org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary Class Reference

Classes
class	DailyActivityAmount
interface	DataSourceFilterFunction
class	TimelineSummaryData

Public Member Functions
	TimelineSummary ()
	TimelineSummary (SleuthkitCaseProvider caseProvider, Supplier< TimeZone > timeZoneProvider, DataSourceFilterFunction filterFunction)
TimelineSummaryData	getTimelineSummaryData (DataSource dataSource, int recentDaysNum) throws SleuthkitCaseProviderException, TskCoreException

Static Public Member Functions
static String	formatDate (Date date, DateFormat formatter)
static DateFormat	getUtcFormat (String formatString)

Private Member Functions
List< DailyActivityAmount >	getMostRecentActivityAmounts (Map< Long, DailyActivityAmount > dateCounts, long minRecentDay, long maxDay)
Map< Long, DailyActivityAmount >	getTimelineEventsByDay (DataSource dataSource, TimelineManager timelineManager, TimeZone timeZone) throws TskCoreException, SleuthkitCaseProviderException

Private Attributes
final SleuthkitCaseProvider	caseProvider
final DataSourceFilterFunction	filterFunction
final Supplier< TimeZone >	timeZoneProvider

Static Private Attributes
static final long	DAY_SECS = 24 * 60 * 60
static final Set< TimelineEventType >	FILE_SYSTEM_EVENTS

Detailed Description

Provides data source summary information pertaining to Timeline data.

Definition at line 49 of file TimelineSummary.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary

(

)

Default constructor.

Definition at line 83 of file TimelineSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.DEFAULT, org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineDataSourceUtils.getDataSourceFilter(), org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineDataSourceUtils.getInstance(), and org.sleuthkit.autopsy.core.UserPreferences.getTimeZoneForDisplays().

org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary	(	SleuthkitCaseProvider	caseProvider,
		Supplier< TimeZone >	timeZoneProvider,
		DataSourceFilterFunction	filterFunction
	)

Construct object with given SleuthkitCaseProvider

Parameters

caseProvider	SleuthkitCaseProvider provider; cannot be null.
timeZoneProvider	The timezone provider; cannot be null.
filterFunction	Provides the default root filter function filtered to the data source; cannot be null.

Definition at line 97 of file TimelineSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.caseProvider, org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.filterFunction, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.timeZoneProvider.

Member Function Documentation

static String org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.formatDate ( Date  date, DateFormat  formatter  )

static

Formats a date using a DateFormat. In the event that the date is null, returns a null string.

Parameters

date	The date to format.
formatter	The DateFormat to use to format the date.

Returns

The formatted string generated from the formatter or null if the date is null.

Definition at line 343 of file TimelineSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.TimelinePanel.handleResult(), and org.sleuthkit.autopsy.datasourcesummary.ui.TimelinePanel.parseChartData().

List<DailyActivityAmount> org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getMostRecentActivityAmounts ( Map< Long, DailyActivityAmount >  dateCounts, long  minRecentDay, long  maxDay  )

private

Given activity by day, converts to most recent days' activity handling empty values.

Parameters

dateCounts	The day from epoch mapped to activity amounts for that day.
minRecentDay	The minimum recent day in days from epoch.
maxDay	The maximum recent day in days from epoch;

Returns

The most recent daily activity amounts.

Definition at line 159 of file TimelineSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineSummaryData().

Map<Long, DailyActivityAmount> org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineEventsByDay ( DataSource  dataSource, TimelineManager  timelineManager, TimeZone  timeZone  ) throws TskCoreException, SleuthkitCaseProviderException

private

Fetches timeline events per day for a particular data source.

Parameters

dataSource	The data source.
timelineManager	The timeline manager to use while fetching the data.
timeZone	The time zone to use to determine which day activity belongs.

Returns

A Map mapping days from epoch to the activity for that day.

Exceptions

TskCoreException

Definition at line 186 of file TimelineSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.DataSourceFilterFunction.apply(), org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.FILE_SYSTEM_EVENTS, org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.DailyActivityAmount.getArtifactActivityCount(), org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.DailyActivityAmount.getDay(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.DailyActivityAmount.getFileActivityCount().

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineSummaryData().

TimelineSummaryData org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineSummaryData	(	DataSource	dataSource,
		int	recentDaysNum
	)		throws SleuthkitCaseProviderException, TskCoreException

Retrieves timeline summary data.

Parameters

dataSource	The data source for which timeline data will be retrieved.
recentDaysNum	The maximum number of most recent days' activity to include.

Returns

The retrieved data.

Exceptions

SleuthkitCaseProviderException
TskCoreException

Definition at line 115 of file TimelineSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.get(), org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getMostRecentActivityAmounts(), org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineEventsByDay(), and org::sleuthkit::datamodel::SleuthkitCase.getTimelineManager().

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.TimelineSummaryGetter.getData().

static DateFormat org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getUtcFormat ( String  formatString )

static

Creates a DateFormat formatter that uses UTC for time zone.

Parameters

formatString

The date format string.

Returns

The data format.

Definition at line 329 of file TimelineSummary.java.

Member Data Documentation

final SleuthkitCaseProvider org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.caseProvider

private

Definition at line 76 of file TimelineSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary().

final long org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.DAY_SECS = 24 * 60 * 60

staticprivate

Definition at line 68 of file TimelineSummary.java.

final Set<TimelineEventType> org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.FILE_SYSTEM_EVENTS

staticprivate

Initial value:

= new HashSet<>(Arrays.asList(
                    TimelineEventType.FILE_MODIFIED,
                    TimelineEventType.FILE_ACCESSED,
                    TimelineEventType.FILE_CREATED,
                    TimelineEventType.FILE_CHANGED))

Definition at line 70 of file TimelineSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.getTimelineEventsByDay().

final DataSourceFilterFunction org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.filterFunction

private

Definition at line 78 of file TimelineSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary().

final Supplier<TimeZone> org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.timeZoneProvider

private

Definition at line 77 of file TimelineSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary.TimelineSummary().

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/datasourcesummary/datamodel/TimelineSummary.java