Autopsy  4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Static Public Member Functions | Protected Member Functions | Protected Attributes | Static Protected Attributes | Private Member Functions | Static Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode Class Reference

Inherits org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.

Inherited by org.sleuthkit.autopsy.communications.relationships.CallLogNode, org.sleuthkit.autopsy.communications.relationships.ContactNode, org.sleuthkit.autopsy.communications.relationships.MessageNode, and org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.

Public Member Functions

 BlackboardArtifactNode (BlackboardArtifact artifact, String iconPath)
 
 BlackboardArtifactNode (BlackboardArtifact artifact, boolean useAssociatedFileInLookup)
 
 BlackboardArtifactNode (BlackboardArtifact artifact)
 
void addNodeProperty (NodeProperty<?> property)
 
Action[] getActions (boolean context)
 
BlackboardArtifact getArtifact ()
 
getContent ()
 
List< Content > getContentChildren ()
 
int getContentChildrenCount ()
 
List< Long > getContentChildrenIds ()
 
String getItemType ()
 
String getName ()
 
String getSourceName ()
 
boolean hasContentChildren ()
 
boolean hasVisibleContentChildren ()
 
boolean isLeafTypeNode ()
 
int read (byte[] buf, long offset, long len) throws TskException
 
void setName (String name)
 

Static Public Member Functions

static boolean contentHasVisibleContentChildren (Content c)
 

Protected Member Functions

final void addCommentProperty (Sheet.Set sheetSet, List< Tag > tags, CorrelationAttributeInstance attribute)
 
final void addCountProperty (Sheet.Set sheetSet, CorrelationAttributeInstance attribute)
 
final void addScorePropertyAndDescription (Sheet.Set sheetSet, List< Tag > tags)
 
void addTagProperty (Sheet.Set sheetSet) throws MissingResourceException
 
final void addTagProperty (Sheet.Set sheetSet, List< Tag > tags)
 
Sheet createSheet ()
 
void finalize () throws Throwable
 
final List< Tag > getAllTagsFromDatabase ()
 
DataResultViewerTable.HasCommentStatus getCommentProperty (List< Tag > tags, List< CorrelationAttributeInstance > attributes)
 
Pair< Long, String > getCountPropertyAndDescription (CorrelationAttributeInstance attribute, String defaultDescription)
 
Pair< Score, String > getScorePropertyAndDescription ()
 
synchronized void updateSheet (NodeProperty<?>...newProps)
 

Protected Attributes

final T content
 

Static Protected Attributes

static final String NO_DESCR
 
static final String VALUE_LOADING
 

Private Member Functions

void addEmailMsgProperty (Map< String, Object > map, BlackboardAttribute attribute)
 
GetSCOTask addSCOColumns (Sheet.Set sheetSet)
 
void fillPropertyMap (Map< String, Object > map, BlackboardArtifact artifact)
 
List< Action > getAssociatedFileActions (BlackboardArtifact artifact, BlackboardArtifact.Type artifactType)
 
String getAssociatedTypeStr (BlackboardArtifact.Type artifactType)
 
String getContentTypeStr (Content content)
 
Action getExtractWithPasswordAction (Content srcContent)
 
List< Action > getNonNull (Action...items)
 
Node getParentFileNode (Content content)
 
String getRootAncestorName ()
 
Content getSourceContentFromLookup (BlackboardArtifact artifact)
 
String getSourceObjType (Content source)
 
List< Action > getSrcContentViewerActions (Node srcFileNode, int selectedFileCount)
 
List< Action > getTagActions (boolean hasSrcFile, BlackboardArtifact artifact, int selectedFileCount, int selectedArtifactCount)
 
Action getTimelineArtifactAction (BlackboardArtifact art)
 
Action getTimelineSrcContentAction (Content srcContent)
 
Action getViewSrcContentAction (BlackboardArtifact artifact, Content content)
 
void setDisplayNameBySourceContent ()
 
void unregisterListener ()
 
void updateSCOColumns (final SCOData scoData)
 
void updateSheet ()
 
GetSCOTask updateSheetForAnalysisResult (AnalysisResult result, Sheet.Set sheetSet)
 

Static Private Member Functions

static Lookup createLookup (BlackboardArtifact artifact, boolean useAssociatedFile)
 
static Content getPathIdFile (BlackboardArtifact artifact) throws ExecutionException
 
static BlackboardArtifact.Type getType (BlackboardArtifact artifact)
 

