Inherits org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.

Inherited by org.sleuthkit.autopsy.communications.relationships.CallLogNode, org.sleuthkit.autopsy.communications.relationships.ContactNode, org.sleuthkit.autopsy.communications.relationships.MessageNode, and org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.

Public Member Functions
	BlackboardArtifactNode (BlackboardArtifact artifact, String iconPath)

	BlackboardArtifactNode (BlackboardArtifact artifact, boolean useAssociatedFileInLookup)

	BlackboardArtifactNode (BlackboardArtifact artifact)

void	addNodeProperty (NodeProperty<?> property)

Action[]	getActions (boolean context)

BlackboardArtifact	getArtifact ()

T	getContent ()

List< Content >	getContentChildren ()

int	getContentChildrenCount ()

List< Long >	getContentChildrenIds ()

String	getItemType ()

String	getName ()

String	getSourceName ()

boolean	hasContentChildren ()

boolean	hasVisibleContentChildren ()

boolean	isLeafTypeNode ()

int	read (byte[] buf, long offset, long len) throws TskException

void	setName (String name)

Static Public Member Functions
static boolean	contentHasVisibleContentChildren (Content c)

Protected Member Functions
final void	addCommentProperty (Sheet.Set sheetSet, List< Tag > tags, CorrelationAttributeInstance attribute)

final void	addCountProperty (Sheet.Set sheetSet, CorrelationAttributeInstance attribute)

final void	addScorePropertyAndDescription (Sheet.Set sheetSet, List< Tag > tags)

void	addTagProperty (Sheet.Set sheetSet) throws MissingResourceException

final void	addTagProperty (Sheet.Set sheetSet, List< Tag > tags)

Sheet	createSheet ()

void	finalize () throws Throwable

final List< Tag >	getAllTagsFromDatabase ()

DataResultViewerTable.HasCommentStatus	getCommentProperty (List< Tag > tags, List< CorrelationAttributeInstance > attributes)

Pair< Long, String >	getCountPropertyAndDescription (CorrelationAttributeInstance attribute, String defaultDescription)

Pair< Score, String >	getScorePropertyAndDescription ()

synchronized void	updateSheet (NodeProperty<?>...newProps)

Protected Attributes
final T	content

Static Protected Attributes
static final String	NO_DESCR

static final String	VALUE_LOADING

Private Member Functions
void	addEmailMsgProperty (Map< String, Object > map, BlackboardAttribute attribute)

GetSCOTask	addSCOColumns (Sheet.Set sheetSet)

void	fillPropertyMap (Map< String, Object > map, BlackboardArtifact artifact)

List< Action >	getAssociatedFileActions (BlackboardArtifact artifact, BlackboardArtifact.Type artifactType)

String	getAssociatedTypeStr (BlackboardArtifact.Type artifactType)

String	getContentTypeStr (Content content)

Action	getExtractWithPasswordAction (Content srcContent)

List< Action >	getNonNull (Action...items)

Node	getParentFileNode (Content content)

String	getRootAncestorName ()

Content	getSourceContentFromLookup (BlackboardArtifact artifact)

String	getSourceObjType (Content source)

List< Action >	getSrcContentViewerActions (Node srcFileNode, int selectedFileCount)

List< Action >	getTagActions (boolean hasSrcFile, BlackboardArtifact artifact, int selectedFileCount, int selectedArtifactCount)

Action	getTimelineArtifactAction (BlackboardArtifact art)

Action	getTimelineSrcContentAction (Content srcContent)

Action	getViewSrcContentAction (BlackboardArtifact artifact, Content content)

void	setDisplayNameBySourceContent ()

void	unregisterListener ()

void	updateSCOColumns (final SCOData scoData)

void	updateSheet ()

GetSCOTask	updateSheetForAnalysisResult (AnalysisResult result, Sheet.Set sheetSet)

