Autopsy
4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
interface | ParserWithError |
interface | WaypointFilterQueryCallBack |
Static Public Member Functions | |
static List< Waypoint > | getAllWaypoints (SleuthkitCase skCase) throws GeoLocationDataException |
static void | getAllWaypoints (SleuthkitCase skCase, List< DataSource > dataSources, List< ARTIFACT_TYPE > artifactTypes, boolean showAll, int cntDaysFromRecent, boolean noTimeStamp, WaypointFilterQueryCallBack queryCallBack) throws GeoLocationDataException |
static List< Area > | getAreas (List< Waypoint > waypoints) |
static List< Waypoint > | getBookmarkWaypoints (SleuthkitCase skCase) throws GeoLocationDataException |
static List< Waypoint > | getBookmarkWaypoints (List< Waypoint > waypoints) |
static List< Waypoint > | getEXIFWaypoints (SleuthkitCase skCase) throws GeoLocationDataException |
static List< Waypoint > | getEXIFWaypoints (List< Waypoint > waypoints) |
static List< Waypoint > | getLastKnownWaypoints (SleuthkitCase skCase) throws GeoLocationDataException |
static List< Waypoint > | getLastKnownWaypoints (List< Waypoint > waypoints) |
static List< Route > | getRoutes (List< Waypoint > waypoints) |
static List< Waypoint > | getSearchWaypoints (SleuthkitCase skCase) throws GeoLocationDataException |
static List< Waypoint > | getSearchWaypoints (List< Waypoint > waypoints) |
static List< Waypoint > | getTrackpointWaypoints (SleuthkitCase skCase) throws GeoLocationDataException |
static List< Waypoint > | getTrackpointWaypoints (List< Waypoint > waypoints) |
static List< Track > | getTracks (List< Waypoint > waypoints) |
Private Member Functions | |
WaypointBuilder () | |
Static Private Member Functions | |
static String | buildQuery (List< DataSource > dataSources, boolean showAll, int cntDaysFromRecent, boolean noTimeStamp) |
static String | buildQueryForWaypointsWOTimeStamps (List< DataSource > dataSources) |
static GeoLocationParseResult< Waypoint > | getWaypointForArtifact (BlackboardArtifact artifact, ARTIFACT_TYPE type) |
static String | getWaypointListQuery (List< DataSource > dataSources) |
static GeoLocationParseResult< Waypoint > | parseWaypoint (ParserWithError< Waypoint > parser, BlackboardArtifact artifact) |
static GeoLocationParseResult< Waypoint > | parseWaypoints (ParserWithError< List< Waypoint >> parser, BlackboardArtifact artifact) |
Static Private Attributes | |
static final String | GEO_ARTIFACT_QUERY |
static final String | GEO_ARTIFACT_QUERY_ID_ONLY |
static final String | GEO_ARTIFACT_WITH_DATA_SOURCES_QUERY |
static final String | GEO_ATTRIBUTE_TYPE_IDS |
static final Logger | logger = Logger.getLogger(WaypointBuilder.class.getName()) |
static final String | MOST_RECENT_TIME |
static final String | SELECT_WO_TIMESTAMP |
static final String | TIME_TYPE_IDS |
Class for building lists of waypoints.
Definition at line 41 of file WaypointBuilder.java.
|
private |
private constructor
Definition at line 109 of file WaypointBuilder.java.
|
staticprivate |
Build the query to filter the list of waypoints.
If showAll is true, the values of cntDaysFromRecent and noTimeStamp are ignored.
dataSources | This of data sources to filter the waypoints by. Pass a null or empty list to show way points for all dataSources. |
showAll | True to get all waypoints. |
cntDaysFromRecent | Number of days from the most recent time stamp to get waypoints for. This parameter will be ignored if showAll is true; |
noTimeStamp | True to include waypoints without timestamp. This parameter will be ignored if showAll is true. |
Definition at line 574 of file WaypointBuilder.java.
References org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.buildQueryForWaypointsWOTimeStamps(), org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.GEO_ARTIFACT_QUERY, org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getWaypointListQuery(), and org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.MOST_RECENT_TIME.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getAllWaypoints().
|
staticprivate |
Create the query for getting a list of waypoints that do not have time stamps.
dataSources | List of data Sources to filter by |
Definition at line 536 of file WaypointBuilder.java.
References org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.GEO_ARTIFACT_QUERY_ID_ONLY, org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getWaypointListQuery(), and org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.SELECT_WO_TIMESTAMP.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.buildQuery().
|
static |
Returns a list of Waypoints for the artifacts with geolocation information.
List will include artifacts of type: TSK_GPS_TRACKPOINT TSK_GPS_SEARCH TSK_GPS_LAST_KNOWN_LOCATION TSK_GPS_BOOKMARK TSK_METADATA_EXIF
skCase | Currently open SleuthkitCase |
GeoLocationDataException |
Definition at line 126 of file WaypointBuilder.java.
References org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getBookmarkWaypoints(), org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getEXIFWaypoints(), org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getLastKnownWaypoints(), org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getSearchWaypoints(), and org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getTrackpointWaypoints().
Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.GeolocationSummary.getGeoResult().
|
static |
Get a filtered list of waypoints.
If showAll is true, the values of cntDaysFromRecent and notTimeStamp will be ignored.
To include data from all dataSources pass a null or empty dataSource list.
skCase | Currently open sleuthkit case. |
dataSources | This of data sources to filter the waypoints by. Pass a null or empty list to show way points for all dataSources. |
artifactTypes | List of types from which we want to get waypoints. |
showAll | True to get all waypoints. |
cntDaysFromRecent | Number of days from the most recent time stamp to get waypoints for. This parameter will be ignored if showAll is true; |
noTimeStamp | True to include waypoints without timestamp. This parameter will be ignored if showAll is true. |
queryCallBack | Function to call after the DB query has completed. |
GeoLocationDataException |
Definition at line 490 of file WaypointBuilder.java.