Private Attributes

final BlackboardArtifact artifact
 
final BlackboardArtifact.Type artifactType
 
List< NodeProperty<?extends Object > > customProperties
 
final PropertyChangeListener listener
 
final String sourceObjTypeName
 
Content srcContent
 
volatile String translatedSourceName
 
final PropertyChangeListener weakListener = WeakListeners.propertyChange(listener, null)
 

Static Private Attributes

static final Set< Case.Events > CASE_EVENTS_OF_INTEREST
 
static final Cache< Long, Content > contentCache = CacheBuilder.newBuilder().expireAfterWrite(1, TimeUnit.MINUTES).build()
 
static final Logger logger = Logger.getLogger(BlackboardArtifactNode.class.getName())
 
static final Integer[] SHOW_FILE_METADATA
 

Detailed Description

An AbstractNode implementation that can be used to represent an data artifact or analysis result of any type.

Definition at line 126 of file BlackboardArtifactNode.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode ( BlackboardArtifact  artifact,
String  iconPath 
)
org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode ( BlackboardArtifact  artifact,
boolean  useAssociatedFileInLookup 
)

Constructs an AbstractNode implementation that can be used to represent a data artifact or analysis result of any type. The Lookup of the Node will contain the data artifact or analysis result and its source content, either the parent content or the associated file.

Parameters
artifactThe data artifact or analysis result.
useAssociatedFileInLookupTrue if the source content in the Lookup should be the associated file instead of the parent content.

Definition at line 294 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.casemodule.Case.addEventTypeSubscriber(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact, org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifactType, org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.CASE_EVENTS_OF_INTEREST, org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createLookup(), org.sleuthkit.autopsy.datamodel.utils.IconsUtil.getIconFilePath(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSourceObjType(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getType(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayNameBySourceContent(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.setName().

org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode ( BlackboardArtifact  artifact)

Constructs an AbstractNode implementation that can be used to represent a data artifact or analysis result of any type. The Lookup of the Node will contain the data artifact or analysis result and its parent content as its source content.

Parameters
artifactThe data artifact or analysis result.

Definition at line 336 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact, and org.sleuthkit.autopsy.datamodel.utils.IconsUtil.getIconFilePath().

Member Function Documentation

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty ( Sheet.Set  sheetSet,
List< Tag >  tags,
CorrelationAttributeInstance  attribute 
)
protected

Adds the other occurrences property for the artifact represented by this node to the node property sheet.

Parameters
sheetSetThe property sheet.
tagsThe tags that have been applied to the artifact and its source content.
attributeThe correlation attribute instance to use for the central repository lookup.
Deprecated:
Do not use. The other occurrences property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1686 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty ( Sheet.Set  sheetSet,
CorrelationAttributeInstance  attribute 
)
protected

Adds the count property for the artifact represented by this node to the node property sheet.

Parameters
sheetSetThe property sheet.
attributeThe correlation attribute instance to use for the central repository lookup.
Deprecated:
Do not use. The count property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1664 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addEmailMsgProperty ( Map< String, Object >  map,
BlackboardAttribute  attribute 
)
private

Adds an email message attribute of the artifact this node represents to a map of name-value pairs, where the names are attribute type display names.

Parameters
mapThe map to be populated with the artifact attribute name-value pair.
attributeThe attribute to use to make the map entry.

Definition at line 1355 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.coreutils.TimeZoneUtils.getFormattedTime().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.fillPropertyMap().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addNodeProperty ( NodeProperty<?>  property)

Adds a "custom" property to the property sheet of this node, independent of the artifact this node represents or its source content.

Parameters
propertyThe custom property.

Definition at line 1275 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode().

GetSCOTask org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addSCOColumns ( Sheet.Set  sheetSet)
private
final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addScorePropertyAndDescription ( Sheet.Set  sheetSet,
List< Tag >  tags 
)
protected

Adds the score property for the artifact represented by this node to the node property sheet.

Parameters
sheetSetThe property sheet.
tagsThe tags that have been applied to the artifact and its source content.
Deprecated:
Do not use. The score property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1599 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.getScorePropertyAndDescription().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty ( Sheet.Set  sheetSet) throws MissingResourceException
protected

Adds the tags property for the artifact represented by this node to the node property sheet.

Parameters
sheetSetThe property sheet.
Deprecated:
Do not use. The tags property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1617 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty ( Sheet.Set  sheetSet,
List< Tag >  tags 
)
protected

Adds the tags property for the artifact represented by this node to the node property sheet.

