Inherits Serializable.

Classes
class	Type

Public Member Functions
	CorrelationAttributeInstance (CorrelationAttributeInstance.Type correlationType, String correlationValue, CorrelationCase eamCase, CorrelationDataSource eamDataSource, String filePath, String comment, TskData.FileKnown knownStatus, long fileObjectId) throws CentralRepoException, CorrelationAttributeNormalizationException

	CorrelationAttributeInstance (Type type, String value, int instanceId, CorrelationCase eamCase, CorrelationDataSource eamDataSource, String filePath, String comment, TskData.FileKnown knownStatus, Long fileObjectId, Long accountId) throws CentralRepoException, CorrelationAttributeNormalizationException

Boolean	equals (CorrelationAttributeInstance otherInstance)

Long	getAccountId ()

String	getComment ()

CorrelationCase	getCorrelationCase ()

CorrelationDataSource	getCorrelationDataSource ()

Type	getCorrelationType ()

String	getCorrelationValue ()

Long	getFileObjectId ()

String	getFilePath ()

int	getID ()

TskData.FileKnown	getKnownStatus ()

boolean	isDatabaseInstance ()

void	setComment (String comment)

void	setKnownStatus (TskData.FileKnown knownStatus)

String	toString ()

Static Public Member Functions
static List< CorrelationAttributeInstance.Type >	getDefaultCorrelationTypes () throws CentralRepoException

Static Public Attributes
static final int	ADDITIONAL_TYPES_BASE_ID = 1000

static final int	DOMAIN_TYPE_ID = 1

static final int	EMAIL_TYPE_ID = 2

static final int	FILES_TYPE_ID = 0

static final int	ICCID_TYPE_ID = 9

static final int	IMEI_TYPE_ID = 7

static final int	IMSI_TYPE_ID = 8

static final int	INSTALLED_PROGS_TYPE_ID = 10

static final int	MAC_TYPE_ID = 6

static final int	OSACCOUNT_TYPE_ID = 11

static final int	PHONE_TYPE_ID = 3

static final int	SSID_TYPE_ID = 5

static final int	USBID_TYPE_ID = 4

Private Attributes
Long	accountId

String	comment

CorrelationCase	correlationCase

CorrelationDataSource	correlationDataSource

CorrelationAttributeInstance.Type	correlationType

String	correlationValue

String	filePath

int	ID

TskData.FileKnown	knownStatus

Long	objectId

Static Private Attributes
static final long	serialVersionUID = 1L

Detailed Description

Used to store details about a specific instance of a CorrelationAttribute. Includes its data source, path, etc.

Definition at line 40 of file CorrelationAttributeInstance.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.CorrelationAttributeInstance	(	CorrelationAttributeInstance.Type	correlationType,
		String	correlationValue,
		CorrelationCase	eamCase,
		CorrelationDataSource	eamDataSource,
		String	filePath,
		String	comment,
		TskData.FileKnown	knownStatus,
		long	fileObjectId
	)		throws CentralRepoException, CorrelationAttributeNormalizationException

Definition at line 55 of file CorrelationAttributeInstance.java.

org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.CorrelationAttributeInstance	(	Type	type,
		String	value,
		int	instanceId,
		CorrelationCase	eamCase,
		CorrelationDataSource	eamDataSource,
		String	filePath,
		String	comment,
		TskData.FileKnown	knownStatus,
		Long	fileObjectId,
		Long	accountId
	)		throws CentralRepoException, CorrelationAttributeNormalizationException

Definition at line 80 of file CorrelationAttributeInstance.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

Member Function Documentation

Boolean org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals ( CorrelationAttributeInstance otherInstance )

Definition at line 109 of file CorrelationAttributeInstance.java.

Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getAccountId ( )

Get the accountId of the account associated with the correlation attribute.

Returns: the accountId of the account

Definition at line 237 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment ( )

Returns: the comment

Definition at line 189 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.application.NodeData.NodeData().

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationCase ( )

Returns: the eamCase

Definition at line 168 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesFilesTableModel.createNodeKey(), org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), org.sleuthkit.autopsy.centralrepository.application.NodeData.NodeData(), and org.sleuthkit.autopsy.centralrepository.application.UniquePathKey.UniquePathKey().

CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationDataSource ( )

Returns: the eamDataSource

Definition at line 175 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.application.NodeData.NodeData().

