Autopsy
4.20.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits Serializable.
Classes | |
class | AbstractTextCondition |
class | CaseInsensitiveMultiValueStringComparisionMatcher |
class | CaseInsensitivePartialStringComparisionMatcher |
class | CaseInsensitiveStringComparisionMatcher |
class | DateCondition |
class | ExtensionCondition |
interface | FileAttributeCondition |
interface | FileNameCondition |
class | FileSizeCondition |
class | FullNameCondition |
class | MetaTypeCondition |
class | MimeTypeCondition |
class | ParentPathCondition |
class | RegexMatcher |
interface | TextCondition |
interface | TextMatcher |
Public Member Functions | |
Rule (String ruleName, FileNameCondition fileNameCondition, MetaTypeCondition metaTypeCondition, ParentPathCondition pathCondition, MimeTypeCondition mimeTypeCondition, FileSizeCondition fileSizeCondition, DateCondition dateCondition, Boolean exclusive) | |
DateCondition | getDateCondition () |
FileNameCondition | getFileNameCondition () |
FileSizeCondition | getFileSizeCondition () |
MetaTypeCondition | getMetaTypeCondition () |
MimeTypeCondition | getMimeTypeCondition () |
String | getName () |
ParentPathCondition | getPathCondition () |
String | getUuid () |
boolean | isExclusive () |
boolean | isSatisfied (AbstractFile file) |
String | toString () |
Private Attributes | |
final List< FileAttributeCondition > | conditions = new ArrayList<>() |
final DateCondition | dateCondition |
final Boolean | exclusive |
final FileNameCondition | fileNameCondition |
final FileSizeCondition | fileSizeCondition |
final MetaTypeCondition | metaTypeCondition |
final MimeTypeCondition | mimeTypeCondition |
final ParentPathCondition | pathCondition |
final String | ruleName |
final String | uuid |
Static Private Attributes | |
static final long | serialVersionUID = 1L |
A set membership rule for an interesting files set. The immutability of a rule object allows it to be safely published to multiple threads.
Definition at line 272 of file FilesSet.java.
org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule | ( | String | ruleName, |
FileNameCondition | fileNameCondition, | ||
MetaTypeCondition | metaTypeCondition, | ||
ParentPathCondition | pathCondition, | ||
MimeTypeCondition | mimeTypeCondition, | ||
FileSizeCondition | fileSizeCondition, | ||
DateCondition | dateCondition, | ||
Boolean | exclusive | ||
) |
Construct an interesting files set membership rule.
ruleName | The name of the rule. Can be empty string. |
fileNameCondition | A file name condition, may be null. |
metaTypeCondition | A file meta-type condition. |
pathCondition | A file path condition, may be null. |
mimeTypeCondition | A file mime type condition, may be null. |
fileSizeCondition | A file size condition, may be null. |
dateCondition | A file date created or modified condition, may be null |
exclusive | Whether or not the rule excludes items matching the rule otherwise including them. |
Definition at line 300 of file FilesSet.java.
References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.dateCondition, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.exclusive, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileNameCondition, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileSizeCondition, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.metaTypeCondition, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.mimeTypeCondition, org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.pathCondition, and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ruleName.
DateCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getDateCondition | ( | ) |
Definition at line 383 of file FilesSet.java.
References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.dateCondition.
FileNameCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileNameCondition | ( | ) |
Get the file name condition for the rule.
Definition at line 361 of file FilesSet.java.
References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileNameCondition.
FileSizeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileSizeCondition | ( | ) |
Definition at line 454 of file FilesSet.java.
References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileSizeCondition.
MetaTypeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMetaTypeCondition | ( | ) |
Get the meta-type condition for the rule.
Definition at line 370 of file FilesSet.java.
References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.metaTypeCondition.
MimeTypeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMimeTypeCondition | ( | ) |
Definition at line 447 of file FilesSet.java.
References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.mimeTypeCondition.
String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getName | ( | ) |
Get the name of the rule.
Definition at line 352 of file FilesSet.java.
References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ruleName.
ParentPathCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getPathCondition | ( | ) |
Get the path condition for the rule.
Definition at line 379 of file FilesSet.java.
References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.pathCondition.
String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getUuid | ( | ) |
Definition at line 440 of file FilesSet.java.
References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.uuid.
boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.isExclusive | ( | ) |
Definition at line 392 of file FilesSet.java.
boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.isSatisfied | ( | AbstractFile | file | ) |
Determines whether or not a file satisfies the rule.
file | The file to test. |
Definition at line 403 of file FilesSet.java.
String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.toString | ( | ) |
Definition at line 417 of file FilesSet.java.
References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.getComparator(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.DateCondition.getDaysIncluded(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.MimeTypeCondition.getMimeType(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.SIZE_UNIT.getName(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.getSizeValue(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.COMPARATOR.getSymbol(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.AbstractTextCondition.getTextToMatch(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.getUnit().
|
private |
Definition at line 284 of file FilesSet.java.
|
private |
Definition at line 283 of file FilesSet.java.
Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getDateCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().
|
private |
Definition at line 277 of file FilesSet.java.
Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().
|
private |
Definition at line 278 of file FilesSet.java.
Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileNameCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().
|
private |
Definition at line 282 of file FilesSet.java.
Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileSizeCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().
|
private |
Definition at line 279 of file FilesSet.java.
Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMetaTypeCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().
|
private |
Definition at line 281 of file FilesSet.java.
Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMimeTypeCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().
|
private |
Definition at line 280 of file FilesSet.java.
Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getPathCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().
|
private |
Definition at line 276 of file FilesSet.java.
Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getName(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().
|
staticprivate |
Definition at line 274 of file FilesSet.java.
|
private |
Definition at line 275 of file FilesSet.java.
Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getUuid().
Copyright © 2012-2022 Basis Technology. Generated on: Tue Aug 1 2023
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.