Static Private Member Functions
static Lookup	createLookup (BlackboardArtifact artifact, boolean useAssociatedFile)

static Content	getPathIdFile (BlackboardArtifact artifact) throws ExecutionException

static BlackboardArtifact.Type	getType (BlackboardArtifact artifact)

Private Attributes
final BlackboardArtifact	artifact

final BlackboardArtifact.Type	artifactType

List< NodeProperty<?extends Object > >	customProperties

final PropertyChangeListener	listener

final String	sourceObjTypeName

Content	srcContent

volatile String	translatedSourceName

final PropertyChangeListener	weakListener = WeakListeners.propertyChange(listener, null)

Static Private Attributes
static final Set< Case.Events >	CASE_EVENTS_OF_INTEREST

static final Cache< Long, Content >	contentCache = CacheBuilder.newBuilder().expireAfterWrite(1, TimeUnit.MINUTES).build()

static final Logger	logger = Logger.getLogger(BlackboardArtifactNode.class.getName())

static final Integer[]	SHOW_FILE_METADATA

Detailed Description

An AbstractNode implementation that can be used to represent an data artifact or analysis result of any type.

Definition at line 126 of file BlackboardArtifactNode.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode	(	BlackboardArtifact	artifact,
		String	iconPath
	)

Constructs an AbstractNode implementation that can be used to represent a data artifact or analysis result of any type. The Lookup of the Node will contain the data artifact or analysis result and its parent content as its source content.

Parameters

artifact	The data artifact or analysis result.
iconPath	The path to the icon for the data artifact or analysis result type.

Definition at line 253 of file BlackboardArtifactNode.java.

org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode	(	BlackboardArtifact	artifact,
		boolean	useAssociatedFileInLookup
	)

Constructs an AbstractNode implementation that can be used to represent a data artifact or analysis result of any type. The Lookup of the Node will contain the data artifact or analysis result and its source content, either the parent content or the associated file.

Parameters

artifact	The data artifact or analysis result.
useAssociatedFileInLookup	True if the source content in the Lookup should be the associated file instead of the parent content.

Definition at line 294 of file BlackboardArtifactNode.java.

org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode ( BlackboardArtifact artifact )

Constructs an AbstractNode implementation that can be used to represent a data artifact or analysis result of any type. The Lookup of the Node will contain the data artifact or analysis result and its parent content as its source content.

Parameters

artifact The data artifact or analysis result.

Definition at line 336 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact, and org.sleuthkit.autopsy.datamodel.utils.IconsUtil.getIconFilePath().

Member Function Documentation

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty	(	Sheet.Set	sheetSet,
		List< Tag >	tags,
		CorrelationAttributeInstance	attribute
	)

protected

Adds the other occurrences property for the artifact represented by this node to the node property sheet.

Parameters

sheetSet	The property sheet.
tags	The tags that have been applied to the artifact and its source content.
attribute	The correlation attribute instance to use for the central repository lookup.

Deprecated:: Do not use. The other occurrences property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1686 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty	(	Sheet.Set	sheetSet,
		CorrelationAttributeInstance	attribute
	)

protected

Adds the count property for the artifact represented by this node to the node property sheet.

Parameters

sheetSet	The property sheet.
attribute	The correlation attribute instance to use for the central repository lookup.

Deprecated:: Do not use. The count property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1664 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addEmailMsgProperty	(	Map< String, Object >	map,
		BlackboardAttribute	attribute
	)

private

Adds an email message attribute of the artifact this node represents to a map of name-value pairs, where the names are attribute type display names.

Parameters

map	The map to be populated with the artifact attribute name-value pair.
attribute	The attribute to use to make the map entry.

Definition at line 1355 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.coreutils.TimeZoneUtils.getFormattedTime().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.fillPropertyMap().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addNodeProperty ( NodeProperty<?> property )

Adds a "custom" property to the property sheet of this node, independent of the artifact this node represents or its source content.

Parameters

property The custom property.

Definition at line 1275 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode().