Parameters
sheetSetThe property sheet.
tagsThe tags that have been applied to the artifact and its source content.
Deprecated:
Do not use. The tags property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1640 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

static boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.contentHasVisibleContentChildren ( Content  c)
staticinherited

Return true if the given content object has children. Useful for lazy loading.

Parameters
cThe content object to look for children on
Returns
true if has children

Definition at line 156 of file AbstractContentNode.java.

static Lookup org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createLookup ( BlackboardArtifact  artifact,
boolean  useAssociatedFile 
)
staticprivate

Creates a Lookup object for this node and populates it with both the artifact this node represents and its source content.

Parameters
artifactThe artifact this node represents.
useAssociatedFileTrue if the source content in the Lookup should be the associated file instead of the parent content.
Returns
The Lookup.

Definition at line 367 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.content, and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getPathIdFile().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().

Sheet org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet ( )
protected
void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.fillPropertyMap ( Map< String, Object >  map,
BlackboardArtifact  artifact 
)
private

Converts the attributes of the artifact this node represents to a map of name-value pairs, where the names are attribute type display names.

Parameters
mapThe map to be populated with the artifact attribute name-value pairs.
artifactThe artifact.

Definition at line 1291 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addEmailMsgProperty(), and org.sleuthkit.autopsy.coreutils.TimeZoneUtils.getFormattedTime().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.finalize ( ) throws Throwable
protected

Unregisters the application event listener when this node is garbage collected, if this finalizer is actually called.

RC: Isn't there some node lifecycle property change event that could be used to unregister the listener instead?

Exceptions
Throwable

Definition at line 473 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener().

Action [] org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions ( boolean  context)
final List<Tag> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAllTagsFromDatabase ( )
protected
BlackboardArtifact org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getArtifact ( )
List<Action> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAssociatedFileActions ( BlackboardArtifact  artifact,
BlackboardArtifact.Type  artifactType 
)
private

Returns actions for navigating to an associated file in the directory or in the timeline.

Parameters
artifactThe artifact whose associated file will be identified.
artifactTypeThe type of artifact.
Returns
The actions or an empty list.

Definition at line 631 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifactType, and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAssociatedTypeStr().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAssociatedTypeStr ( BlackboardArtifact.Type  artifactType)
private

Returns the name of the artifact based on the artifact type to be used with the associated file string in a right click menu.

Parameters
artifactTypeThe artifact type.
Returns
The artifact type name.

Definition at line 579 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifactType.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAssociatedFileActions().

DataResultViewerTable.HasCommentStatus org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty ( List< Tag >  tags,
List< CorrelationAttributeInstance attributes 
)
protected

Computes the value of the comment property ("C" in S, C, O) for the artifact represented by this node.

An icon is displayed in the property sheet if a commented tag has been applied to the artifact or its source content, or if there is a corresponding commented correlation attribute instance in the central repository.

Parameters
tagsThe tags applied to the artifact and its source content.
attributesA correlation attribute instance for the central repository lookup.
Returns
The value of the comment property.

Definition at line 1191 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUtil.commentExistsOnAttributes(), org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_AND_TAG_COMMENTS, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.NO_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_COMMENT, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_NO_COMMENT.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty().

T org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContent ( )
inherited

Return the content data associated with this node

Returns
the content object wrapped by this node

Definition at line 124 of file AbstractContentNode.java.

List<Content> org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildren ( )
inherited

Return children of the underlying content.

Returns
list of content children content.

Definition at line 236 of file AbstractContentNode.java.

int org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildrenCount ( )
inherited

Get count of the underlying content object children.

Useful for lazy loading.

Returns
content children count

Definition at line 258 of file AbstractContentNode.java.

List<Long> org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildrenIds ( )
inherited

Return ids of children of the underlying content. The ids can be treated as keys - useful for lazy loading.

Returns
list of content ids of children content.

Definition at line 216 of file AbstractContentNode.java.

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getContentTypeStr ( Content  content)
private

Returns the name to represent the type of the content (file, data artifact, os account, item).

Parameters
contentThe content.
Returns
The name of the type of content.

Definition at line 603 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getTimelineSrcContentAction(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getViewSrcContentAction().

Pair<Long, String> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription ( CorrelationAttributeInstance  attribute,
String  defaultDescription 
)
protected
Action org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getExtractWithPasswordAction ( Content  srcContent)
private

Returns actions for extracting content from file or null if not possible.

