Autopsy
4.19.3
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
An enumeration of the case events (property change events) a case may publish (fire).
org.sleuthkit.autopsy.casemodule.Case.Events.ADDING_DATA_SOURCE |
An attempt to add a new data source to the current case is being made. The old and new values of the PropertyChangeEvent are null. Cast the PropertyChangeEvent to org.sleuthkit.autopsy.casemodule.events.AddingDataSourceEvent to access additional event data.
Definition at line 338 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.AddingDataSourceEvent.AddingDataSourceEvent(), and org.sleuthkit.autopsy.casemodule.CollaborationMonitor.LocalTasksManager.propertyChange().
org.sleuthkit.autopsy.casemodule.Case.Events.ADDING_DATA_SOURCE_FAILED |
A failure to add a new data source to the current case has occurred. The old and new values of the PropertyChangeEvent are null. Cast the PropertyChangeEvent to org.sleuthkit.autopsy.casemodule.events.AddingDataSourceFailedEvent to access additional event data.
Definition at line 346 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.AddingDataSourceFailedEvent.AddingDataSourceFailedEvent(), and org.sleuthkit.autopsy.casemodule.CollaborationMonitor.LocalTasksManager.propertyChange().
org.sleuthkit.autopsy.casemodule.Case.Events.BLACKBOARD_ARTIFACT_TAG_ADDED |
An artifact associated with the current case has been tagged. The old value of the PropertyChangeEvent is null, the new value is the tag (type: BlackBoardArtifactTag).
Definition at line 401 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.BlackBoardArtifactTagAddedEvent.BlackBoardArtifactTagAddedEvent(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ArtifactTagTask.run().
org.sleuthkit.autopsy.casemodule.Case.Events.BLACKBOARD_ARTIFACT_TAG_DELETED |
A tag has been removed from an artifact associated with the current case. The old value of the PropertyChangeEvent is the tag info (type: BlackBoardArtifactTagDeletedEvent.DeletedBlackboardArtifactTagInfo), the new value is null.
Definition at line 408 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.BlackBoardArtifactTagDeletedEvent.BlackBoardArtifactTagDeletedEvent(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ArtifactTagTask.run().
org.sleuthkit.autopsy.casemodule.Case.Events.CASE_DETAILS |
org.sleuthkit.autopsy.casemodule.Case.Events.CONTENT_TAG_ADDED |
Content associated with the current case has been tagged. The old value of the PropertyChangeEvent is null, the new value is the tag (type: ContentTag).
Definition at line 414 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.ContentTagAddedEvent.ContentTagAddedEvent(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.run().
org.sleuthkit.autopsy.casemodule.Case.Events.CONTENT_TAG_DELETED |
A tag has been removed from content associated with the current case. The old value of the PropertyChangeEvent is is the tag info (type: ContentTagDeletedEvent.DeletedContentTagInfo), the new value is null.
Definition at line 420 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.ContentTagDeletedEvent.ContentTagDeletedEvent(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.run().
org.sleuthkit.autopsy.casemodule.Case.Events.CR_COMMENT_CHANGED |
Definition at line 444 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.CommentChangedEvent.CommentChangedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE |
The current case has changed.
If a new case has been opened as the current case, the old value of the PropertyChangeEvent is null, and the new value is the new case (type: Case).
If the current case has been closed, the old value of the PropertyChangeEvent is the closed case (type: Case), and the new value is null. IMPORTANT: Subscribers to this event should not call isCaseOpen or getCurrentCase in the interval between a case closed event and a case opened event. If there is any need for upon closing interaction with a closed case, the case in the old value should be used, and it should be done synchronously in the CURRENT_CASE event handler.
Definition at line 383 of file Case.java.