GetSCOTask org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addSCOColumns ( Sheet.Set sheetSet )

private

Definition at line 1456 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.core.UserPreferences.getHideSCOColumns(), org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.isEnabled(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.VALUE_LOADING.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSheetForAnalysisResult().

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addScorePropertyAndDescription	(	Sheet.Set	sheetSet,
		List< Tag >	tags
	)

protected

Adds the score property for the artifact represented by this node to the node property sheet.

Parameters

sheetSet	The property sheet.
tags	The tags that have been applied to the artifact and its source content.

Deprecated:: Do not use. The score property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1599 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.getScorePropertyAndDescription().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty ( Sheet.Set sheetSet ) throws MissingResourceException

protected

Adds the tags property for the artifact represented by this node to the node property sheet.

Parameters

sheetSet The property sheet.

Deprecated:: Do not use. The tags property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1617 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty	(	Sheet.Set	sheetSet,
		List< Tag >	tags
	)

protected

Adds the tags property for the artifact represented by this node to the node property sheet.

Parameters

sheetSet	The property sheet.
tags	The tags that have been applied to the artifact and its source content.

Deprecated:: Do not use. The tags property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1640 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

static boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.contentHasVisibleContentChildren ( Content c )

staticinherited

Return true if the given content object has children. Useful for lazy loading.

Parameters

c	The content object to look for children on

Returns: true if has children

Definition at line 156 of file AbstractContentNode.java.

static Lookup org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createLookup	(	BlackboardArtifact	artifact,
		boolean	useAssociatedFile
	)

staticprivate

Creates a Lookup object for this node and populates it with both the artifact this node represents and its source content.

Parameters

artifact	The artifact this node represents.
useAssociatedFile	True if the source content in the Lookup should be the associated file instead of the parent content.

Returns: The Lookup.

Definition at line 367 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.content, and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getPathIdFile().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().

Sheet org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet ( )

protected

Definition at line 882 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSheet().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.fillPropertyMap	(	Map< String, Object >	map,
		BlackboardArtifact	artifact
	)

private

Converts the attributes of the artifact this node represents to a map of name-value pairs, where the names are attribute type display names.

Parameters

map	The map to be populated with the artifact attribute name-value pairs.
artifact	The artifact.

Definition at line 1291 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addEmailMsgProperty(), and org.sleuthkit.autopsy.coreutils.TimeZoneUtils.getFormattedTime().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.finalize ( ) throws Throwable

protected

Unregisters the application event listener when this node is garbage collected, if this finalizer is actually called.

RC: Isn't there some node lifecycle property change event that could be used to unregister the listener instead?

Exceptions

Throwable

Definition at line 473 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener().

Action [] org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions ( boolean context )

Definition at line 508 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.directorytree.DataResultFilterNode.GetPopupActionsDisplayableItemNodeVisitor.visit().

final List<Tag> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAllTagsFromDatabase ( )

protected

Gets all of the tags applied to the artifact represented by this node and its source content.

Returns: The tags.

Definition at line 1163 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), and org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager().

BlackboardArtifact org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getArtifact ( )

Gets the artifact represented by this node.

Returns: The artifact.

Definition at line 490 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact.

Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.IsLeafItemVisitor.visit(), org.sleuthkit.autopsy.directorytree.DataResultFilterNode.GetPreferredActionsDisplayableItemNodeVisitor.visit(), and org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.ShowItemVisitor.visit().

List<Action> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAssociatedFileActions	(	BlackboardArtifact	artifact,
		BlackboardArtifact.Type	artifactType
	)

private

Returns actions for navigating to an associated file in the directory or in the timeline.

Parameters

artifact	The artifact whose associated file will be identified.
artifactType	The type of artifact.

Returns: The actions or an empty list.

Definition at line 631 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifactType, and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAssociatedTypeStr().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAssociatedTypeStr ( BlackboardArtifact.Type artifactType )

private

Returns the name of the artifact based on the artifact type to be used with the associated file string in a right click menu.

Parameters

artifactType The artifact type.