Parameters
srcContentThe source content.
Returns
The action or null if not appropriate source content.

Definition at line 720 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.FileTypeExtensions.getArchiveExtensions().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getItemType ( )

Definition at line 1390 of file BlackboardArtifactNode.java.

String org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getName ( )
inherited

Definition at line 134 of file AbstractContentNode.java.

List<Action> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getNonNull ( Action...  items)
private

Returns a list of non null actions from the given possibly null options.

Parameters
itemsThe items to purge of null items.
Returns
The list of non-null actions.

Definition at line 501 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

Node org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getParentFileNode ( Content  content)
private

Returns a Node representing the file content if the content is indeed some sort of file. Otherwise, return null.

Parameters
contentThe content.
Returns
The file node or null if not a file.

Definition at line 693 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

static Content org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getPathIdFile ( BlackboardArtifact  artifact) throws ExecutionException
staticprivate

Private helper method to allow content specified in a path id attribute to be retrieved.

Parameters
artifactThe artifact for which content may be specified as a tsk path attribute.
Returns
The Content specified by the artifact's path id attribute or null if there was no content available.
Exceptions
ExecutionExceptionError retrieving the file specified by the path id from the cache.

Definition at line 451 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createLookup().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getRootAncestorName ( )
private

Gets the name of the root ancestor of the source content for the artifact represented by this node.

Returns
The root ancestor name or the empty string if an error occurs.

Definition at line 1255 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.srcContent.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().

Pair<Score, String> org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getScorePropertyAndDescription ( )
protectedinherited

Returns Score property for the node.

Returns
Score property for the underlying content of the node.

Definition at line 341 of file AbstractContentNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addScorePropertyAndDescription().

Content org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSourceContentFromLookup ( BlackboardArtifact  artifact)
private

Finds the source content in the Lookup created by createLookup() method.

Parameters
artifactArtifact who's source Content we are trying to find.
Returns
Source Content of the input artifact, if one exists. Null otherwise.

Definition at line 420 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSourceName ( )

Gets the name of the source content of the artifact represented by this node.

Returns
The source content name.

Definition at line 856 of file BlackboardArtifactNode.java.

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSourceObjType ( Content  source)
private

Returns a displayable type string for the given content object.

If the content object is a artifact of a custom type then this method may cause a DB call BlackboardArtifact.getType

Parameters
sourceThe object to determine the type of.
Returns
A string representing the content type.

Definition at line 1497 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().

List<Action> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSrcContentViewerActions ( Node  srcFileNode,
int  selectedFileCount 
)
private

Returns actions to view src content in a different viewer or window.

Parameters
srcFileNodeThe source file node or null if no source file.
selectedFileCountThe number of selected files.
Returns
The list of actions or an empty list.

Definition at line 781 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.directorytree.ExternalViewerShortcutAction.getInstance().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

List<Action> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getTagActions ( boolean  hasSrcFile,
BlackboardArtifact  artifact,
int  selectedFileCount,
int  selectedArtifactCount 
)
private

Returns tag actions.

Parameters
hasSrcFileWhether or not the artifact has a source file.
artifactThis artifact.
selectedFileCountThe count of selected files.
selectedArtifactCountThe count of selected artifacts.
Returns
The tag actions.

Definition at line 747 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.getInstance(), org.sleuthkit.autopsy.actions.AddContentTagAction.getInstance(), org.sleuthkit.autopsy.actions.DeleteFileBlackboardArtifactTagAction.getInstance(), and org.sleuthkit.autopsy.actions.DeleteFileContentTagAction.getInstance().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

Action org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getTimelineArtifactAction ( BlackboardArtifact  art)
private

If the artifact represented by this node has a timestamp, an action to view it in the timeline.

Parameters
artThe artifact for timeline navigation action.
Returns
The action or null if no action should exist.

Definition at line 837 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.timeline.actions.ViewArtifactInTimelineAction.hasSupportedTimeStamp().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

Action org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getTimelineSrcContentAction ( Content  srcContent)
private

If the source content of the artifact represented by this node is a file, returns an action to view the file in the data source tree.

Parameters
srcContentThe src content to navigate to in the timeline action.
Returns
The src content navigation action or null.

Definition at line 806 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getContentTypeStr(), and org.sleuthkit.autopsy.timeline.actions.ViewArtifactInTimelineAction.hasSupportedTimeStamp().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

static BlackboardArtifact.Type org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getType ( BlackboardArtifact  artifact)
staticprivate

Returns the artifact type of the artifact.

