Autopsy
4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits Serializable.
Classes | |
class | Type |
Public Member Functions | |
CorrelationAttributeInstance (CorrelationAttributeInstance.Type correlationType, String correlationValue, CorrelationCase eamCase, CorrelationDataSource eamDataSource, String filePath, String comment, TskData.FileKnown knownStatus, long fileObjectId) throws CentralRepoException, CorrelationAttributeNormalizationException | |
CorrelationAttributeInstance (Type type, String value, int instanceId, CorrelationCase eamCase, CorrelationDataSource eamDataSource, String filePath, String comment, TskData.FileKnown knownStatus, Long fileObjectId, Long accountId) throws CentralRepoException, CorrelationAttributeNormalizationException | |
Boolean | equals (CorrelationAttributeInstance otherInstance) |
Long | getAccountId () |
String | getComment () |
CorrelationCase | getCorrelationCase () |
CorrelationDataSource | getCorrelationDataSource () |
Type | getCorrelationType () |
String | getCorrelationValue () |
Long | getFileObjectId () |
String | getFilePath () |
int | getID () |
TskData.FileKnown | getKnownStatus () |
boolean | isDatabaseInstance () |
void | setComment (String comment) |
void | setKnownStatus (TskData.FileKnown knownStatus) |
String | toString () |
Static Public Member Functions | |
static List< CorrelationAttributeInstance.Type > | getDefaultCorrelationTypes () throws CentralRepoException |
Static Public Attributes | |
static final int | ADDITIONAL_TYPES_BASE_ID = 1000 |
static final int | DOMAIN_TYPE_ID = 1 |
static final int | EMAIL_TYPE_ID = 2 |
static final int | FILES_TYPE_ID = 0 |
static final int | ICCID_TYPE_ID = 9 |
static final int | IMEI_TYPE_ID = 7 |
static final int | IMSI_TYPE_ID = 8 |
static final int | INSTALLED_PROGS_TYPE_ID = 10 |
static final int | MAC_TYPE_ID = 6 |
static final int | OSACCOUNT_TYPE_ID = 11 |
static final int | PHONE_TYPE_ID = 3 |
static final int | SSID_TYPE_ID = 5 |
static final int | USBID_TYPE_ID = 4 |
Private Attributes | |
Long | accountId |
String | comment |
CorrelationCase | correlationCase |
CorrelationDataSource | correlationDataSource |
CorrelationAttributeInstance.Type | correlationType |
String | correlationValue |
String | filePath |
int | ID |
TskData.FileKnown | knownStatus |
Long | objectId |
Static Private Attributes | |
static final long | serialVersionUID = 1L |
Used to store details about a specific instance of a CorrelationAttribute. Includes its data source, path, etc.
Definition at line 40 of file CorrelationAttributeInstance.java.
org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.CorrelationAttributeInstance | ( | CorrelationAttributeInstance.Type | correlationType, |
String | correlationValue, | ||
CorrelationCase | eamCase, | ||
CorrelationDataSource | eamDataSource, | ||
String | filePath, | ||
String | comment, | ||
TskData.FileKnown | knownStatus, | ||
long | fileObjectId | ||
) | throws CentralRepoException, CorrelationAttributeNormalizationException |
Definition at line 55 of file CorrelationAttributeInstance.java.
org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.CorrelationAttributeInstance | ( | Type | type, |
String | value, | ||
int | instanceId, | ||
CorrelationCase | eamCase, | ||
CorrelationDataSource | eamDataSource, | ||
String | filePath, | ||
String | comment, | ||
TskData.FileKnown | knownStatus, | ||
Long | fileObjectId, | ||
Long | accountId | ||
) | throws CentralRepoException, CorrelationAttributeNormalizationException |
Definition at line 80 of file CorrelationAttributeInstance.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().
Boolean org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals | ( | CorrelationAttributeInstance | otherInstance | ) |
Definition at line 109 of file CorrelationAttributeInstance.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getAccountId(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationCase(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFilePath(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getID(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getKnownStatus().
Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getAccountId | ( | ) |
Get the accountId of the account associated with the correlation attribute.
Definition at line 237 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().
String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment | ( | ) |
Definition at line 189 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.application.NodeData.NodeData().
CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationCase | ( | ) |
Definition at line 168 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.contentviewer.OtherOccurrencesFilesTableModel.createNodeKey(), org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), org.sleuthkit.autopsy.centralrepository.application.NodeData.NodeData(), and org.sleuthkit.autopsy.centralrepository.application.UniquePathKey.UniquePathKey().
CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationDataSource | ( | ) |
Definition at line 175 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.application.NodeData.NodeData().
Type org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType | ( | ) |
Definition at line 144 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getCorrelatedInstances(), org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNode.getCountPropertyAndDescription(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription(), and org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults().