Returns: The artifact type name.

Definition at line 579 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifactType.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAssociatedFileActions().

DataResultViewerTable.HasCommentStatus org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty	(	List< Tag >	tags,
		List< CorrelationAttributeInstance >	attributes
	)

protected

Computes the value of the comment property ("C" in S, C, O) for the artifact represented by this node.

An icon is displayed in the property sheet if a commented tag has been applied to the artifact or its source content, or if there is a corresponding commented correlation attribute instance in the central repository.

Parameters

tags	The tags applied to the artifact and its source content.
attributes	A correlation attribute instance for the central repository lookup.

Returns: The value of the comment property.

Definition at line 1191 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUtil.commentExistsOnAttributes(), org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_AND_TAG_COMMENTS, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.NO_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_COMMENT, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_NO_COMMENT.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty().

T org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContent ( )

inherited

Return the content data associated with this node

Returns: the content object wrapped by this node

Definition at line 124 of file AbstractContentNode.java.

List<Content> org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildren ( )

inherited

Return children of the underlying content.

Returns: list of content children content.

Definition at line 236 of file AbstractContentNode.java.

int org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildrenCount ( )

inherited

Get count of the underlying content object children.

Useful for lazy loading.

Returns: content children count

Definition at line 258 of file AbstractContentNode.java.

List<Long> org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildrenIds ( )

inherited

Return ids of children of the underlying content. The ids can be treated as keys - useful for lazy loading.

Returns: list of content ids of children content.

Definition at line 216 of file AbstractContentNode.java.

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getContentTypeStr ( Content content )

private

Returns the name to represent the type of the content (file, data artifact, os account, item).

Parameters

content The content.

Returns: The name of the type of content.

Definition at line 603 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getTimelineSrcContentAction(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getViewSrcContentAction().

Pair<Long, String> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription	(	CorrelationAttributeInstance	attribute,
		String	defaultDescription
	)

protected

Definition at line 1222 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue(), org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getCountCasesWithOtherInstances(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.Type.getDisplayName(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getInstance().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty().

Action org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getExtractWithPasswordAction ( Content srcContent )

private

Returns actions for extracting content from file or null if not possible.

Parameters

srcContent The source content.

Returns: The action or null if not appropriate source content.

Definition at line 720 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.FileTypeExtensions.getArchiveExtensions().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getItemType ( )

Definition at line 1390 of file BlackboardArtifactNode.java.

String org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getName ( )

inherited

Definition at line 134 of file AbstractContentNode.java.

List<Action> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getNonNull ( Action... items )

private

Returns a list of non null actions from the given possibly null options.

Parameters

items The items to purge of null items.

Returns: The list of non-null actions.

Definition at line 501 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

Node org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getParentFileNode ( Content content )

private

Returns a Node representing the file content if the content is indeed some sort of file. Otherwise, return null.

Parameters

content The content.

Returns: The file node or null if not a file.

Definition at line 693 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

static Content org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getPathIdFile ( BlackboardArtifact artifact ) throws ExecutionException

staticprivate

Private helper method to allow content specified in a path id attribute to be retrieved.

Parameters

artifact The artifact for which content may be specified as a tsk path attribute.

Returns: The Content specified by the artifact's path id attribute or null if there was no content available.

Exceptions

ExecutionException Error retrieving the file specified by the path id from the cache.

Definition at line 451 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createLookup().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getRootAncestorName ( )

private

Gets the name of the root ancestor of the source content for the artifact represented by this node.

Returns: The root ancestor name or the empty string if an error occurs.

Definition at line 1255 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.srcContent.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().

Pair<Score, String> org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getScorePropertyAndDescription ( )

protectedinherited

Returns Score property for the node.

Returns: Score property for the underlying content of the node.

Definition at line 341 of file AbstractContentNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addScorePropertyAndDescription().

Content org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSourceContentFromLookup ( BlackboardArtifact artifact )

private

Finds the source content in the Lookup created by createLookup() method.

