Autopsy  4.21.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Protected Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher Class Referenceabstract

Inherits org.sleuthkit.autopsy.commonpropertiessearch.AbstractCommonAttributeSearcher.

Inherited by org.sleuthkit.autopsy.commonpropertiessearch.AllIntraCaseCommonAttributeSearcher, and org.sleuthkit.autopsy.commonpropertiessearch.SingleIntraCaseCommonAttributeSearcher.

Public Member Functions

CommonAttributeCaseSearchResults findMatchesByCase () throws TskCoreException, NoCurrentCaseException, SQLException, CentralRepoException
CommonAttributeCountSearchResults findMatchesByCount () throws TskCoreException, NoCurrentCaseException, SQLException

Protected Member Functions

abstract String buildSqlSelectStatement ()

Private Attributes

final Map< Long, String > dataSourceIdToNameMap

Static Private Attributes

static final String FILTER_BY_MIME_TYPES_WHERE_CLAUSE = " and mime_type in (%s)"

Detailed Description

Generates a List<CommonFilesMetadata> when findMatchesByCount() is called, which organizes files by md5 to prepare to display in viewer.

This entire thing runs on a background thread where exceptions are handled.

Definition at line 46 of file

Member Function Documentation

abstract String org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.buildSqlSelectStatement ( )

Should build a SQL SELECT statement to be passed to SleuthkitCase.executeQuery(sql) which will select the desired file ids and MD5 hashes.

The statement should select obj_id, md5, data_source_obj_id in that order.

sql string select statement
CommonAttributeCaseSearchResults org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCase ( ) throws TskCoreException, NoCurrentCaseException, SQLException, CentralRepoException

Definition at line 146 of file

CommonAttributeCountSearchResults org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.findMatchesByCount ( ) throws TskCoreException, NoCurrentCaseException, SQLException

Generate a meta data object which encapsulates everything need to add the tree table tab to the top component.

a data object with all of the matched files in a hierarchical format

Definition at line 105 of file

References org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.casemodule.Case.getDisplayName().

Member Data Documentation

final Map<Long, String> org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.dataSourceIdToNameMap

Definition at line 50 of file

final String org.sleuthkit.autopsy.commonpropertiessearch.IntraCaseCommonAttributeSearcher.FILTER_BY_MIME_TYPES_WHERE_CLAUSE = " and mime_type in (%s)"

Definition at line 48 of file

The documentation for this class was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Tue Feb 6 2024
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.