Type org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType ( )

Returns: the correlation Type

Definition at line 144 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getCorrelatedInstances(), org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNode.getCountPropertyAndDescription(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription(), and org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue ( )

Returns: the correlationValue

Definition at line 137 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getCorrelatedInstances(), org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< SpecialDirectory >.getCountPropertyAndDescription(), org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNode.getCountPropertyAndDescription(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription(), and org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults().

static List<CorrelationAttributeInstance.Type> org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getDefaultCorrelationTypes ( ) throws CentralRepoException

static

Load the default correlation types

Exceptions

CentralRepoException if the Type's dbTableName has invalid characters/format

Definition at line 284 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.discovery.search.SearchFiltering.NotableFilter.applyAlternateFilter(), org.sleuthkit.autopsy.centralrepository.datamodel.RdbmsCentralRepoFactory.initializeDatabaseSchema(), org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUtil.insertDefaultCorrelationTypes(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader15To16.upgradeSchema(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader13To14.upgradeSchema().

Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFileObjectId ( )

Get the objectId of the file associated with the correlation attribute or NULL if the objectId is not available.

Returns: the objectId of the file

Definition at line 227 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getCorrelatedInstances().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFilePath ( )

Returns: the filePath

Definition at line 182 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.application.NodeData.NodeData().

int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getID ( )

Returns: the database ID

Definition at line 161 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

TskData.FileKnown org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getKnownStatus ( )

Get this knownStatus. This only indicates whether an item has been tagged as notable and should never return KNOWN.

Returns: BAD if the item has been tagged as notable, UNKNOWN otherwise

Definition at line 206 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.application.NodeData.NodeData().

boolean org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.isDatabaseInstance ( )

Is this a database instance?

Returns: True if the instance ID is greater or equal to zero; otherwise false.

Definition at line 154 of file CorrelationAttributeInstance.java.

void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setComment ( String comment )

Parameters

comment the comment to set

Definition at line 196 of file CorrelationAttributeInstance.java.

void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setKnownStatus ( TskData.FileKnown knownStatus )

Set the knownStatus. This only indicates whether an item has been tagged as notable and should never be set to KNOWN.

Parameters

knownStatus Should be BAD if the item is tagged as notable, UNKNOWN otherwise

Definition at line 217 of file CorrelationAttributeInstance.java.

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.toString ( )

Definition at line 122 of file CorrelationAttributeInstance.java.

Member Data Documentation

Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.accountId

private

Definition at line 53 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.ADDITIONAL_TYPES_BASE_ID = 1000

static

Definition at line 264 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader13To14.upgradeSchema().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.comment

private

Definition at line 50 of file CorrelationAttributeInstance.java.

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationCase

private

Definition at line 47 of file CorrelationAttributeInstance.java.

CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationDataSource

private

Definition at line 48 of file CorrelationAttributeInstance.java.

CorrelationAttributeInstance.Type org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationType

private

Definition at line 46 of file CorrelationAttributeInstance.java.

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationValue

private

Definition at line 45 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.DOMAIN_TYPE_ID = 1

static

Definition at line 251 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.discovery.search.DiscoveryAttributes.queryDomainFrequency().

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.EMAIL_TYPE_ID = 2

static

Definition at line 252 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader13To14.upgradeSchema().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.filePath

private

Definition at line 49 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.FILES_TYPE_ID = 0

static

Definition at line 250 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.ICCID_TYPE_ID = 9

static

Definition at line 259 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.ID

private

Definition at line 44 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.IMEI_TYPE_ID = 7

static

Definition at line 257 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.IMSI_TYPE_ID = 8

static

Definition at line 258 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.INSTALLED_PROGS_TYPE_ID = 10

static

Definition at line 260 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader15To16.upgradeSchema().

TskData.FileKnown org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.knownStatus

private

Definition at line 51 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.MAC_TYPE_ID = 6

static

Definition at line 256 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.objectId

private

Definition at line 52 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.OSACCOUNT_TYPE_ID = 11

static

Definition at line 261 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsToSave(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader15To16.upgradeSchema().

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.PHONE_TYPE_ID = 3

static

Definition at line 253 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsFromCommunicationArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader13To14.upgradeSchema().

final long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.serialVersionUID = 1L

staticprivate

Definition at line 42 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.SSID_TYPE_ID = 5

static

Definition at line 255 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.USBID_TYPE_ID = 4

static

Definition at line 254 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

The documentation for this class was generated from the following file:

/home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/centralrepository/datamodel/CorrelationAttributeInstance.java

Classes

Public Member Functions

Static Public Member Functions

Static Public Attributes

Private Attributes

Static Private Attributes

Detailed Description

Constructor & Destructor Documentation

Member Function Documentation

Member Data Documentation