Autopsy
4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Public Member Functions | |
SingleDetailsViewEvent (long eventID, long dataSourceObjId, long fileObjId, Long artifactID, long time, TimelineEventType type, String fullDescription, String medDescription, String shortDescription, boolean hashHit, boolean tagged) | |
SingleDetailsViewEvent (TimelineEvent singleEvent) | |
boolean | equals (Object obj) |
Optional< Long > | getArtifactID () |
SortedSet< EventCluster > | getClusters () |
long | getDataSourceObjID () |
String | getDescription (TimelineLevelOfDetail lod) |
String | getDescription () |
TimelineLevelOfDetail | getDescriptionLevel () |
long | getEndMillis () |
long | getEventID () |
Set< Long > | getEventIDs () |
Set< Long > | getEventIDsWithHashHits () |
Set< Long > | getEventIDsWithTags () |
TimelineEventType | getEventType () |
long | getFileID () |
String | getFullDescription () |
String | getMedDescription () |
Optional< EventStripe > | getParentStripe () |
String | getShortDescription () |
default int | getSize () |
long | getStartMillis () |
long | getTime () |
int | hashCode () |
boolean | isHashHit () |
boolean | isTagged () |
SingleDetailsViewEvent | withParent (MultiEvent<?> newParent) |
Private Attributes | |
final Long | artifactID |
final long | dataSourceObjId |
final ImmutableMap< TimelineLevelOfDetail, String > | descriptions |
final long | eventID |
final long | fileObjId |
final boolean | hashHit |
MultiEvent<?> | parent = null |
final boolean | tagged |
final long | time |
final TimelineEventType | type |
A single event.
Definition at line 36 of file SingleDetailsViewEvent.java.
org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent | ( | long | eventID, |
long | dataSourceObjId, | ||
long | fileObjId, | ||
Long | artifactID, | ||
long | time, | ||
TimelineEventType | type, | ||
String | fullDescription, | ||
String | medDescription, | ||
String | shortDescription, | ||
boolean | hashHit, | ||
boolean | tagged | ||
) |
eventID | |
dataSourceObjId | |
fileObjId | Object Id of file (could be a data source) that event is associated with |
artifactID | |
time | |
type | |
fullDescription | |
medDescription | |
shortDescription | |
hashHit | |
tagged |
Definition at line 103 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.artifactID, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.dataSourceObjId, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.eventID, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.fileObjId, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.hashHit, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.tagged, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.time, and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.type.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.equals(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.withParent().
org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent | ( | TimelineEvent | singleEvent | ) |
Definition at line 117 of file SingleDetailsViewEvent.java.
boolean org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.equals | ( | Object | obj | ) |
Optional<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getArtifactID | ( | ) |
Get the artifact id of the artifact this event is derived from.
Definition at line 173 of file SingleDetailsViewEvent.java.
SortedSet<EventCluster> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters | ( | ) |
Get the EventClusters that make up this event. May be null for SingleEvents, or return a refernece to this event if it is an EventCluster
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 302 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDs(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithHashHits(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithTags(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFullDescription(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getStartMillis().
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDataSourceObjID | ( | ) |
Get the datasource id of the datasource this event belongs to.
Definition at line 253 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.dataSourceObjId.
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription | ( | TimelineLevelOfDetail | lod | ) |
Get the description of this event at the give level of detail(LoD).
lod | The level of detail to get. |
Definition at line 244 of file SingleDetailsViewEvent.java.
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription | ( | ) |
Get a description of this event. Implementations may choose what level of description to provide.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 308 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFullDescription().
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFullDescription(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getMedDescription(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getShortDescription().
TimelineLevelOfDetail org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescriptionLevel | ( | ) |
Get the Description level of detail at which all single events of this event have the same description, ie, what level of detail was used to group these events.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 313 of file SingleDetailsViewEvent.java.
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEndMillis | ( | ) |
Get the start time of this event as milliseconds from the Unix Epoch.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 273 of file SingleDetailsViewEvent.java.
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventID | ( | ) |
Get the event id of this event.
Definition at line 182 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.eventID.
Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDs | ( | ) |
Get the id(s) of this event as a set.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 258 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters().
Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithHashHits | ( | ) |
Get the id(s) of this event that have hash hits associated with them.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 263 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isHashHit().
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters().
Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithTags | ( | ) |
Get the id(s) of this event that have tags associated with them.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 268 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isTagged().
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters().
TimelineEventType org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventType | ( | ) |
Get the EventType of this event.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 206 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.type.
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFileID | ( | ) |
Get the obj id of the file (which could be a data source) this event is derived from.
Definition at line 192 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.fileObjId.
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFullDescription | ( | ) |
Get the full description of this event.
Definition at line 215 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription().
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription().
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getMedDescription | ( | ) |
Get the medium description of this event.
Definition at line 224 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription().
Optional<EventStripe> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getParentStripe | ( | ) |
get the EventStripe (if any) that contains this event, skipping over any intervening event cluster
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 326 of file SingleDetailsViewEvent.java.
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getShortDescription | ( | ) |
Get the short description of this event.
Definition at line 233 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDescription().
|
inherited |
Get the number of SingleEvents this event contains.
Definition at line 111 of file DetailViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.getEventIDs().
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getStartMillis | ( | ) |
Get the end time of this event as milliseconds from the Unix Epoch.
Implements org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailViewEvent.
Definition at line 278 of file SingleDetailsViewEvent.java.
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getTime | ( | ) |
Get the time of this event (in seconds from the Unix epoch).
Definition at line 201 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.time.
int org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.hashCode | ( | ) |
Definition at line 283 of file SingleDetailsViewEvent.java.
boolean org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isHashHit | ( | ) |
Is the file this event is derived from in any of the configured hash sets.
Definition at line 163 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.hashHit.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithHashHits().
boolean org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isTagged | ( | ) |
Is the file or artifact this event is derived from tagged?
Definition at line 151 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.tagged.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventIDsWithTags().
SingleDetailsViewEvent org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.withParent | ( | MultiEvent<?> | newParent | ) |
Get a new SingleDetailsViewEvent that is the same as this event, but with the given parent.
newParent | the parent of the new event object. |
Definition at line 140 of file SingleDetailsViewEvent.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.hashHit, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.parent, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.tagged.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.EventStripeNode.createChildNode().
|
private |
The TSK artifact ID of the file this event is derived from. Null, if this event is not derived from an artifact.
Definition at line 49 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
|
private |
The TSK datasource ID of the datasource this event belongs to.
Definition at line 54 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getDataSourceObjID(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
|
private |
The three descriptions (full, med, short) stored in a map, keyed by DescriptionLOD (Level of Detail)
Definition at line 69 of file SingleDetailsViewEvent.java.
|
private |
Definition at line 38 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventID(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
|
private |
The TSK object ID of the file (could be data source) this event is derived from.
Definition at line 43 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getFileID(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
|
private |
True if the file this event is derived from hits any of the configured hash sets.
Definition at line 75 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isHashHit(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.withParent().
|
private |
Single events may or may not have their parent set, since the parent is a transient property of the current (details) view settings.
Definition at line 86 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.withParent().
|
private |
True if the file or artifact this event is derived from is tagged.
Definition at line 80 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.isTagged(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.withParent().
|
private |
The time of this event in second from the Unix epoch.
Definition at line 59 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getTime(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
|
private |
The type of this event.
Definition at line 63 of file SingleDetailsViewEvent.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getEventType(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.SingleDetailsViewEvent().
Copyright © 2012-2022 Basis Technology. Generated on: Thu Jun 1 2023
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.