Autopsy  4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Static Public Member Functions | Static Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.datamodel.EmailExtracted Class Reference

Inherits org.sleuthkit.autopsy.datamodel.AutopsyVisitableItem.


class  AccountFactory
class  AccountNode
class  EmailResults
class  FolderFactory
class  FolderNode
class  MessageFactory
class  RootNode

Public Member Functions

 EmailExtracted (SleuthkitCase skCase)
 EmailExtracted (SleuthkitCase skCase, long objId)

Static Public Member Functions

static final Map< String, String > parsePath (String path)

Static Private Member Functions

static String getFolderKey (String accountName, String folderName)

Private Attributes

final EmailResults emailResults
final long filteringDSObjId
SleuthkitCase skCase

Static Private Attributes

static final Set< IngestManager.IngestJobEvent > INGEST_JOB_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestJobEvent.COMPLETED, IngestManager.IngestJobEvent.CANCELLED)
static final Set< IngestManager.IngestModuleEvent > INGEST_MODULE_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestModuleEvent.DATA_ADDED)
static final String LABEL_NAME = BlackboardArtifact.Type.TSK_EMAIL_MSG.getTypeName()
static final Logger logger = Logger.getLogger(EmailExtracted.class.getName())
static final String MAIL_ACCOUNT = NbBundle.getMessage(EmailExtracted.class, "EmailExtracted.mailAccount.text")
static final String MAIL_FOLDER = NbBundle.getMessage(EmailExtracted.class, "EmailExtracted.mailFolder.text")
static final String MAIL_PATH_SEPARATOR = "/"

Detailed Description

Support for TSK_EMAIL_MSG nodes and displaying emails in the directory tree. Email messages are grouped into parent folders, and the folders are grouped into parent accounts if TSK_PATH is available to define the relationship structure for every message.

Definition at line 62 of file

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.EmailExtracted.EmailExtracted ( SleuthkitCase  skCase)


skCaseCase DB

Definition at line 102 of file

References org.sleuthkit.autopsy.datamodel.EmailExtracted.skCase.

org.sleuthkit.autopsy.datamodel.EmailExtracted.EmailExtracted ( SleuthkitCase  skCase,
long  objId 


skCaseCase DB
objIdObject id of the data source

Definition at line 113 of file

References org.sleuthkit.autopsy.datamodel.EmailExtracted.skCase.

Member Function Documentation

static String org.sleuthkit.autopsy.datamodel.EmailExtracted.getFolderKey ( String  accountName,
String  folderName 

Ensures that the key for the parent node and child factory is the same to ensure that the BaseChildFactory registered listener node name (BaseChildFactory.register and DataResultViewerTable.setNode with event registration) is the same as the factory name that will post events from called in BaseChildFactory.makeKeys. See JIRA-7752 for more details.

accountNameThe account name.
folderNameThe folder name.
The generated key.

Definition at line 456 of file

Referenced by org.sleuthkit.autopsy.datamodel.EmailExtracted.FolderNode.FolderNode(), and org.sleuthkit.autopsy.datamodel.EmailExtracted.MessageFactory.MessageFactory().

static final Map<String, String> org.sleuthkit.autopsy.datamodel.EmailExtracted.parsePath ( String  path)

Parse the path of the email msg to get the account name and folder in which the email is contained.

path- the TSK_PATH to the email msg
a map containg the account and folder which the email is stored in

Definition at line 81 of file

Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.getEmailNode(), and org.sleuthkit.autopsy.datamodel.EmailExtracted.EmailResults.update().

Member Data Documentation

final EmailResults org.sleuthkit.autopsy.datamodel.EmailExtracted.emailResults

Definition at line 94 of file

final long org.sleuthkit.autopsy.datamodel.EmailExtracted.filteringDSObjId

Definition at line 95 of file

final Set<IngestManager.IngestJobEvent> org.sleuthkit.autopsy.datamodel.EmailExtracted.INGEST_JOB_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestJobEvent.COMPLETED, IngestManager.IngestJobEvent.CANCELLED)
final Set<IngestManager.IngestModuleEvent> org.sleuthkit.autopsy.datamodel.EmailExtracted.INGEST_MODULE_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestModuleEvent.DATA_ADDED)
final String org.sleuthkit.autopsy.datamodel.EmailExtracted.LABEL_NAME = BlackboardArtifact.Type.TSK_EMAIL_MSG.getTypeName()

Definition at line 64 of file

final Logger org.sleuthkit.autopsy.datamodel.EmailExtracted.logger = Logger.getLogger(EmailExtracted.class.getName())

Definition at line 65 of file

final String org.sleuthkit.autopsy.datamodel.EmailExtracted.MAIL_ACCOUNT = NbBundle.getMessage(EmailExtracted.class, "EmailExtracted.mailAccount.text")

Definition at line 66 of file

final String org.sleuthkit.autopsy.datamodel.EmailExtracted.MAIL_FOLDER = NbBundle.getMessage(EmailExtracted.class, "EmailExtracted.mailFolder.text")

Definition at line 67 of file

final String org.sleuthkit.autopsy.datamodel.EmailExtracted.MAIL_PATH_SEPARATOR = "/"

Definition at line 68 of file

SleuthkitCase org.sleuthkit.autopsy.datamodel.EmailExtracted.skCase

The documentation for this class was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Thu Feb 2 2023
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.