Parameters

artifact Artifact who's source Content we are trying to find.

Returns: Source Content of the input artifact, if one exists. Null otherwise.

Definition at line 420 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSourceName ( )

Gets the name of the source content of the artifact represented by this node.

Returns: The source content name.

Definition at line 856 of file BlackboardArtifactNode.java.

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSourceObjType ( Content source )

private

Returns a displayable type string for the given content object.

If the content object is a artifact of a custom type then this method may cause a DB call BlackboardArtifact.getType

Parameters

source The object to determine the type of.

Returns: A string representing the content type.

Definition at line 1497 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().

List<Action> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSrcContentViewerActions	(	Node	srcFileNode,
		int	selectedFileCount
	)

private

Returns actions to view src content in a different viewer or window.

Parameters

srcFileNode	The source file node or null if no source file.
selectedFileCount	The number of selected files.

Returns: The list of actions or an empty list.

Definition at line 781 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.directorytree.ExternalViewerShortcutAction.getInstance().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

List<Action> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getTagActions	(	boolean	hasSrcFile,
		BlackboardArtifact	artifact,
		int	selectedFileCount,
		int	selectedArtifactCount
	)

private

Returns tag actions.

Parameters

hasSrcFile	Whether or not the artifact has a source file.
artifact	This artifact.
selectedFileCount	The count of selected files.
selectedArtifactCount	The count of selected artifacts.

Returns: The tag actions.

Definition at line 747 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.getInstance(), org.sleuthkit.autopsy.actions.AddContentTagAction.getInstance(), org.sleuthkit.autopsy.actions.DeleteFileBlackboardArtifactTagAction.getInstance(), and org.sleuthkit.autopsy.actions.DeleteFileContentTagAction.getInstance().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

Action org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getTimelineArtifactAction ( BlackboardArtifact art )

private

If the artifact represented by this node has a timestamp, an action to view it in the timeline.

Parameters

art	The artifact for timeline navigation action.

Returns: The action or null if no action should exist.

Definition at line 837 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.timeline.actions.ViewArtifactInTimelineAction.hasSupportedTimeStamp().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

Action org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getTimelineSrcContentAction ( Content srcContent )

private

If the source content of the artifact represented by this node is a file, returns an action to view the file in the data source tree.

Parameters

srcContent The src content to navigate to in the timeline action.

Returns: The src content navigation action or null.

Definition at line 806 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getContentTypeStr(), and org.sleuthkit.autopsy.timeline.actions.ViewArtifactInTimelineAction.hasSupportedTimeStamp().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

static BlackboardArtifact.Type org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getType ( BlackboardArtifact artifact )

staticprivate

Returns the artifact type of the artifact.

Parameters

artifact The artifact.

Returns: The artifact type or null if no type could be retrieved.

Definition at line 347 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().

Action org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getViewSrcContentAction	(	BlackboardArtifact	artifact,
		Content	content
	)

private

Creates an action to navigate to src content in tree hierarchy.

Parameters

artifact	The artifact.
content	The content.

Returns: The action or null if no action derived.

Definition at line 664 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.content, and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getContentTypeStr().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.hasContentChildren ( )

inherited

Return true if the underlying content object has children Useful for lazy loading.

Returns: true if has children

Definition at line 196 of file AbstractContentNode.java.

boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.hasVisibleContentChildren ( )

inherited

Return true if the underlying content object has children Useful for lazy loading.

Returns: true if has children

Definition at line 144 of file AbstractContentNode.java.

boolean org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.isLeafTypeNode ( )

Definition at line 1385 of file BlackboardArtifactNode.java.

int org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.read	(	byte[]	buf,
		long	offset,
		long	len
	)		throws TskException

inherited

Reads the content of this node (of the underlying content object).

Parameters

buf	buffer to read into
offset	the starting offset in the content object
len	the length to read

Returns: the bytes read

Exceptions

TskException exception thrown if the requested part of content could not be read

Definition at line 284 of file AbstractContentNode.java.

