org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener Class Reference

Inherits PropertyChangeListener.

Public Member Functions
void	propertyChange (PropertyChangeEvent evt)

Private Member Functions
boolean	shouldUpdateFilters (int attributeTypeId, ModuleDataEvent eventData, Set< BlackboardAttribute > filterSetToCheck) throws TskCoreException

Detailed Description

PropertyChangeListener to listen to ingest module events that may modify the filters available.

Definition at line 721 of file DiscoveryDialog.java.

Member Function Documentation

void org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener.propertyChange

(

PropertyChangeEvent

evt

)

("deprecation") - we need to support already existing interesting file and artifact hits.

Checking for a current case is a stop gap measure until a different way of handling the closing of cases is worked out. Currently, remote events may be received for a case that is already closed.

Even with the check above, it is still possible that the case will be closed in a different thread before this code executes. If that happens, it is possible for the event to have a null oldValue.

Definition at line 729 of file DiscoveryDialog.java.

References org.sleuthkit.autopsy.ingest.IngestManager.IngestModuleEvent.DATA_ADDED, org.sleuthkit.autopsy.ingest.ModuleDataEvent.getArtifacts(), org.sleuthkit.autopsy.ingest.ModuleDataEvent.getBlackboardArtifactType(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener.shouldUpdateFilters(), org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_DESCRIPTION, org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_HASHSET_HIT, org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_INTERESTING_ARTIFACT_HIT, org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT, org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_INTERESTING_ITEM, org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_OBJECT_DETECTED, and org::sleuthkit::datamodel::BlackboardAttribute::ATTRIBUTE_TYPE.TSK_SET_NAME.

boolean org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener.shouldUpdateFilters ( int  attributeTypeId, ModuleDataEvent  eventData, Set< BlackboardAttribute >  filterSetToCheck  ) throws TskCoreException

private

Helper method to determine if the artifact in the eventData represents a new value for the filter.

Parameters

attributeTypeId	The attribute id of the attribute which contains the value for the filter.
eventData	The event which contains the artifacts.
filterSetToCheck	The set of current values for the relevant filter.

Returns

True if the value is a new value for the filter, false otherwise.

Exceptions

TskCoreException

Thrown because the attributes were unable to be retrieved for one of the artifacts in the eventData.

Definition at line 785 of file DiscoveryDialog.java.

References org::sleuthkit::datamodel::BlackboardArtifact.getArtifacts().

Referenced by org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener.propertyChange().

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/discovery/ui/DiscoveryDialog.java