Autopsy
4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.
Public Member Functions | |
void | addNodeProperty (NodeProperty<?> property) |
Action[] | getActions (boolean context) |
BlackboardArtifact | getArtifact () |
T | getContent () |
List< Content > | getContentChildren () |
int | getContentChildrenCount () |
List< Long > | getContentChildrenIds () |
String | getItemType () |
String | getName () |
String | getSourceName () |
boolean | hasContentChildren () |
boolean | hasVisibleContentChildren () |
boolean | isLeafTypeNode () |
int | read (byte[] buf, long offset, long len) throws TskException |
void | setName (String name) |
Static Public Member Functions | |
static boolean | contentHasVisibleContentChildren (Content c) |
Protected Member Functions | |
final void | addCommentProperty (Sheet.Set sheetSet, List< Tag > tags, CorrelationAttributeInstance attribute) |
final void | addCountProperty (Sheet.Set sheetSet, CorrelationAttributeInstance attribute) |
final void | addScorePropertyAndDescription (Sheet.Set sheetSet, List< Tag > tags) |
void | addTagProperty (Sheet.Set sheetSet) throws MissingResourceException |
final void | addTagProperty (Sheet.Set sheetSet, List< Tag > tags) |
Sheet | createSheet () |
void | finalize () throws Throwable |
final List< Tag > | getAllTagsFromDatabase () |
DataResultViewerTable.HasCommentStatus | getCommentProperty (List< Tag > tags, List< CorrelationAttributeInstance > attributes) |
Pair< Long, String > | getCountPropertyAndDescription (CorrelationAttributeInstance attribute, String defaultDescription) |
Pair< Score, String > | getScorePropertyAndDescription () |
synchronized void | updateSheet (NodeProperty<?>...newProps) |
Protected Attributes | |
final T | content |
Static Protected Attributes | |
static final String | NO_DESCR |
static final String | VALUE_LOADING |
Private Member Functions | |
AccountArtifactNode (BlackboardArtifact artifact) | |
void | updateSheet () |
Private Attributes | |
final BlackboardArtifact | artifact |
Definition at line 1792 of file Accounts.java.
|
private |
Definition at line 1796 of file Accounts.java.
|
protectedinherited |
Adds the other occurrences property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
tags | The tags that have been applied to the artifact and its source content. |
attribute | The correlation attribute instance to use for the central repository lookup. |
Definition at line 1686 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
protectedinherited |
Adds the count property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
attribute | The correlation attribute instance to use for the central repository lookup. |
Definition at line 1664 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription().
|
inherited |
Adds a "custom" property to the property sheet of this node, independent of the artifact this node represents or its source content.
property | The custom property. |
Definition at line 1275 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode().
|
protectedinherited |
Adds the score property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
tags | The tags that have been applied to the artifact and its source content. |
Definition at line 1599 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.getScorePropertyAndDescription().
|
protectedinherited |
Adds the tags property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
Definition at line 1617 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
protectedinherited |
Adds the tags property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
tags | The tags that have been applied to the artifact and its source content. |
Definition at line 1640 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
staticinherited |
Return true if the given content object has children. Useful for lazy loading.
c | The content object to look for children on |
Definition at line 156 of file AbstractContentNode.java.
|
protected |
Definition at line 1816 of file Accounts.java.
|
protectedinherited |
Unregisters the application event listener when this node is garbage collected, if this finalizer is actually called.
RC: Isn't there some node lifecycle property change event that could be used to unregister the listener instead?
Throwable |
Definition at line 473 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener().
Action [] org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.getActions | ( | boolean | context | ) |
Definition at line 1805 of file Accounts.java.
|
protectedinherited |
Gets all of the tags applied to the artifact represented by this node and its source content.
Definition at line 1163 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), and org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager().
|
inherited |
Gets the artifact represented by this node.
Definition at line 490 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact.
Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.IsLeafItemVisitor.visit(), org.sleuthkit.autopsy.directorytree.DataResultFilterNode.GetPreferredActionsDisplayableItemNodeVisitor.visit(), and org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.ShowItemVisitor.visit().
|
protectedinherited |
Computes the value of the comment property ("C" in S, C, O) for the artifact represented by this node.
An icon is displayed in the property sheet if a commented tag has been applied to the artifact or its source content, or if there is a corresponding commented correlation attribute instance in the central repository.
tags | The tags applied to the artifact and its source content. |
attributes | A correlation attribute instance for the central repository lookup. |
Definition at line 1191 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepoDbUtil.commentExistsOnAttributes(), org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_AND_TAG_COMMENTS, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.NO_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_COMMENT, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_NO_COMMENT.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty().
|
inherited |
Return the content data associated with this node
Definition at line 124 of file AbstractContentNode.java.
|
inherited |
Return children of the underlying content.
Definition at line 236 of file AbstractContentNode.java.
|
inherited |
Get count of the underlying content object children.
Useful for lazy loading.
Definition at line 258 of file AbstractContentNode.java.
|
inherited |
Return ids of children of the underlying content. The ids can be treated as keys - useful for lazy loading.
Definition at line 216 of file AbstractContentNode.java.
|
protectedinherited |
Definition at line 1222 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue(), org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getCountCasesWithOtherInstances(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.Type.getDisplayName(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getInstance().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty().
|
inherited |
Definition at line 1390 of file BlackboardArtifactNode.java.
|
inherited |
Definition at line 134 of file AbstractContentNode.java.
|
protectedinherited |
Returns Score property for the node.
Definition at line 341 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addScorePropertyAndDescription().
|
inherited |
Gets the name of the source content of the artifact represented by this node.
Definition at line 856 of file BlackboardArtifactNode.java.
|
inherited |
Return true if the underlying content object has children Useful for lazy loading.
Definition at line 196 of file AbstractContentNode.java.
|
inherited |
Return true if the underlying content object has children Useful for lazy loading.
Definition at line 144 of file AbstractContentNode.java.
|
inherited |
Definition at line 1385 of file BlackboardArtifactNode.java.
|
inherited |
Reads the content of this node (of the underlying content object).
buf | buffer to read into |
offset | the starting offset in the content object |
len | the length to read |
TskException | exception thrown if the requested part of content could not be read |
Definition at line 284 of file AbstractContentNode.java.
|
inherited |
Definition at line 129 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::BlackboardArtifactNode().
|
protectedinherited |
Updates the values of the properties in the current property sheet with the new properties being passed in. Only if that property exists in the current sheet will it be applied. That way, we allow for subclasses to add their own (or omit some!) properties and we will not accidentally disrupt their UI.
Race condition if not synchronized. Only one update should be applied at a time.
newProps | New file property instances to be updated in the current sheet. |
Definition at line 301 of file AbstractContentNode.java.
|
private |
Definition at line 1842 of file Accounts.java.
|
private |
Definition at line 1794 of file Accounts.java.
|
protectedinherited |
Underlying Sleuth Kit Content object
Definition at line 61 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createLookup(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::getViewSrcContentAction().
|
staticprotectedinherited |
Default no description string
Definition at line 76 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addCommentProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addTagProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createSheet(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::updateSCOColumns(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::updateSheetForAnalysisResult().
|
staticprotectedinherited |
Definition at line 77 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addSCOColumns().
Copyright © 2012-2022 Basis Technology. Generated on: Tue Mar 21 2023
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.