Referenced by org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNodeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.addNotify(), org.sleuthkit.autopsy.communications.VisualizationPanel.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ViewModeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.addNotify(), org.sleuthkit.autopsy.datasourcesummary.ui.DataSourceSummaryTabbedPane.close(), org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.communications.ContactCache.ContactCache(), org.sleuthkit.autopsy.datasourcesummary.ui.DataSourceSummaryTabbedPane.DataSourceSummaryTabbedPane(), org.sleuthkit.autopsy.filesearch.FileSearchAction.FileSearchAction(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.FileTypesByExtObservable(), org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNodeFactory.finalize(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.finalize(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.finalize(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.finalize(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ViewModeFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.finalize(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.GlobalSettingsPanel(), org.sleuthkit.autopsy.datamodel.ImageNode.ImageNode(), org.sleuthkit.autopsy.corecomponents.MultiUserSettingsPanel.MultiUserSettingsPanel(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.communications.OpenCommVisualizationToolAction.OpenCommVisualizationToolAction(), org.sleuthkit.autopsy.geolocation.OpenGeolocationAction.OpenGeolocationAction(), org.sleuthkit.autopsy.keywordsearch.DropdownToolbar.SearchSettingsChangeListener.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), org.sleuthkit.autopsy.datamodel.ImageNode.removeListeners(), org.sleuthkit.autopsy.datamodel.VolumeNode.removeListeners(), org.sleuthkit.autopsy.report.infrastructure.ReportWizardAction.ReportWizardAction(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToCaseEvents(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.subscribeToChangeEvents(), org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.ViewPreferencesPanel(), and org.sleuthkit.autopsy.datamodel.VolumeNode.VolumeNode().
org.sleuthkit.autopsy.casemodule.Case.Events.DATA_SOURCE_ADDED |
A new data source or series of data sources have been added to the current case. The old value of the PropertyChangeEvent is null, the new value is the newly-added data source (type: Content). Cast the PropertyChangeEvent to org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent to access additional event data.
Definition at line 355 of file Case.java.
Referenced by org.sleuthkit.autopsy.datamodel.HostNode.HostGroupingChildren.addNotify(), org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent.DataSourceAddedEvent(), org.sleuthkit.autopsy.filesearch.DataSourcePanel.DataSourcePanel(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.FileTypesByExtObservable(), org.sleuthkit.autopsy.datamodel.HostNode.HostGroupingChildren.finalize(), org.sleuthkit.autopsy.datamodel.DataSourceFilesNode.DataSourcesNodeChildren.onAdd(), org.sleuthkit.autopsy.datamodel.DataSourceFilesNode.DataSourcesNodeChildren.onRemove(), org.sleuthkit.autopsy.keywordsearch.DropdownToolbar.SearchSettingsChangeListener.propertyChange(), org.sleuthkit.autopsy.casemodule.CollaborationMonitor.LocalTasksManager.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), and org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.subscribeToChangeEvents().
org.sleuthkit.autopsy.casemodule.Case.Events.DATA_SOURCE_DELETED |
A data source has been deleted from the current case. The old value of the PropertyChangeEvent is the object id of the data source that was deleted (type: Long), the new value is null.
Definition at line 361 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.DataSourceDeletedEvent.DataSourceDeletedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.DATA_SOURCE_NAME_CHANGED |
A data source's name has changed. The new value of the property change event is the new name.
Definition at line 366 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.DataSourceNameChangedEvent.DataSourceNameChangedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.EXAMINER |
The examiner associated with the current case has changed. The old value of the PropertyChangeEvent is the old examiner (type: String), the new value is the new examiner (type: String).
org.sleuthkit.autopsy.casemodule.Case.Events.HOSTS_ADDED |
One or more hosts have been added to the case.
Definition at line 464 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.HostsAddedEvent.HostsAddedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.HOSTS_ADDED_TO_PERSON |
One or more hosts have been added to a person.
Definition at line 488 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.HostsAddedToPersonEvent.HostsAddedToPersonEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.HOSTS_DELETED |
One or more hosts have been deleted from the case.
Definition at line 472 of file Case.java.
Referenced by org.sleuthkit.autopsy.datamodel.HostNode.HostGroupingChildren.addNotify(), org.sleuthkit.autopsy.datamodel.HostNode.HostGroupingChildren.finalize(), and org.sleuthkit.autopsy.casemodule.events.HostsDeletedEvent.HostsDeletedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.HOSTS_REMOVED_FROM_PERSON |
One or more hosts have been removed from a person.
