casemodule.Case.NO_NODE_ERROR_MSG_FRAGMENT = "KeeperErrorCode = NoNode"
staticprivate

Definition at line 186 of file Case.java.

final ExecutorService org.sleuthkit.autopsy.casemodule.Case.openFileSystemsExecutor = Executors.newSingleThreadExecutor(new ThreadFactoryBuilder().setNameFormat("case-open-file-systems-%d").build())
staticprivate
final String org.sleuthkit.autopsy.casemodule.Case.REPORTS_FOLDER = "Reports"
staticprivate

Definition at line 181 of file Case.java.

final String org.sleuthkit.autopsy.casemodule.Case.SINGLE_USER_CASE_DB_NAME = "autopsy.db"
staticprivate
final SleuthkitEventListener org.sleuthkit.autopsy.casemodule.Case.sleuthkitEventListener
private

Definition at line 199 of file Case.java.

final String org.sleuthkit.autopsy.casemodule.Case.TEMP_FOLDER = "Temp"
staticprivate

Definition at line 175 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.getTempDirectory().


The documentation for this class was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Mon Oct 3 2022
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.