Inherits org.sleuthkit.autopsy.datamodel.AutopsyVisitableItem.

Classes
class	ScoreArtifactNode

enum	ScoreContentFilter

class	ScoreContentsChildren

class	ScoreContentsNode

class	ScoreFileNode

Public Member Functions
	ScoreContent (SleuthkitCase skCase)

	ScoreContent (SleuthkitCase skCase, long dsObjId)

SleuthkitCase	getSleuthkitCase ()

Static Private Member Functions
static Sheet	createScoreSheet (String type, String path, Long time)

static String	getDataArtifactFilter (ScoreContent.ScoreContentFilter filter, long filteringDsObjId) throws IllegalArgumentException

static String	getFileFilter (ScoreContent.ScoreContentFilter filter, long filteringDsObjId) throws IllegalArgumentException

static String	getFilter (ScoreContent.ScoreContentFilter filter, String objIdAlias, String dsIdAlias, long filteringDSObjId) throws IllegalArgumentException

static PropertyChangeListener	getPcl (final Runnable onRefresh, final Runnable onRemove)

static String	getScoreFilter (ScoreContentFilter filter) throws IllegalArgumentException

static boolean	isRefreshRequired (PropertyChangeEvent evt)

Private Attributes
final long	filteringDSObjId

SleuthkitCase	skCase

Static Private Attributes
static final Set< Case.Events >	CASE_EVENTS_OF_INTEREST

static final Set< String >	CASE_EVENTS_OF_INTEREST_STRS

static final String	DATE_PROP = "Created Date"

static final Set< IngestManager.IngestJobEvent >	INGEST_JOB_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestJobEvent.COMPLETED, IngestManager.IngestJobEvent.CANCELLED)

static final Set< IngestManager.IngestModuleEvent >	INGEST_MODULE_EVENTS_OF_INTEREST = EnumSet.of(IngestModuleEvent.CONTENT_CHANGED)

static final String	PATH_PROP = "Path"

static final String	SOURCE_PROP = "Source"

static final String	TYPE_PROP = "Type"

Detailed Description

Score content view nodes.

Definition at line 81 of file ScoreContent.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContent ( SleuthkitCase skCase )

Constructor assuming no data source filtering.

Parameters

skCase The sleuthkit case.

Definition at line 129 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.skCase.

org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContent	(	SleuthkitCase	skCase,
		long	dsObjId
	)

Constructor.

Parameters

skCase	The sleuthkit case.
dsObjId	The data source object id to filter on if > 0.

Definition at line 139 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.skCase.

Member Function Documentation

static Sheet org.sleuthkit.autopsy.datamodel.ScoreContent.createScoreSheet	(	String	type,
		String	path,
		Long	time
	)

staticprivate

Definition at line 688 of file ScoreContent.java.

References org.sleuthkit.autopsy.coreutils.TimeZoneUtils.getFormattedTime().

static String org.sleuthkit.autopsy.datamodel.ScoreContent.getDataArtifactFilter	(	ScoreContent.ScoreContentFilter	filter,
		long	filteringDsObjId
	)		throws IllegalArgumentException

staticprivate

Returns a sql where statement for files.

Parameters

filter	The filter type.
filteringDSObjId	The data source object id to filter on if > 0.

Returns: The sql where statement.

Exceptions

IllegalArgumentException

Definition at line 276 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.getFilter().

static String org.sleuthkit.autopsy.datamodel.ScoreContent.getFileFilter	(	ScoreContent.ScoreContentFilter	filter,
		long	filteringDsObjId
	)		throws IllegalArgumentException

staticprivate

Returns a sql where statement for files.

Parameters

filter	The filter type.
filteringDSObjId	The data source object id to filter on if > 0.

Returns: The sql where statement.

Exceptions

IllegalArgumentException

Definition at line 264 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.getFilter().

static String org.sleuthkit.autopsy.datamodel.ScoreContent.getFilter	(	ScoreContent.ScoreContentFilter	filter,
		String	objIdAlias,
		String	dsIdAlias,
		long	filteringDSObjId
	)		throws IllegalArgumentException

staticprivate

The sql where statement for the content.

Parameters

filter	The filter type.
objIdAlias	The alias for the object id of the content. Must be sql safe.
dsIdAlias	The alias for the data source id. Must be sql safe.
filteringDSObjId	The data source object id to filter on if > 0.

Returns: The sql where statement.

Exceptions

IllegalArgumentException

Definition at line 233 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.filteringDSObjId, and org.sleuthkit.autopsy.datamodel.ScoreContent.getScoreFilter().

