Autopsy  4.21.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Private Member Functions | List of all members
org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener Class Reference

Inherits PropertyChangeListener.

Public Member Functions

void propertyChange (PropertyChangeEvent evt)

Private Member Functions

boolean shouldUpdateFilters (int attributeTypeId, ModuleDataEvent eventData, Set< BlackboardAttribute > filterSetToCheck) throws TskCoreException

Detailed Description

PropertyChangeListener to listen to ingest module events that may modify the filters available.

Definition at line 721 of file

Member Function Documentation

void org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener.propertyChange ( PropertyChangeEvent  evt)

("deprecation") - we need to support already existing interesting file and artifact hits.

Checking for a current case is a stop gap measure until a different way of handling the closing of cases is worked out. Currently, remote events may be received for a case that is already closed.

Even with the check above, it is still possible that the case will be closed in a different thread before this code executes. If that happens, it is possible for the event to have a null oldValue.

Definition at line 729 of file

References org.sleuthkit.autopsy.ingest.IngestManager.IngestModuleEvent.DATA_ADDED, org.sleuthkit.autopsy.ingest.ModuleDataEvent.getArtifacts(), org.sleuthkit.autopsy.ingest.ModuleDataEvent.getBlackboardArtifactType(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), and org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener.shouldUpdateFilters().

boolean org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener.shouldUpdateFilters ( int  attributeTypeId,
ModuleDataEvent  eventData,
Set< BlackboardAttribute >  filterSetToCheck 
) throws TskCoreException

Helper method to determine if the artifact in the eventData represents a new value for the filter.

attributeTypeIdThe attribute id of the attribute which contains the value for the filter.
eventDataThe event which contains the artifacts.
filterSetToCheckThe set of current values for the relevant filter.
True if the value is a new value for the filter, false otherwise.
TskCoreExceptionThrown because the attributes were unable to be retrieved for one of the artifacts in the eventData.

Definition at line 785 of file

Referenced by org.sleuthkit.autopsy.discovery.ui.DiscoveryDialog.ModuleChangeListener.propertyChange().

The documentation for this class was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Tue Feb 6 2024
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.