Definition at line 492 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.HostsRemovedFromPersonEvent.HostsRemovedFromPersonEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.HOSTS_UPDATED |
One or more hosts in the case have been updated.
Definition at line 468 of file Case.java.
Referenced by org.sleuthkit.autopsy.datamodel.HostNode.HostNode(), and org.sleuthkit.autopsy.casemodule.events.HostsUpdatedEvent.HostsUpdatedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.NAME |
The name of the current case has changed. The old value of the PropertyChangeEvent is the old case name (type: String), the new value is the new case name (type: String).
org.sleuthkit.autopsy.casemodule.Case.Events.NUMBER |
The number of the current case has changed. The old value of the PropertyChangeEvent is the old case number (type: String), the new value is the new case number (type: String).
org.sleuthkit.autopsy.casemodule.Case.Events.OS_ACCOUNTS_ADDED |
One or more OS accounts have been added to the case.
Definition at line 448 of file Case.java.
Referenced by org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNodeFactory.addNotify(), and org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNodeFactory.finalize().
org.sleuthkit.autopsy.casemodule.Case.Events.OS_ACCOUNTS_DELETED |
One or more OS accounts have been deleted from the case.
Definition at line 456 of file Case.java.
Referenced by org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNodeFactory.addNotify(), and org.sleuthkit.autopsy.casemodule.events.OsAccountsDeletedEvent.OsAccountsDeletedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.OS_ACCOUNTS_UPDATED |
One or more OS accounts in the case have been updated.
Definition at line 452 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.OsAccountsUpdatedEvent.OsAccountsUpdatedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.OS_ACCT_INSTANCES_ADDED |
org.sleuthkit.autopsy.casemodule.Case.Events.PERSONS_ADDED |
One or more persons have been added to the case.
Definition at line 476 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.PersonsAddedEvent.PersonsAddedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.PERSONS_DELETED |
One or more persons been deleted from the case.
Definition at line 484 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.PersonsDeletedEvent.PersonsDeletedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.PERSONS_UPDATED |
One or more persons in the case have been updated.
Definition at line 480 of file Case.java.
Referenced by org.sleuthkit.autopsy.datamodel.PersonNode.PersonNode(), and org.sleuthkit.autopsy.casemodule.events.PersonsUpdatedEvent.PersonsUpdatedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.REPORT_ADDED |
A report has been added to the current case. The old value of the PropertyChangeEvent is null, the new value is the report (type: Report).
Definition at line 389 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.ReportAddedEvent.ReportAddedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.REPORT_DELETED |
A report has been deleted from the current case. The old value of the PropertyChangeEvent is the report (type: Report), the new value is null.
Definition at line 395 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteReports().
org.sleuthkit.autopsy.casemodule.Case.Events.TAG_DEFINITION_CHANGED |
A tag definition has changed (e.g., description, known status). The old value of the PropertyChangeEvent is the display name of the tag definition that has changed.
Definition at line 433 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.notifyTagDefinitionChanged().
org.sleuthkit.autopsy.casemodule.Case.Events.TAG_NAMES_ADDED |
One or more TagNames have been added.
Definition at line 497 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.TagNamesEvent.TagNamesAddedEvent.TagNamesAddedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.TAG_NAMES_DELETED |
One or more TagNames have been deleted.
Definition at line 507 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.TagNamesEvent.TagNamesDeletedEvent.TagNamesDeletedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.TAG_NAMES_UPDATED |
One or more TagNames have been updated.
Definition at line 502 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.TagNamesEvent.TagNamesUpdatedEvent.TagNamesUpdatedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.TAG_SETS_ADDED |
One or more TagSets have been added.
Definition at line 512 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.events.TagSetsEvent.TagSetsAddedEvent.TagSetsAddedEvent().
org.sleuthkit.autopsy.casemodule.Case.Events.TIMELINE_EVENT_ADDED |
An timeline event, such mac time or web activity was added to the current case. The old value is null and the new value is the TimelineEvent that was added.
Definition at line 439 of file Case.java.
Referenced by org.sleuthkit.autopsy.timeline.events.TimelineEventAddedEvent.TimelineEventAddedEvent().
Copyright © 2012-2022 Basis Technology. Generated on: Thu Mar 23 2023
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.