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.getDataArtifactFilter(), and org.sleuthkit.autopsy.datamodel.ScoreContent.getFileFilter().

static PropertyChangeListener org.sleuthkit.autopsy.datamodel.ScoreContent.getPcl	(	final Runnable	onRefresh,
		final Runnable	onRemove
	)

staticprivate

Returns a property change listener listening for possible updates to aggregate score updates for files.

Parameters

onRefresh	Action on refresh.
onRemove	Action to remove listener (i.e. case close).

Returns: The property change listener.

Case is closed, do nothing.

Definition at line 186 of file ScoreContent.java.

References org.sleuthkit.autopsy.ingest.IngestManager.IngestModuleEvent.CONTENT_CHANGED, org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, and org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows().

static String org.sleuthkit.autopsy.datamodel.ScoreContent.getScoreFilter ( ScoreContentFilter filter ) throws IllegalArgumentException

staticprivate

Definition at line 243 of file ScoreContent.java.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.ScoreContentNode.calculateItems(), and org.sleuthkit.autopsy.datamodel.ScoreContent.getFilter().

SleuthkitCase org.sleuthkit.autopsy.datamodel.ScoreContent.getSleuthkitCase ( )

Returns: The sleuthkit case used.

Definition at line 159 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.skCase.

static boolean org.sleuthkit.autopsy.datamodel.ScoreContent.isRefreshRequired ( PropertyChangeEvent evt )

staticprivate

Checks for analysis results added to the case that could affect the aggregate score of the file.

Parameters

evt	The event.

Returns: True if has an analysis result.

Case is closed, do nothing.

Definition at line 287 of file ScoreContent.java.

References org.sleuthkit.autopsy.ingest.IngestManager.IngestModuleEvent.DATA_ADDED, and org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows().

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.isRefreshRequired().

Member Data Documentation

final Set<Case.Events> org.sleuthkit.autopsy.datamodel.ScoreContent.CASE_EVENTS_OF_INTEREST

staticprivate

Initial value:

= EnumSet.of(
            Case.Events.DATA_SOURCE_ADDED,
            Case.Events.CURRENT_CASE,
            Case.Events.CONTENT_TAG_ADDED,
            Case.Events.CONTENT_TAG_DELETED,
            Case.Events.BLACKBOARD_ARTIFACT_TAG_ADDED,
            Case.Events.BLACKBOARD_ARTIFACT_TAG_DELETED
    )

Definition at line 163 of file ScoreContent.java.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.addNotify(), and org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.removeNotify().

final Set<String> org.sleuthkit.autopsy.datamodel.ScoreContent.CASE_EVENTS_OF_INTEREST_STRS

staticprivate

Initial value:

= CASE_EVENTS_OF_INTEREST.stream()
            .map(evt -> evt.name())
            .collect(Collectors.toSet())

Definition at line 171 of file ScoreContent.java.

final String org.sleuthkit.autopsy.datamodel.ScoreContent.DATE_PROP = "Created Date"

staticprivate

Definition at line 686 of file ScoreContent.java.

final long org.sleuthkit.autopsy.datamodel.ScoreContent.filteringDSObjId

private

Definition at line 84 of file ScoreContent.java.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.getFilter().

final Set<IngestManager.IngestJobEvent> org.sleuthkit.autopsy.datamodel.ScoreContent.INGEST_JOB_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestJobEvent.COMPLETED, IngestManager.IngestJobEvent.CANCELLED)

staticprivate

Definition at line 175 of file ScoreContent.java.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.addNotify(), and org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.removeNotify().

final Set<IngestManager.IngestModuleEvent> org.sleuthkit.autopsy.datamodel.ScoreContent.INGEST_MODULE_EVENTS_OF_INTEREST = EnumSet.of(IngestModuleEvent.CONTENT_CHANGED)

staticprivate

Definition at line 176 of file ScoreContent.java.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.addNotify(), and org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.removeNotify().

final String org.sleuthkit.autopsy.datamodel.ScoreContent.PATH_PROP = "Path"

staticprivate

Definition at line 685 of file ScoreContent.java.

SleuthkitCase org.sleuthkit.autopsy.datamodel.ScoreContent.skCase

private

Definition at line 83 of file ScoreContent.java.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.getSleuthkitCase(), and org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContent().

final String org.sleuthkit.autopsy.datamodel.ScoreContent.SOURCE_PROP = "Source"

staticprivate

Definition at line 683 of file ScoreContent.java.

final String org.sleuthkit.autopsy.datamodel.ScoreContent.TYPE_PROP = "Type"

staticprivate

Definition at line 684 of file ScoreContent.java.

The documentation for this class was generated from the following file:

/home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/datamodel/ScoreContent.java

Classes

Public Member Functions

Static Private Member Functions

Private Attributes

Static Private Attributes

Detailed Description

Constructor & Destructor Documentation

Member Function Documentation

Member Data Documentation