Autopsy  4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Static Public Member Functions | Static Public Attributes | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance Class Reference

Inherits Serializable.

Classes

class  Type
 

Public Member Functions

 CorrelationAttributeInstance (CorrelationAttributeInstance.Type correlationType, String correlationValue, CorrelationCase eamCase, CorrelationDataSource eamDataSource, String filePath, String comment, TskData.FileKnown knownStatus, long fileObjectId) throws CentralRepoException, CorrelationAttributeNormalizationException
 
 CorrelationAttributeInstance (Type type, String value, int instanceId, CorrelationCase eamCase, CorrelationDataSource eamDataSource, String filePath, String comment, TskData.FileKnown knownStatus, Long fileObjectId, Long accountId) throws CentralRepoException, CorrelationAttributeNormalizationException
 
Boolean equals (CorrelationAttributeInstance otherInstance)
 
Long getAccountId ()
 
String getComment ()
 
CorrelationCase getCorrelationCase ()
 
CorrelationDataSource getCorrelationDataSource ()
 
Type getCorrelationType ()
 
String getCorrelationValue ()
 
Long getFileObjectId ()
 
String getFilePath ()
 
int getID ()
 
TskData.FileKnown getKnownStatus ()
 
boolean isDatabaseInstance ()
 
void setComment (String comment)
 
void setKnownStatus (TskData.FileKnown knownStatus)
 
String toString ()
 

Static Public Member Functions

static List< CorrelationAttributeInstance.Type > getDefaultCorrelationTypes () throws CentralRepoException
 

Static Public Attributes

static final int ADDITIONAL_TYPES_BASE_ID = 1000
 
static final int DOMAIN_TYPE_ID = 1
 
static final int EMAIL_TYPE_ID = 2
 
static final int FILES_TYPE_ID = 0
 
static final int ICCID_TYPE_ID = 9
 
static final int IMEI_TYPE_ID = 7
 
static final int IMSI_TYPE_ID = 8
 
static final int INSTALLED_PROGS_TYPE_ID = 10
 
static final int MAC_TYPE_ID = 6
 
static final int OSACCOUNT_TYPE_ID = 11
 
static final int PHONE_TYPE_ID = 3
 
static final int SSID_TYPE_ID = 5
 
static final int USBID_TYPE_ID = 4
 

Private Attributes

Long accountId
 
String comment
 
CorrelationCase correlationCase
 
CorrelationDataSource correlationDataSource
 
CorrelationAttributeInstance.Type correlationType
 
String correlationValue
 
String filePath
 
int ID
 
TskData.FileKnown knownStatus
 
Long objectId
 

Static Private Attributes

static final long serialVersionUID = 1L
 

Detailed Description

Used to store details about a specific instance of a CorrelationAttribute. Includes its data source, path, etc.

Definition at line 40 of file CorrelationAttributeInstance.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.CorrelationAttributeInstance ( CorrelationAttributeInstance.Type  correlationType,
String  correlationValue,
CorrelationCase  eamCase,
CorrelationDataSource  eamDataSource,
String  filePath,
String  comment,
TskData.FileKnown  knownStatus,
long  fileObjectId 
) throws CentralRepoException, CorrelationAttributeNormalizationException

Definition at line 55 of file CorrelationAttributeInstance.java.

org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.CorrelationAttributeInstance ( Type  type,
String  value,
int  instanceId,
CorrelationCase  eamCase,
CorrelationDataSource  eamDataSource,
String  filePath,
String  comment,
TskData.FileKnown  knownStatus,
Long  fileObjectId,
Long  accountId 
) throws CentralRepoException, CorrelationAttributeNormalizationException

Member Function Documentation

Boolean org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals ( CorrelationAttributeInstance  otherInstance)
Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getAccountId ( )

Get the accountId of the account associated with the correlation attribute.

Returns
the accountId of the account

Definition at line 237 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment ( )
CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationCase ( )
CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationDataSource ( )
Type org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType ( )
String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue ( )
static List<CorrelationAttributeInstance.Type> org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getDefaultCorrelationTypes ( ) throws CentralRepoException
static
Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFileObjectId ( )

Get the objectId of the file associated with the correlation attribute or NULL if the objectId is not available.

Returns
the objectId of the file

Definition at line 227 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getCorrelatedInstances().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFilePath ( )
int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getID ( )
TskData.FileKnown org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getKnownStatus ( )

Get this knownStatus. This only indicates whether an item has been tagged as notable and should never return KNOWN.

Returns
BAD if the item has been tagged as notable, UNKNOWN otherwise

Definition at line 206 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.application.NodeData.NodeData().

boolean org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.isDatabaseInstance ( )

Is this a database instance?

Returns
True if the instance ID is greater or equal to zero; otherwise false.

Definition at line 154 of file CorrelationAttributeInstance.java.

void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setComment ( String  comment)
Parameters
commentthe comment to set

Definition at line 196 of file CorrelationAttributeInstance.java.

void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setKnownStatus ( TskData.FileKnown  knownStatus)

Set the knownStatus. This only indicates whether an item has been tagged as notable and should never be set to KNOWN.

Parameters
knownStatusShould be BAD if the item is tagged as notable, UNKNOWN otherwise

Definition at line 217 of file CorrelationAttributeInstance.java.

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.toString ( )

Definition at line 122 of file CorrelationAttributeInstance.java.

Member Data Documentation

Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.accountId
private

Definition at line 53 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.ADDITIONAL_TYPES_BASE_ID = 1000
static
String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.comment
private

Definition at line 50 of file CorrelationAttributeInstance.java.

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationCase
private

Definition at line 47 of file CorrelationAttributeInstance.java.

CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationDataSource
private

Definition at line 48 of file CorrelationAttributeInstance.java.

CorrelationAttributeInstance.Type org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationType
private

Definition at line 46 of file CorrelationAttributeInstance.java.

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationValue
private

Definition at line 45 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.DOMAIN_TYPE_ID = 1
static
final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.EMAIL_TYPE_ID = 2
static
String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.filePath
private

Definition at line 49 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.FILES_TYPE_ID = 0
static
final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.ICCID_TYPE_ID = 9
static
int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.ID
private

Definition at line 44 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.IMEI_TYPE_ID = 7
static
final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.IMSI_TYPE_ID = 8
static
final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.INSTALLED_PROGS_TYPE_ID = 10
static
TskData.FileKnown org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.knownStatus
private

Definition at line 51 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.MAC_TYPE_ID = 6
static
Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.objectId
private

Definition at line 52 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.OSACCOUNT_TYPE_ID = 11
static
final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.PHONE_TYPE_ID = 3
static
final long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.serialVersionUID = 1L
staticprivate

Definition at line 42 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.SSID_TYPE_ID = 5
static
final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.USBID_TYPE_ID = 4
static

The documentation for this class was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Wed Oct 5 2022
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.