Autopsy  4.21.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Protected Attributes | Private Attributes | List of all members
org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance Class Referenceabstract

Inherited by org.sleuthkit.autopsy.commonpropertiessearch.CaseDBCommonAttributeInstance, and org.sleuthkit.autopsy.commonpropertiessearch.CentralRepoCommonAttributeInstance.



Public Member Functions

Long getAbstractFileObjectId ()
abstract CorrelationAttributeInstance.Type getCorrelationAttributeInstanceType ()
String getDataSource ()

Protected Attributes

AbstractFile abstractFile

Private Attributes

final Long abstractFileObjectId
final String caseName
final String dataSource

Detailed Description

Represents an instance in either the CaseDB or CR that had a common match. Different implementations know how to get the instance details from either CaseDB or CR.

Defines leaf-type nodes used in the Common Files Search results tree. Leaf nodes, may describe common attributes which exist in the current case DB or in the Central Repo. When a reference to the AbstractFile is lacking (such as in the case that a common attribute is found in the Central Repo) not all features of the Content Viewer, and context menu can be supported. Thus, multiple types of leaf nodes are required to represent Common Attribute Instance nodes.

Definition at line 40 of file

Member Function Documentation

Long org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.getAbstractFileObjectId ( )

ObjectId of the AbstractFile that is equivalent to the file from which this common attribute instance

the abstractFileObjectId

Definition at line 128 of file

References org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.abstractFileObjectId.

abstract CorrelationAttributeInstance.Type org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.getCorrelationAttributeInstanceType ( )

Get the type of common attribute.

String org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.getDataSource ( )

Get string name of the data source where this common attribute appears.

data source name

Even though we could get this from the CR record or the AbstractFile, we want to avoid getting it from the AbstractFile because it would be an extra database roundtrip.

Definition at line 112 of file

References org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.dataSource.

Referenced by org.sleuthkit.autopsy.commonpropertiessearch.CaseDBCommonAttributeInstance.generateNodes().

Member Data Documentation

AbstractFile org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.abstractFile

Definition at line 48 of file

final Long org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.abstractFileObjectId
final String org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.caseName

Definition at line 43 of file

final String org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeInstance.dataSource

The documentation for this class was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Tue Feb 6 2024
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.