Autopsy  4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Static Public Member Functions | Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.discovery.search.ResultFile Class Reference

Inherits org.sleuthkit.autopsy.discovery.search.Result.

Public Member Functions

 ResultFile (AbstractFile abstractFile)
 
void addDuplicate (AbstractFile duplicate)
 
void addHashSetName (String hashSetName)
 
void addInterestingSetName (String interestingSetName)
 
void addKeywordListName (String keywordListName)
 
void addObjectDetectedName (String objectDetectedName)
 
void addTagName (String tagName)
 
boolean equals (Object obj)
 
List< AbstractFile > getAllInstances ()
 
Content getDataSource () throws TskCoreException
 
long getDataSourceObjectId ()
 
Type getFileType ()
 
AbstractFile getFirstInstance ()
 
SearchData.Frequency getFrequency ()
 
List< String > getHashSetNames ()
 
List< String > getInterestingSetNames ()
 
List< String > getKeywordListNames ()
 
TskData.FileKnown getKnown ()
 
List< String > getObjectDetectedNames ()
 
final SearchData.PreviouslyNotable getPreviouslyNotableInCR ()
 
Score getScore ()
 
String getScoreDescription ()
 
List< String > getTagNames ()
 
Type getType ()
 
int hashCode ()
 
boolean isDeleted ()
 
final void markAsPreviouslyNotableInCR ()
 
final void setFrequency (SearchData.Frequency frequency)
 
String toString ()
 

Static Public Member Functions

static Type fromMIMEtype (String mimeType)
 

Private Member Functions

void updateScoreAndDescription (AbstractFile file)
 

Private Attributes

Score currentScore = Score.SCORE_UNKNOWN
 
boolean deleted = false
 
Type fileType
 
final List< String > hashSetNames
 
final List< AbstractFile > instances = new ArrayList<>()
 
final List< String > interestingSetNames
 
final List< String > keywordListNames
 
final List< String > objectDetectedNames
 
String scoreDescription = null
 

Static Private Attributes

static final Logger logger = Logger.getLogger(ResultFile.class.getName())
 

Detailed Description

Container for files that holds all necessary data for grouping and sorting.

Definition at line 42 of file ResultFile.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.discovery.search.ResultFile.ResultFile ( AbstractFile  abstractFile)

Member Function Documentation

void org.sleuthkit.autopsy.discovery.search.ResultFile.addDuplicate ( AbstractFile  duplicate)

Add an AbstractFile to the list of files which are instances of this file.

Parameters
duplicateThe abstract file to add as a duplicate.

Definition at line 86 of file ResultFile.java.

References org.sleuthkit.autopsy.discovery.search.ResultFile.fromMIMEtype(), org.sleuthkit.autopsy.discovery.search.SearchData.Type.OTHER, and org.sleuthkit.autopsy.discovery.search.ResultFile.updateScoreAndDescription().

void org.sleuthkit.autopsy.discovery.search.ResultFile.addHashSetName ( String  hashSetName)

Add a hash set name that matched this file.

Parameters
hashSetName

Definition at line 180 of file ResultFile.java.

void org.sleuthkit.autopsy.discovery.search.ResultFile.addInterestingSetName ( String  interestingSetName)

Add an interesting file set name that matched this file.

Parameters
interestingSetName

Definition at line 203 of file ResultFile.java.

void org.sleuthkit.autopsy.discovery.search.ResultFile.addKeywordListName ( String  keywordListName)

Add a keyword list name that matched this file.

Parameters
keywordListName

Definition at line 157 of file ResultFile.java.

Referenced by org.sleuthkit.autopsy.discovery.search.DiscoveryAttributes.KeywordListAttribute.SetKeywordListNamesCallback.process().

void org.sleuthkit.autopsy.discovery.search.ResultFile.addObjectDetectedName ( String  objectDetectedName)

Add an object detected in this file.

Parameters
objectDetectedName

Definition at line 226 of file ResultFile.java.

void org.sleuthkit.autopsy.discovery.search.Result.addTagName ( String  tagName)
inherited

Add a tag name that matched this file.

Parameters
tagName

Definition at line 106 of file Result.java.

boolean org.sleuthkit.autopsy.discovery.search.ResultFile.equals ( Object  obj)
static Type org.sleuthkit.autopsy.discovery.search.ResultFile.fromMIMEtype ( String  mimeType)
static

Get the enum matching the given MIME type.

Parameters
mimeTypeThe MIME type for the file.
Returns
the corresponding enum (will be OTHER if no types matched)

Definition at line 310 of file ResultFile.java.

Referenced by org.sleuthkit.autopsy.discovery.search.ResultFile.addDuplicate(), and org.sleuthkit.autopsy.discovery.search.ResultFile.ResultFile().

List<AbstractFile> org.sleuthkit.autopsy.discovery.search.ResultFile.getAllInstances ( )

Get the list of AbstractFiles which have been identified as instances of this file.

Returns
The list of AbstractFiles which have been identified as instances of this file.

Definition at line 139 of file ResultFile.java.

Content org.sleuthkit.autopsy.discovery.search.ResultFile.getDataSource ( ) throws TskCoreException
long org.sleuthkit.autopsy.discovery.search.ResultFile.getDataSourceObjectId ( )
Type org.sleuthkit.autopsy.discovery.search.ResultFile.getFileType ( )

Get the file type.

Returns
The FileType enum.