String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue | ( | ) |
Definition at line 137 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getCorrelatedInstances(), org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< SpecialDirectory >.getCountPropertyAndDescription(), org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNode.getCountPropertyAndDescription(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription(), and org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults().
|
static |
Load the default correlation types
CentralRepoException | if the Type's dbTableName has invalid characters/format |
Definition at line 284 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.discovery.search.SearchFiltering.NotableFilter.applyAlternateFilter(), org.sleuthkit.autopsy.centralrepository.datamodel.RdbmsCentralRepoFactory.initializeDatabaseSchema(), org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUtil.insertDefaultCorrelationTypes(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader15To16.upgradeSchema(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader13To14.upgradeSchema().
Long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFileObjectId | ( | ) |
Get the objectId of the file associated with the correlation attribute or NULL if the objectId is not available.
Definition at line 227 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.application.OtherOccurrences.getCorrelatedInstances().
String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFilePath | ( | ) |
Definition at line 182 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.application.NodeData.NodeData().
int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getID | ( | ) |
Definition at line 161 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().
TskData.FileKnown org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getKnownStatus | ( | ) |
Get this knownStatus. This only indicates whether an item has been tagged as notable and should never return KNOWN.
Definition at line 206 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.allcasessearch.CorrelationAttributeInstanceNode.createSheet(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.application.NodeData.NodeData().
boolean org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.isDatabaseInstance | ( | ) |
Is this a database instance?
Definition at line 154 of file CorrelationAttributeInstance.java.
void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setComment | ( | String | comment | ) |
comment | the comment to set |
Definition at line 196 of file CorrelationAttributeInstance.java.
void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setKnownStatus | ( | TskData.FileKnown | knownStatus | ) |
Set the knownStatus. This only indicates whether an item has been tagged as notable and should never be set to KNOWN.
knownStatus | Should be BAD if the item is tagged as notable, UNKNOWN otherwise |
Definition at line 217 of file CorrelationAttributeInstance.java.
String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.toString | ( | ) |
Definition at line 122 of file CorrelationAttributeInstance.java.
|
private |
Definition at line 53 of file CorrelationAttributeInstance.java.
|
static |
Definition at line 264 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader13To14.upgradeSchema().
|
private |
Definition at line 50 of file CorrelationAttributeInstance.java.
|
private |
Definition at line 47 of file CorrelationAttributeInstance.java.
|
private |
Definition at line 48 of file CorrelationAttributeInstance.java.
|
private |
Definition at line 46 of file CorrelationAttributeInstance.java.
|
private |
Definition at line 45 of file CorrelationAttributeInstance.java.
|
static |
Definition at line 251 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.discovery.search.DiscoveryAttributes.queryDomainFrequency().
|
static |
Definition at line 252 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader13To14.upgradeSchema().
|
private |
Definition at line 49 of file CorrelationAttributeInstance.java.
|
static |
Definition at line 250 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.discovery.search.SearchFiltering.NotableFilter.applyAlternateFilter(), org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoFileInstance.CentralRepoFileInstance(), org.sleuthkit.autopsy.discovery.search.DiscoveryAttributes.computeFrequency(), org.sleuthkit.autopsy.modules.hashdatabase.ImportCentralRepoDbProgressDialog.CentralRepoImportWorker.doInBackground(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getCentralRepoHashSetsFromDatabase(), org.sleuthkit.autopsy.contentviewers.annotations.AnnotationUtils.getCentralRepositoryData(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.getCorrAttrForFile(), org.sleuthkit.autopsy.centralrepository.datamodel.RdbmsCentralRepoFactory.initializeDatabaseSchema(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoFileInstance.setMD5Hash().
|
static |
Definition at line 259 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().
|
private |
Definition at line 44 of file CorrelationAttributeInstance.java.
|
static |
Definition at line 257 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().
|
static |
Definition at line 258 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().
|
static |
Definition at line 260 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader15To16.upgradeSchema().
|
private |
Definition at line 51 of file CorrelationAttributeInstance.java.
|
static |
Definition at line 256 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().
|
private |
Definition at line 52 of file CorrelationAttributeInstance.java.
|
static |
|
static |
Definition at line 253 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsFromCommunicationArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUpgrader13To14.upgradeSchema().
|
staticprivate |
Definition at line 42 of file CorrelationAttributeInstance.java.
|
static |
|
static |
Definition at line 254 of file CorrelationAttributeInstance.java.
Referenced by org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoDataArtifactIngestModule.makeAnalysisResults(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.makeCorrAttrsForSearch(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().
Copyright © 2012-2022 Basis Technology. Generated on: Sat Jun 10 2023
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.