Autopsy  4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.discovery.search.SearchFiltering.ArtifactDateRangeFilter Class Reference

Inherits org.sleuthkit.autopsy.discovery.search.AbstractFilter.

Public Member Functions

 ArtifactDateRangeFilter (Long startDate, Long endDate)
 
List< ResultapplyAlternateFilter (List< Result > currentResults, SleuthkitCase caseDb, CentralRepository centralRepoDb, SearchContext context) throws DiscoveryException, SearchCancellationException
 
String getDesc ()
 
String getWhereClause ()
 
boolean useAlternateFilter ()
 

Private Attributes

final Long endDate
 
final Long startDate
 

Static Private Attributes

static List< BlackboardAttribute.ATTRIBUTE_TYPE > dateAttributes
 

Detailed Description

A filter to specify date range for artifacts, start and end times should be in epoch seconds.

Definition at line 156 of file SearchFiltering.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.discovery.search.SearchFiltering.ArtifactDateRangeFilter.ArtifactDateRangeFilter ( Long  startDate,
Long  endDate 
)

Construct a new ArtifactDateRangeFilter.

Parameters
startDateThe first date to include results for in the search.
endDateThe last date to include results for in the search.

Definition at line 175 of file SearchFiltering.java.

References org.sleuthkit.autopsy.discovery.search.SearchFiltering.ArtifactDateRangeFilter.endDate, and org.sleuthkit.autopsy.discovery.search.SearchFiltering.ArtifactDateRangeFilter.startDate.

Member Function Documentation

List<Result> org.sleuthkit.autopsy.discovery.search.AbstractFilter.applyAlternateFilter ( List< Result currentResults,
SleuthkitCase  caseDb,
CentralRepository  centralRepoDb,
SearchContext  context 
) throws DiscoveryException, SearchCancellationException
inherited

Run a secondary filter that does not operate on table.

Parameters
currentResultsThe current list of matching results; empty if no filters have yet been run.
caseDbThe case database
centralRepoDbThe central repo database. Can be null if the filter does not require it.
contextThe SearchContext the search which is applying this filter is being performed from.
Returns
The list of results that match this filter (and any that came before it)
Exceptions
DiscoveryException
SearchCancellationExceptionThrown when the user has cancelled the search.

Definition at line 67 of file AbstractFilter.java.

String org.sleuthkit.autopsy.discovery.search.SearchFiltering.ArtifactDateRangeFilter.getDesc ( )

Definition at line 205 of file SearchFiltering.java.

String org.sleuthkit.autopsy.discovery.search.SearchFiltering.ArtifactDateRangeFilter.getWhereClause ( )

Definition at line 193 of file SearchFiltering.java.

boolean org.sleuthkit.autopsy.discovery.search.AbstractFilter.useAlternateFilter ( )
inherited

Indicates whether this filter needs to use the secondary, non-SQL method applyAlternateFilter().

Returns
false by default

Definition at line 45 of file AbstractFilter.java.

Member Data Documentation

List<BlackboardAttribute.ATTRIBUTE_TYPE> org.sleuthkit.autopsy.discovery.search.SearchFiltering.ArtifactDateRangeFilter.dateAttributes
staticprivate
Initial value:
= Arrays.asList(
BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME,
BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_CREATED,
BlackboardAttribute.ATTRIBUTE_TYPE.TSK_DATETIME_ACCESSED
)

Definition at line 163 of file SearchFiltering.java.

final Long org.sleuthkit.autopsy.discovery.search.SearchFiltering.ArtifactDateRangeFilter.endDate
private
final Long org.sleuthkit.autopsy.discovery.search.SearchFiltering.ArtifactDateRangeFilter.startDate
private

The documentation for this class was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Wed Oct 5 2022
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.