Autopsy
4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
class | DailyActivityAmount |
interface | DataSourceFilterFunction |
class | TimelineSummaryData |
Public Member Functions | |
TimelineSummary () | |
TimelineSummary (SleuthkitCaseProvider caseProvider, Supplier< TimeZone > timeZoneProvider, DataSourceFilterFunction filterFunction) | |
TimelineSummaryData | getTimelineSummaryData (DataSource dataSource, int recentDaysNum) throws SleuthkitCaseProviderException, TskCoreException |
Static Public Member Functions | |
static String | formatDate (Date date, DateFormat formatter) |
static DateFormat | getUtcFormat (String formatString) |
Private Member Functions | |
List< DailyActivityAmount > | getMostRecentActivityAmounts (Map< Long, DailyActivityAmount > dateCounts, long minRecentDay, long maxDay) |
Map< Long, DailyActivityAmount > | getTimelineEventsByDay (DataSource dataSource, TimelineManager timelineManager, TimeZone timeZone) throws TskCoreException, SleuthkitCaseProviderException |
Private Attributes | |
final SleuthkitCaseProvider | caseProvider |
final DataSourceFilterFunction | filterFunction |
final Supplier< TimeZone > | timeZoneProvider |
Static Private Attributes | |
static final long | DAY_SECS = 24 * 60 * 60 |
static final Set< TimelineEventType > | FILE_SYSTEM_EVENTS |
Provides data source summary information pertaining to Timeline data.
Definition at line 49 of file TimelineSummary.java.
org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary | ( | ) |
Default constructor.
Definition at line 83 of file TimelineSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.DEFAULT, org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineDataSourceUtils.getDataSourceFilter(), org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineDataSourceUtils.getInstance(), and org.sleuthkit.autopsy.core.UserPreferences.getTimeZoneForDisplays().
org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary | ( | SleuthkitCaseProvider | caseProvider, |
Supplier< TimeZone > | timeZoneProvider, | ||
DataSourceFilterFunction | filterFunction | ||
) |
Construct object with given SleuthkitCaseProvider
caseProvider | SleuthkitCaseProvider provider; cannot be null. |
timeZoneProvider | The timezone provider; cannot be null. |
filterFunction | Provides the default root filter function filtered to the data source; cannot be null. |
Definition at line 97 of file TimelineSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.caseProvider, org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.filterFunction, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.timeZoneProvider.
|
static |
Formats a date using a DateFormat. In the event that the date is null, returns a null string.
date | The date to format. |
formatter | The DateFormat to use to format the date. |
Definition at line 343 of file TimelineSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.TimelinePanel.handleResult(), and org.sleuthkit.autopsy.datasourcesummary.ui.TimelinePanel.parseChartData().
|
private |
Given activity by day, converts to most recent days' activity handling empty values.
dateCounts | The day from epoch mapped to activity amounts for that day. |
minRecentDay | The minimum recent day in days from epoch. |
maxDay | The maximum recent day in days from epoch; |
Definition at line 159 of file TimelineSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineSummaryData().
|
private |
Fetches timeline events per day for a particular data source.
dataSource | The data source. |
timelineManager | The timeline manager to use while fetching the data. |
timeZone | The time zone to use to determine which day activity belongs. |
TskCoreException |
Definition at line 186 of file TimelineSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.DataSourceFilterFunction.apply(), org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.FILE_SYSTEM_EVENTS, org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.DailyActivityAmount.getArtifactActivityCount(), org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.DailyActivityAmount.getDay(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.DailyActivityAmount.getFileActivityCount().
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineSummaryData().
TimelineSummaryData org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineSummaryData | ( | DataSource | dataSource, |
int | recentDaysNum | ||
) | throws SleuthkitCaseProviderException, TskCoreException |
Retrieves timeline summary data.
dataSource | The data source for which timeline data will be retrieved. |
recentDaysNum | The maximum number of most recent days' activity to include. |
SleuthkitCaseProviderException | |
TskCoreException |
Definition at line 115 of file TimelineSummary.java.
References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.get(), org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getMostRecentActivityAmounts(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineEventsByDay().
Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.TimelineSummaryGetter.getData().
|
static |
Creates a DateFormat formatter that uses UTC for time zone.
formatString | The date format string. |
Definition at line 329 of file TimelineSummary.java.
|
private |
Definition at line 76 of file TimelineSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary().
|
staticprivate |
Definition at line 68 of file TimelineSummary.java.
|
staticprivate |
Definition at line 70 of file TimelineSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineEventsByDay().
|
private |
Definition at line 78 of file TimelineSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary().
|
private |
Definition at line 77 of file TimelineSummary.java.
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary().
Copyright © 2012-2022 Basis Technology. Generated on: Thu Mar 23 2023
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.