org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher Class Reference

Inherits org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeSearcher.

Inherited by org.sleuthkit.autopsy.commonpropertiessearch.AllIntraCaseCommonAttributeSearcher, and org.sleuthkit.autopsy.commonpropertiessearch.SingleIntraCaseCommonAttributeSearcher.

Public Member Functions
CommonAttributeCaseSearchResults	findMatchesByCase () throws TskCoreException, NoCurrentCaseException, SQLException, CentralRepoException
CommonAttributeCountSearchResults	findMatchesByCount () throws TskCoreException, NoCurrentCaseException, SQLException

Protected Member Functions
abstract String	buildSqlSelectStatement ()

Private Attributes
final Map< Long, String >	dataSourceIdToNameMap

Static Private Attributes
static final String	FILTER_BY_MIME_TYPES_WHERE_CLAUSE = " and mime_type in (%s)"

Detailed Description

Generates a List<CommonFilesMetadata> when findMatchesByCount() is called, which organizes files by md5 to prepare to display in viewer.

This entire thing runs on a background thread where exceptions are handled.

Definition at line 46 of file IntraCaseCommonAttributeSearcher.java.

Member Function Documentation

abstract String org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.buildSqlSelectStatement ( )

abstractprotected

Should build a SQL SELECT statement to be passed to SleuthkitCase.executeQuery(sql) which will select the desired file ids and MD5 hashes.

The statement should select obj_id, md5, data_source_obj_id in that order.

Returns

sql string select statement

CommonAttributeCaseSearchResults org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCase

(

)

throws TskCoreException, NoCurrentCaseException, SQLException, CentralRepoException

Definition at line 146 of file IntraCaseCommonAttributeSearcher.java.

CommonAttributeCountSearchResults org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCount

(

)

throws TskCoreException, NoCurrentCaseException, SQLException

Generate a meta data object which encapsulates everything need to add the tree table tab to the top component.

Returns

a data object with all of the matched files in a hierarchical format

Exceptions

TskCoreException
NoCurrentCaseException
SQLException

Definition at line 105 of file IntraCaseCommonAttributeSearcher.java.

References org::sleuthkit::datamodel::SleuthkitCase.executeQuery(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getDisplayName(), org::sleuthkit::datamodel::SleuthkitCase::CaseDbQuery.getResultSet(), and org::sleuthkit::datamodel::HashUtility.isNoDataMd5().

Member Data Documentation

final Map<Long, String> org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.dataSourceIdToNameMap

private

Definition at line 50 of file IntraCaseCommonAttributeSearcher.java.

final String org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.FILTER_BY_MIME_TYPES_WHERE_CLAUSE = " and mime_type in (%s)"

staticprivate

Definition at line 48 of file IntraCaseCommonAttributeSearcher.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/commonpropertiessearch/IntraCaseCommonAttributeSearcher.java