Definition at line 148 of file ResultFile.java.

References org.sleuthkit.autopsy.discovery.search.ResultFile.fileType.

AbstractFile org.sleuthkit.autopsy.discovery.search.ResultFile.getFirstInstance ( )
SearchData.Frequency org.sleuthkit.autopsy.discovery.search.Result.getFrequency ( )
inherited
List<String> org.sleuthkit.autopsy.discovery.search.ResultFile.getHashSetNames ( )

Get the hash set names for this file

Returns
The hash set names that matched this file.

Definition at line 194 of file ResultFile.java.

List<String> org.sleuthkit.autopsy.discovery.search.ResultFile.getInterestingSetNames ( )

Get the interesting item set names for this file

Returns
the interesting item set names that matched this file.

Definition at line 217 of file ResultFile.java.

List<String> org.sleuthkit.autopsy.discovery.search.ResultFile.getKeywordListNames ( )

Get the keyword list names for this file

Returns
the keyword list names that matched this file.

Definition at line 171 of file ResultFile.java.

Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.getKeywordListNameComparator().

TskData.FileKnown org.sleuthkit.autopsy.discovery.search.ResultFile.getKnown ( )
List<String> org.sleuthkit.autopsy.discovery.search.ResultFile.getObjectDetectedNames ( )

Get the objects detected for this file

Returns
the objects detected in this file.

Definition at line 240 of file ResultFile.java.

final SearchData.PreviouslyNotable org.sleuthkit.autopsy.discovery.search.Result.getPreviouslyNotableInCR ( )
inherited

Get the previously notable value of this result.

Returns
The previously notable status enum.

Definition at line 72 of file Result.java.

References org.sleuthkit.autopsy.discovery.search.Result.notabilityStatus.

Score org.sleuthkit.autopsy.discovery.search.ResultFile.getScore ( )

Get the aggregate score of this ResultFile. Calculated as the highest score among all instances it represents.

Returns
The score of this ResultFile.

Definition at line 109 of file ResultFile.java.

References org.sleuthkit.autopsy.discovery.search.ResultFile.currentScore.

String org.sleuthkit.autopsy.discovery.search.ResultFile.getScoreDescription ( )

Get the description for the score assigned to this item.

Returns
The score description of this ResultFile.

Definition at line 118 of file ResultFile.java.

References org.sleuthkit.autopsy.discovery.search.ResultFile.scoreDescription.

List<String> org.sleuthkit.autopsy.discovery.search.Result.getTagNames ( )
inherited

Get the tag names for this file

Returns
the tag names that matched this file.

Definition at line 120 of file Result.java.

Type org.sleuthkit.autopsy.discovery.search.ResultFile.getType ( )
int org.sleuthkit.autopsy.discovery.search.ResultFile.hashCode ( )
boolean org.sleuthkit.autopsy.discovery.search.ResultFile.isDeleted ( )

Get the aggregate deleted status of this ResultFile. A file is identified as deleted if all instances of it are deleted.

Returns
The deleted status of this ResultFile.

Definition at line 128 of file ResultFile.java.

References org.sleuthkit.autopsy.discovery.search.ResultFile.deleted.

final void org.sleuthkit.autopsy.discovery.search.Result.markAsPreviouslyNotableInCR ( )
inherited
final void org.sleuthkit.autopsy.discovery.search.Result.setFrequency ( SearchData.Frequency  frequency)
inherited

Set the frequency of this result in the central repository.

Parameters
frequencyThe frequency of the result as an enum.

Definition at line 81 of file Result.java.

References org.sleuthkit.autopsy.discovery.search.Result.frequency.

Referenced by org.sleuthkit.autopsy.discovery.search.DiscoveryAttributes.FrequencyCallback.process().

String org.sleuthkit.autopsy.discovery.search.ResultFile.toString ( )
void org.sleuthkit.autopsy.discovery.search.ResultFile.updateScoreAndDescription ( AbstractFile  file)
private

Member Data Documentation

Score org.sleuthkit.autopsy.discovery.search.ResultFile.currentScore = Score.SCORE_UNKNOWN
private
boolean org.sleuthkit.autopsy.discovery.search.ResultFile.deleted = false
private
Type org.sleuthkit.autopsy.discovery.search.ResultFile.fileType
private
final List<String> org.sleuthkit.autopsy.discovery.search.ResultFile.hashSetNames
private

Definition at line 46 of file ResultFile.java.

final List<AbstractFile> org.sleuthkit.autopsy.discovery.search.ResultFile.instances = new ArrayList<>()
private

Definition at line 49 of file ResultFile.java.

final List<String> org.sleuthkit.autopsy.discovery.search.ResultFile.interestingSetNames
private

Definition at line 47 of file ResultFile.java.

final List<String> org.sleuthkit.autopsy.discovery.search.ResultFile.keywordListNames
private

Definition at line 45 of file ResultFile.java.

final Logger org.sleuthkit.autopsy.discovery.search.ResultFile.logger = Logger.getLogger(ResultFile.class.getName())
staticprivate

Definition at line 44 of file ResultFile.java.

final List<String> org.sleuthkit.autopsy.discovery.search.ResultFile.objectDetectedNames
private

Definition at line 48 of file ResultFile.java.

String org.sleuthkit.autopsy.discovery.search.ResultFile.scoreDescription = null
private

The documentation for this class was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Sun Oct 2 2022
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.