Autopsy  4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Static Public Member Functions | Private Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster Class Reference

Inherits org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.MultiEvent< EventStripe >.

Public Member Functions

 EventCluster (Interval spanningInterval, TimelineEventType type, Set< Long > eventIDs, Set< Long > hashHits, Set< Long > tagged, String description, TimelineLevelOfDetail lod)
 
 EventCluster (TimelineEvent event, TimelineEventType type, TimelineLevelOfDetail lod)
 
boolean equals (Object obj)
 
SortedSet< EventClustergetClusters ()
 
String getDescription ()
 
TimelineLevelOfDetail getDescriptionLevel ()
 
long getEndMillis ()
 
Set< Long > getEventIDs ()
 
Set< Long > getEventIDsWithHashHits ()
 
Set< Long > getEventIDsWithTags ()
 
TimelineEventType getEventType ()
 
Optional< EventStripegetParent ()
 
Optional< EventStripegetParentStripe ()
 
Interval getSpan ()
 
long getStartMillis ()
 
int hashCode ()
 
String toString ()
 
EventCluster withParent (EventStripe parent)
 

Static Public Member Functions

static EventCluster merge (EventCluster cluster1, EventCluster cluster2)
 

Private Member Functions

 EventCluster (Interval spanningInterval, TimelineEventType type, Set< Long > eventIDs, Set< Long > hashHits, Set< Long > tagged, String description, TimelineLevelOfDetail lod, EventStripe parent)
 

Private Attributes

final String description
 
final Set< Long > eventIDs
 
final Set< Long > hashHits
 
final TimelineLevelOfDetail lod
 
final EventStripe parent
 
final Interval span
 
final Set< Long > tagged
 
final TimelineEventType type
 

Detailed Description

Represents a set of other events clustered together. All the sub events should have the same type and matching descriptions at the designated "zoom level", and be "close together" in time.

Definition at line 40 of file EventCluster.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster ( Interval  spanningInterval,
TimelineEventType  type,
Set< Long >  eventIDs,
Set< Long >  hashHits,
Set< Long >  tagged,
String  description,
TimelineLevelOfDetail  lod,
EventStripe  parent 
)
private
org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster ( Interval  spanningInterval,
TimelineEventType  type,
Set< Long >  eventIDs,
Set< Long >  hashHits,
Set< Long >  tagged,
String  description,
TimelineLevelOfDetail  lod 
)
org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster ( TimelineEvent  event,
TimelineEventType  type,
TimelineLevelOfDetail  lod 
)

Member Function Documentation

boolean org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals ( Object  obj)
SortedSet<EventCluster> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getClusters ( )

Definition at line 244 of file EventCluster.java.

String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescription ( )
TimelineLevelOfDetail org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescriptionLevel ( )
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEndMillis ( )

Definition at line 195 of file EventCluster.java.

Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDs ( )
Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithHashHits ( )
Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithTags ( )
TimelineEventType org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventType ( )
Optional<EventStripe> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParent ( )

get the EventStripe (if any) that contains this cluster

Returns
an Optional containg the parent stripe of this cluster, or is empty if the cluster has no parent set.

Definition at line 169 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParentStripe().

Optional<EventStripe> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParentStripe ( )

get the EventStripe (if any) that contains this cluster

Returns
an Optional containg the parent stripe of this cluster, or is empty if the cluster has no parent set.

Definition at line 180 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParent().

Interval org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getSpan ( )
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getStartMillis ( )
int org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashCode ( )

Definition at line 254 of file EventCluster.java.

static EventCluster org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge ( EventCluster  cluster1,
EventCluster  cluster2 
)
static
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.toString ( )

Definition at line 249 of file EventCluster.java.

EventCluster org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.withParent ( EventStripe  parent)

return a new EventCluster identical to this one, except with the given EventBundle as the parent.

Parameters
parent
Returns
a new EventCluster identical to this one, except with the given EventBundle as the parent.

Definition at line 238 of file EventCluster.java.

References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster().

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe().

Member Data Documentation

final String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.description
private
final Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.eventIDs
private
final Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashHits
private

the ids of the subset of clustered events that have at least one hash set hit

Definition at line 79 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithHashHits().

final TimelineLevelOfDetail org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod
private
final EventStripe org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.parent
private
final Interval org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.span
private

the smallest time interval containing all the clustered events

Definition at line 47 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getSpan(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().

final Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.tagged
private

the ids of the subset of clustered events that have at least one tag applied to them

Definition at line 73 of file EventCluster.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithTags().

final TimelineEventType org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.type
private

The documentation for this class was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Wed Oct 5 2022
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.