Parameters
artifactThe artifact.
Returns
The artifact type or null if no type could be retrieved.

Definition at line 347 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().

Action org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getViewSrcContentAction ( BlackboardArtifact  artifact,
Content  content 
)
private

Creates an action to navigate to src content in tree hierarchy.

Parameters
artifactThe artifact.
contentThe content.
Returns
The action or null if no action derived.

Definition at line 664 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.content, and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getContentTypeStr().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getActions().

boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.hasContentChildren ( )
inherited

Return true if the underlying content object has children Useful for lazy loading.

Returns
true if has children

Definition at line 196 of file AbstractContentNode.java.

boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.hasVisibleContentChildren ( )
inherited

Return true if the underlying content object has children Useful for lazy loading.

Returns
true if has children

Definition at line 144 of file AbstractContentNode.java.

boolean org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.isLeafTypeNode ( )

Definition at line 1385 of file BlackboardArtifactNode.java.

int org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.read ( byte[]  buf,
long  offset,
long  len 
) throws TskException
inherited

Reads the content of this node (of the underlying content object).

Parameters
bufbuffer to read into
offsetthe starting offset in the content object
lenthe length to read
Returns
the bytes read
Exceptions
TskExceptionexception thrown if the requested part of content could not be read

Definition at line 284 of file AbstractContentNode.java.

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayNameBySourceContent ( )
private

Sets the displayName of the node based on the source content.

Definition at line 1560 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode().

void org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.setName ( String  name)
inherited
void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener ( )
private
void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSCOColumns ( final SCOData  scoData)
private

Update the SCO columns with the data retrieved in the background thread.

Parameters
scoDataThe data for the SCO columns.

Definition at line 1528 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR, and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSheet().

synchronized void org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.updateSheet ( NodeProperty<?>...  newProps)
protectedinherited

Updates the values of the properties in the current property sheet with the new properties being passed in. Only if that property exists in the current sheet will it be applied. That way, we allow for subclasses to add their own (or omit some!) properties and we will not accidentally disrupt their UI.

Race condition if not synchronized. Only one update should be applied at a time.

Parameters
newPropsNew file property instances to be updated in the current sheet.

Definition at line 301 of file AbstractContentNode.java.

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSheet ( )
private
GetSCOTask org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.updateSheetForAnalysisResult ( AnalysisResult  result,
Sheet.Set  sheetSet 
)
private

Member Data Documentation

final BlackboardArtifact org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact
private
final BlackboardArtifact.Type org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifactType
private
final Set<Case.Events> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.CASE_EVENTS_OF_INTEREST
staticprivate
Initial value:
= EnumSet.of(
Case.Events.BLACKBOARD_ARTIFACT_TAG_ADDED,
Case.Events.BLACKBOARD_ARTIFACT_TAG_DELETED,
Case.Events.CONTENT_TAG_ADDED,
Case.Events.CONTENT_TAG_DELETED,
Case.Events.CR_COMMENT_CHANGED,
Case.Events.CURRENT_CASE)

Definition at line 141 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener().

final T org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.content
protectedinherited
final Cache<Long, Content> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.contentCache = CacheBuilder.newBuilder().expireAfterWrite(1, TimeUnit.MINUTES).build()
staticprivate

Definition at line 135 of file BlackboardArtifactNode.java.

List<NodeProperty<? extends Object> > org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.customProperties
private

Definition at line 173 of file BlackboardArtifactNode.java.

final PropertyChangeListener org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.listener
private
final Logger org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.logger = Logger.getLogger(BlackboardArtifactNode.class.getName())
staticprivate

Definition at line 128 of file BlackboardArtifactNode.java.

final String org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.NO_DESCR
staticprotectedinherited
final Integer [] org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.SHOW_FILE_METADATA
staticprivate
Initial value:
= new Integer[]{
BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT.getTypeID(),
BlackboardArtifact.ARTIFACT_TYPE.TSK_INTERESTING_ITEM.getTypeID()
}

Definition at line 157 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet().

final String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.sourceObjTypeName
private
Content org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.srcContent
private
volatile String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.translatedSourceName
private

Definition at line 165 of file BlackboardArtifactNode.java.

final String org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.VALUE_LOADING
staticprotectedinherited
final PropertyChangeListener org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.weakListener = WeakListeners.propertyChange(listener, null)
private

Definition at line 241 of file BlackboardArtifactNode.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Thu Sep 29 2022
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.