References org.sleuthkit.autopsy.geolocation.datamodel.GeoLocationParseResult< T >.add(), org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.buildQuery(), and org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getWaypointForArtifact().
|
static |
Returns a list of areas from the given list of waypoints.
waypoints | A list of waypoints |
Definition at line 189 of file WaypointBuilder.java.
|
static |
Gets a list of Waypoints for TSK_GPS_BOOKMARK artifacts.
skCase | Currently open SleuthkitCase |
GeoLocationDataException |
Definition at line 415 of file WaypointBuilder.java.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getAllWaypoints().
|
static |
Returns a list of waypoints that come from TSK_GPS_LAST_KNOWN_LOCATION artifacts.
waypoints | A list of waypoints |
Definition at line 445 of file WaypointBuilder.java.
|
static |
Gets a list of Waypoints for TSK_METADATA_EXIF artifacts.
skCase | Currently open SleuthkitCase |
GeoLocationDataException |
Definition at line 262 of file WaypointBuilder.java.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getAllWaypoints().
|
static |
Returns a list of waypoints that come from TSK_METADATA_EXIF artifacts.
waypoints | A list of waypoints |
Definition at line 293 of file WaypointBuilder.java.
|
static |
Gets a list of Waypoints for TSK_GPS_LAST_KNOWN_LOCATION artifacts.
skCase | Currently open SleuthkitCase |
GeoLocationDataException |
Definition at line 364 of file WaypointBuilder.java.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getAllWaypoints().
|
static |
Returns a list of waypoints that come from TSK_GPS_LAST_KNOWN_LOCATION artifacts.
waypoints | A list of waypoints |
Definition at line 394 of file WaypointBuilder.java.
|
static |
Returns a list of routes from the given list of waypoints.
waypoints | A list of waypoints |
Definition at line 145 of file WaypointBuilder.java.
|
static |
Gets a list of Waypoints for TSK_GPS_SEARCH artifacts.
skCase | Currently open SleuthkitCase |
GeoLocationDataException |
Definition at line 314 of file WaypointBuilder.java.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getAllWaypoints().
|
static |
Returns a list of waypoints that come from TSK_GPS_SEARCH artifacts.
waypoints | A list of waypoints |
Definition at line 343 of file WaypointBuilder.java.
|
static |
Gets a list of Waypoints for TSK_GPS_TRACKPOINT artifacts.
skCase | Currently open SleuthkitCase |
GeoLocationDataException |
Definition at line 214 of file WaypointBuilder.java.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getAllWaypoints().
|
static |
Returns a list of waypoints that come from TSK_GEO_TRACKPOINT artifacts.
waypoints | A list of waypoints |
Definition at line 241 of file WaypointBuilder.java.
|
static |
Returns a list of tracks from the given list of waypoints.
waypoints | A list of waypoints |
Definition at line 167 of file WaypointBuilder.java.
|
staticprivate |
Create a Waypoint object for the given Blackboard artifact.
artifact | The artifact to create the waypoint from |
type | The type of artifact |
Definition at line 698 of file WaypointBuilder.java.
References org.sleuthkit.autopsy.geolocation.datamodel.GeoLocationParseResult< T >.add(), org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.parseWaypoint(), and org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.parseWaypoints().
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getAllWaypoints().
|
staticprivate |
Returns the query to get a list of waypoints filted by the given data sources.
An artifact is assumed to be a "waypoint" if it has the attributes TSK_GEO_LATITUDE or TSK_GEO_LATITUDE_START
dataSources | A list of data sources to filter by. If the list is null or empty the data source list will be ignored. |
Definition at line 621 of file WaypointBuilder.java.
References org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.GEO_ARTIFACT_QUERY, and org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.GEO_ARTIFACT_WITH_DATA_SOURCES_QUERY.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.buildQuery(), and org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.buildQueryForWaypointsWOTimeStamps().
|
staticprivate |
Parses one waypoint.
parser | The parser to use. |
artifact | The artifact to be parsed. |
Definition at line 665 of file WaypointBuilder.java.
References org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.ParserWithError< T >.parse().
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getWaypointForArtifact().
|
staticprivate |
Parses a list of waypoints.
parser | The parser to use. |
artifact | The artifact to be parsed. |
Definition at line 682 of file WaypointBuilder.java.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getWaypointForArtifact().
|
staticprivate |
Definition at line 57 of file WaypointBuilder.java.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.buildQuery(), and org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getWaypointListQuery().
|
staticprivate |
Definition at line 63 of file WaypointBuilder.java.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.buildQueryForWaypointsWOTimeStamps().
|
staticprivate |
Definition at line 69 of file WaypointBuilder.java.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.getWaypointListQuery().
|
staticprivate |
Definition at line 49 of file WaypointBuilder.java.
|
staticprivate |
Definition at line 43 of file WaypointBuilder.java.
|
staticprivate |
Definition at line 77 of file WaypointBuilder.java.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.buildQuery().
|
staticprivate |
Definition at line 87 of file WaypointBuilder.java.
Referenced by org.sleuthkit.autopsy.geolocation.datamodel.WaypointBuilder.buildQueryForWaypointsWOTimeStamps().
|
staticprivate |
Definition at line 45 of file WaypointBuilder.java.
Copyright © 2012-2022 Basis Technology. Generated on: Tue Jun 27 2023
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.