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayNameBySourceContent ( )

private

Sets the displayName of the node based on the source content.

Definition at line 1560 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().

void org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.setName ( String name )

inherited

Definition at line 129 of file AbstractContentNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::BlackboardArtifactNode().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener ( )

private

Unregisters this node's application event listener.

Definition at line 481 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.CASE_EVENTS_OF_INTEREST, and org.sleuthkit.autopsy.casemodule.Case.removeEventTypeSubscriber().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.finalize().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSCOColumns ( final SCOData scoData )

private

Update the SCO columns with the data retrieved in the background thread.

Parameters

scoData The data for the SCO columns.

Definition at line 1528 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR, and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSheet().

synchronized void org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.updateSheet ( NodeProperty<?>... newProps )

protectedinherited

Updates the values of the properties in the current property sheet with the new properties being passed in. Only if that property exists in the current sheet will it be applied. That way, we allow for subclasses to add their own (or omit some!) properties and we will not accidentally disrupt their UI.

Race condition if not synchronized. Only one update should be applied at a time.

Parameters

newProps New file property instances to be updated in the current sheet.

Definition at line 301 of file AbstractContentNode.java.

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSheet ( )

private

Refreshes this node's property sheet.

Definition at line 1243 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSCOColumns().

GetSCOTask org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSheetForAnalysisResult	(	AnalysisResult	result,
		Sheet.Set	sheetSet
	)

private

Add the columns to the Sheet.Set for AnalysisResults.

Parameters

result	The AnalysisResult the sheet is being created.
sheetSet	The sheetSet to add the values to.

Definition at line 1414 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addSCOColumns(), org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR, and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.sourceObjTypeName.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().

Member Data Documentation

final BlackboardArtifact org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact

private

Definition at line 162 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getArtifact().

final BlackboardArtifact.Type org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifactType

private

Definition at line 163 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAssociatedFileActions(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAssociatedTypeStr().

final Set<Case.Events> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.CASE_EVENTS_OF_INTEREST

staticprivate

Initial value:

= EnumSet.of(
            Case.Events.BLACKBOARD_ARTIFACT_TAG_ADDED,
            Case.Events.BLACKBOARD_ARTIFACT_TAG_DELETED,
            Case.Events.CONTENT_TAG_ADDED,
            Case.Events.CONTENT_TAG_DELETED,
            Case.Events.CR_COMMENT_CHANGED,
            Case.Events.CURRENT_CASE)

Definition at line 141 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener().

final T org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.content

protectedinherited

Underlying Sleuth Kit Content object

Definition at line 61 of file AbstractContentNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createLookup(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::getViewSrcContentAction().

final Cache<Long, Content> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.contentCache = CacheBuilder.newBuilder().expireAfterWrite(1, TimeUnit.MINUTES).build()

staticprivate

Definition at line 135 of file BlackboardArtifactNode.java.

List<NodeProperty<? extends Object> > org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.customProperties

private

Definition at line 173 of file BlackboardArtifactNode.java.

final PropertyChangeListener org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.listener

private

Definition at line 175 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().

final Logger org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.logger = Logger.getLogger(BlackboardArtifactNode.class.getName())

staticprivate

Definition at line 128 of file BlackboardArtifactNode.java.

final String org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.NO_DESCR

staticprotectedinherited

Default no description string

Definition at line 76 of file AbstractContentNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addCommentProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addTagProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createSheet(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::updateSCOColumns(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::updateSheetForAnalysisResult().

final Integer [] org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.SHOW_FILE_METADATA

staticprivate

Initial value:

= new Integer[]{
        BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT.getTypeID(),
        BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_ITEM.getTypeID()
    }

Definition at line 157 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().

final String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.sourceObjTypeName

private

Definition at line 166 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSheetForAnalysisResult().

Content org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.srcContent

private

Definition at line 164 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getRootAncestorName().

volatile String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.translatedSourceName

private