Autopsy
4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Public Member Functions | |
AnalysisSummary () | |
AnalysisSummary (SleuthkitCaseProvider provider) | |
List< Pair< String, Long > > | getHashsetCounts (DataSource dataSource) throws SleuthkitCaseProviderException, TskCoreException |
List< Pair< String, Long > > | getInterestingItemCounts (DataSource dataSource) throws SleuthkitCaseProviderException, TskCoreException |
List< Pair< String, Long > > | getKeywordCounts (DataSource dataSource) throws SleuthkitCaseProviderException, TskCoreException |
Private Member Functions | |
List< Pair< String, Long > > | getCountsData (DataSource dataSource, BlackboardAttribute.Type keyType, ARTIFACT_TYPE...artifactTypes) throws SleuthkitCaseProviderException, TskCoreException |
Private Attributes | |
final SleuthkitCaseProvider | provider |
Static Private Attributes | |
static final Set< String > | EXCLUDED_KEYWORD_SEARCH_ITEMS = new HashSet<>() |
static final BlackboardAttribute.Type | TYPE_SET_NAME = new BlackboardAttribute.Type(ATTRIBUTE_TYPE.TSK_SET_NAME) |
Helper class for getting hash set hits, keyword hits, and interesting item hits within a datasource.
Definition at line 44 of file AnalysisSummary.java.
org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.AnalysisSummary | ( | ) |
Main constructor.
Definition at line 54 of file AnalysisSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.DEFAULT.
org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.AnalysisSummary | ( | SleuthkitCaseProvider | provider | ) |
Main constructor.
provider | The means of obtaining a sleuthkit case. |
Definition at line 63 of file AnalysisSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.provider.
|
private |
Get counts for the artifact of the specified type.
dataSource | The datasource. |
keyType | The attribute to use as the key type. |
artifactTypes | The types of artifacts for which to query. |
SleuthkitCaseProviderException | |
TskCoreException |
Definition at line 132 of file AnalysisSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.get(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.DataSourceInfoUtilities.getStringOrNull().
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getHashsetCounts(), org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getInterestingItemCounts(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getKeywordCounts().
List<Pair<String, Long> > org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getHashsetCounts | ( | DataSource | dataSource | ) | throws SleuthkitCaseProviderException, TskCoreException |
Gets counts for hashset hits.
dataSource | The datasource for which to identify hashset hits. |
SleuthkitCaseProviderException | |
TskCoreException |
Definition at line 77 of file AnalysisSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getCountsData(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.TYPE_SET_NAME.
Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.AnalysisSummaryGetter.getHashsetCounts().
List<Pair<String, Long> > org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getInterestingItemCounts | ( | DataSource | dataSource | ) | throws SleuthkitCaseProviderException, TskCoreException |
Gets counts for interesting item hits.
dataSource | The datasource for which to identify interesting item hits. |
SleuthkitCaseProviderException | |
TskCoreException | ("deprecation") - we need to support already existing interesting file and artifact hits. |
Definition at line 114 of file AnalysisSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getCountsData(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.TYPE_SET_NAME.
Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.AnalysisSummaryGetter.getInterestingItemCounts().
List<Pair<String, Long> > org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getKeywordCounts | ( | DataSource | dataSource | ) | throws SleuthkitCaseProviderException, TskCoreException |
Gets counts for keyword hits.
dataSource | The datasource for which to identify keyword hits. |
SleuthkitCaseProviderException | |
TskCoreException |
Definition at line 91 of file AnalysisSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getCountsData(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.TYPE_SET_NAME.
Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.AnalysisSummaryGetter.getKeywordCounts().
|
staticprivate |
Definition at line 47 of file AnalysisSummary.java.
|
private |
Definition at line 49 of file AnalysisSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.AnalysisSummary().
|
staticprivate |
Definition at line 46 of file AnalysisSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getHashsetCounts(), org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getInterestingItemCounts(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getKeywordCounts().
Copyright © 2012-2022 Basis Technology. Generated on: Tue Jun 27 2023
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.