Autopsy
4.21.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits Comparator< Result >.
Classes | |
enum | SortingMethod |
Public Member Functions | |
ResultsSorter (SortingMethod method) | |
int | compare (Result result1, Result result2) |
Static Private Member Functions | |
static int | compareStrings (String s1, String s2) |
static Comparator< Result > | getDataSourceComparator () |
static Comparator< Result > | getDefaultComparator () |
static Comparator< Result > | getDomainNameComparator () |
static Comparator< Result > | getFileNameComparator () |
static Comparator< Result > | getFileSizeComparator () |
static Comparator< Result > | getFrequencyComparator () |
static Comparator< Result > | getKeywordListNameComparator () |
static Comparator< Result > | getLastActivityDateTimeComparator () |
static Comparator< Result > | getMIMETypeComparator () |
static Comparator< Result > | getPageViewComparator () |
static Comparator< Result > | getParentPathComparator () |
static Comparator< Result > | getTypeComparator () |
static Comparator< Result > | getWebDownloadsComparator () |
Private Attributes | |
final List< Comparator< Result > > | comparators = new ArrayList<>() |
Class used to sort Results using the supplied method.
Definition at line 32 of file ResultsSorter.java.
org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter | ( | SortingMethod | method | ) |
Set up the sorter using the supplied sorting method. The sorting is defined by a list of Result comparators. These comparators will be run in order until one returns a non-zero result.
method | The method that should be used to sort the results. |
Definition at line 43 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.ResultsSorter.getDataSourceComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getDefaultComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getDomainNameComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getFileNameComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getFileSizeComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getFrequencyComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getKeywordListNameComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getLastActivityDateTimeComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getMIMETypeComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getPageViewComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getParentPathComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getTypeComparator(), and org.sleuthkit.autopsy.discovery.search.ResultsSorter.getWebDownloadsComparator().
Definition at line 92 of file ResultsSorter.java.
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.getParentPathComparator().
|
staticprivate |
Compare two strings alphabetically. Nulls are allowed.
s1 | |
s2 |
Definition at line 354 of file ResultsSorter.java.
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.getDomainNameComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getFileNameComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getKeywordListNameComparator(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getMIMETypeComparator(), and org.sleuthkit.autopsy.discovery.search.ResultsSorter.getParentPathComparator().
|
staticprivate |
Compare results using data source ID. Will order smallest to largest.
Definition at line 112 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.Result.getDataSourceObjectId().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
A final default comparison between two ResultFile objects. Currently this is on file name and then object ID. It can be changed but should always include something like the object ID to ensure a consistent sorting when the rest of the compared fields are the same.
Definition at line 328 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.SearchData.Type.DOMAIN, org.sleuthkit.autopsy.discovery.search.ResultsSorter.getFileNameComparator(), org.sleuthkit.autopsy.discovery.search.ResultFile.getFirstInstance(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.getFrequencyComparator(), org::sleuthkit::datamodel::AbstractContent.getId(), and org.sleuthkit.autopsy.discovery.search.Result.getType().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
Sorts domain names in lexographical order, ignoring case.
Definition at line 249 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.ResultsSorter.compareStrings(), org.sleuthkit.autopsy.discovery.search.SearchData.Type.DOMAIN, org.sleuthkit.autopsy.discovery.search.ResultDomain.getDomain(), and org.sleuthkit.autopsy.discovery.search.Result.getType().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
Compare files based on file name. Order alphabetically.
Definition at line 235 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.ResultsSorter.compareStrings(), org.sleuthkit.autopsy.discovery.search.SearchData.Type.DOMAIN, and org.sleuthkit.autopsy.discovery.search.Result.getType().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.getDefaultComparator(), and org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
Compare files based on size. Order large to small.
Definition at line 221 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.SearchData.Type.DOMAIN, and org.sleuthkit.autopsy.discovery.search.Result.getType().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
Compare results based on number of occurrences in the central repository. Order from most rare to least rare Frequency enum.
Definition at line 197 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.Result.getFrequency().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.getDefaultComparator(), and org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
Compare files using a concatenated version of keyword list names. Alphabetical by the list names with files with no keyword list hits going last.
Definition at line 134 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.ResultsSorter.compareStrings(), org.sleuthkit.autopsy.discovery.search.SearchData.Type.DOMAIN, org.sleuthkit.autopsy.discovery.search.ResultFile.getKeywordListNames(), and org.sleuthkit.autopsy.discovery.search.Result.getType().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
Sorts result domains by last activity date time. The results will be in descending order.
Definition at line 286 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.SearchData.Type.DOMAIN, org.sleuthkit.autopsy.discovery.search.ResultDomain.getActivityEnd(), and org.sleuthkit.autopsy.discovery.search.Result.getType().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
Compare files based on MIME type. Order is alphabetical.
Definition at line 207 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.ResultsSorter.compareStrings(), org.sleuthkit.autopsy.discovery.search.SearchData.Type.DOMAIN, and org.sleuthkit.autopsy.discovery.search.Result.getType().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
Sorts domains by page view count.
This comparator sorts results in descending order (largest -> smallest).
Definition at line 266 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.SearchData.Type.DOMAIN, org.sleuthkit.autopsy.discovery.search.ResultDomain.getTotalPageViews(), and org.sleuthkit.autopsy.discovery.search.Result.getType().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
Compare files based on parent path. Order alphabetically.
Definition at line 163 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.ResultsSorter.compare(), org.sleuthkit.autopsy.discovery.search.ResultsSorter.compareStrings(), org.sleuthkit.autopsy.discovery.search.SearchData.Type.DOMAIN, org.sleuthkit.autopsy.discovery.search.ResultFile.getFirstInstance(), org::sleuthkit::datamodel::AbstractContent.getParent(), org::sleuthkit::datamodel::AbstractFile.getParentPath(), org.sleuthkit.autopsy.discovery.search.Result.getType(), and org::sleuthkit::datamodel::Content.getUniquePath().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
Compare results using their Type enum. Orders based on the ranking in the Type enum.
Definition at line 122 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.Result.getType().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
staticprivate |
Sorts result domains by most file downloads. The results will be in descending order.
Definition at line 305 of file ResultsSorter.java.
References org.sleuthkit.autopsy.discovery.search.SearchData.Type.DOMAIN, org.sleuthkit.autopsy.discovery.search.ResultDomain.getFilesDownloaded(), and org.sleuthkit.autopsy.discovery.search.Result.getType().
Referenced by org.sleuthkit.autopsy.discovery.search.ResultsSorter.ResultsSorter().
|
private |
Definition at line 34 of file ResultsSorter.java.
Copyright © 2012-2024 Sleuth Kit Labs. Generated on: Mon Mar 17 2025
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.