Autopsy  4.21.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent Class Reference

Public Member Functions

 CombinedEvent (long epochMillis, Map< TimelineEventType, Long > eventMap)
boolean equals (Object obj)
Set< Long > getEventIDs ()
Set< TimelineEventType > getEventTypes ()
Long getRepresentativeEventID ()
long getStartMillis ()
int hashCode ()

Private Attributes

final long epochMillis
final Map< TimelineEventType, Long > eventTypeMap = new HashMap<>()

Detailed Description

A container for several events that have the same timestamp and description and are backed by the same file. Used in the ListView to coalesce the file system events for a file when they have the same timestamp.

Definition at line 34 of file

Constructor & Destructor Documentation

org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.CombinedEvent ( long  epochMillis,
Map< TimelineEventType, Long >  eventMap 


epochMillisThe timestamp for this event, in millis from the Unix epoch.
eventMapA map from EventType to event ID.

Definition at line 50 of file

References org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.epochMillis.

Referenced by org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.equals().

Member Function Documentation

boolean org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.equals ( Object  obj)
Set<Long> org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.getEventIDs ( )

Get the event IDs of the combined events.

The event IDs of the combined events.

Definition at line 79 of file

Set<TimelineEventType> org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.getEventTypes ( )

Get the types of the combined events.

The types of the combined events.

Definition at line 70 of file

Referenced by org.sleuthkit.autopsy.timeline.ui.listvew.ListTimeline.EventTypeCell.updateItem().

Long org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.getRepresentativeEventID ( )

Get the event ID of one event that is representative of all the combined events. It can be used to look up a TimelineEvent with more details, for example: whether the file is tagged or a hash hit.

An arbitrary representative event ID for the combined events.

Definition at line 90 of file

Referenced by org.sleuthkit.autopsy.timeline.ui.listvew.ListTimeline.EventTableCell.updateItem(), and org.sleuthkit.autopsy.timeline.ui.listvew.ListTimeline.EventRow.updateItem().

long org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.getStartMillis ( )

Get the timestamp of this event as millis from the Unix epoch.

The timestamp of this event as millis from the Unix epoch.

Definition at line 61 of file

References org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.epochMillis.

int org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.hashCode ( )

Definition at line 95 of file

Member Data Documentation

final long org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.epochMillis
final Map<TimelineEventType, Long> org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.eventTypeMap = new HashMap<>()

A map from EventType to event ID.

Definition at line 41 of file

Referenced by org.sleuthkit.autopsy.timeline.ui.listvew.datamodel.CombinedEvent.equals().

The documentation for this class was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Tue Feb 6 2024
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.