Autopsy  4.21.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Attributes | List of all members
org.sleuthkit.autopsy.casemodule.Case.Events Enum Reference

Public Attributes

 ADDING_DATA_SOURCE
 
 ADDING_DATA_SOURCE_FAILED
 
 BLACKBOARD_ARTIFACT_TAG_ADDED
 
 BLACKBOARD_ARTIFACT_TAG_DELETED
 
 CASE_DETAILS
 
 CONTENT_TAG_ADDED
 
 CONTENT_TAG_DELETED
 
 CR_COMMENT_CHANGED
 
 CURRENT_CASE
 
 DATA_SOURCE_ADDED
 
 DATA_SOURCE_DELETED
 
 DATA_SOURCE_NAME_CHANGED
 
 EXAMINER
 
 HOSTS_ADDED
 
 HOSTS_ADDED_TO_PERSON
 
 HOSTS_DELETED
 
 HOSTS_REMOVED_FROM_PERSON
 
 HOSTS_UPDATED
 
 NAME
 
 NUMBER
 
 OS_ACCOUNTS_ADDED
 
 OS_ACCOUNTS_DELETED
 
 OS_ACCOUNTS_UPDATED
 
 OS_ACCT_INSTANCES_ADDED
 
 PERSONS_ADDED
 
 PERSONS_DELETED
 
 PERSONS_UPDATED
 
 REPORT_ADDED
 
 REPORT_DELETED
 
 TAG_DEFINITION_CHANGED
 
 TAG_NAMES_ADDED
 
 TAG_NAMES_DELETED
 
 TAG_NAMES_UPDATED
 
 TAG_SETS_ADDED
 
 TIMELINE_EVENT_ADDED
 

Detailed Description

An enumeration of the case events (property change events) a case may publish (fire).

Definition at line 299 of file Case.java.

Member Data Documentation

org.sleuthkit.autopsy.casemodule.Case.Events.ADDING_DATA_SOURCE

An attempt to add a new data source to the current case is being made. The old and new values of the PropertyChangeEvent are null. Cast the PropertyChangeEvent to org.sleuthkit.autopsy.casemodule.events.AddingDataSourceEvent to access additional event data.

Definition at line 335 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.AddingDataSourceEvent.AddingDataSourceEvent(), and org.sleuthkit.autopsy.casemodule.CollaborationMonitor.LocalTasksManager.propertyChange().

org.sleuthkit.autopsy.casemodule.Case.Events.ADDING_DATA_SOURCE_FAILED

A failure to add a new data source to the current case has occurred. The old and new values of the PropertyChangeEvent are null. Cast the PropertyChangeEvent to org.sleuthkit.autopsy.casemodule.events.AddingDataSourceFailedEvent to access additional event data.

Definition at line 343 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.AddingDataSourceFailedEvent.AddingDataSourceFailedEvent(), and org.sleuthkit.autopsy.casemodule.CollaborationMonitor.LocalTasksManager.propertyChange().

org.sleuthkit.autopsy.casemodule.Case.Events.BLACKBOARD_ARTIFACT_TAG_ADDED

An artifact associated with the current case has been tagged. The old value of the PropertyChangeEvent is null, the new value is the tag (type: BlackBoardArtifactTag).

Definition at line 398 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.BlackBoardArtifactTagAddedEvent.BlackBoardArtifactTagAddedEvent(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ArtifactTagTask.run().

org.sleuthkit.autopsy.casemodule.Case.Events.BLACKBOARD_ARTIFACT_TAG_DELETED

A tag has been removed from an artifact associated with the current case. The old value of the PropertyChangeEvent is the tag info (type: BlackBoardArtifactTagDeletedEvent.DeletedBlackboardArtifactTagInfo), the new value is null.

Definition at line 405 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.BlackBoardArtifactTagDeletedEvent.BlackBoardArtifactTagDeletedEvent(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ArtifactTagTask.run().

org.sleuthkit.autopsy.casemodule.Case.Events.CASE_DETAILS

The case display name or an optional detail which can be provided regarding a case has been changed. The optional details include the case number, the examiner name, examiner phone, examiner email, and the case notes.

Definition at line 424 of file Case.java.

org.sleuthkit.autopsy.casemodule.Case.Events.CONTENT_TAG_ADDED

Content associated with the current case has been tagged. The old value of the PropertyChangeEvent is null, the new value is the tag (type: ContentTag).

Definition at line 411 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.ContentTagAddedEvent.ContentTagAddedEvent(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.run().

org.sleuthkit.autopsy.casemodule.Case.Events.CONTENT_TAG_DELETED

A tag has been removed from content associated with the current case. The old value of the PropertyChangeEvent is is the tag info (type: ContentTagDeletedEvent.DeletedContentTagInfo), the new value is null.

Definition at line 417 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.ContentTagDeletedEvent.ContentTagDeletedEvent(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.ContentTagTask.run().

org.sleuthkit.autopsy.casemodule.Case.Events.CR_COMMENT_CHANGED
org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE

The current case has changed.

If a new case has been opened as the current case, the old value of the PropertyChangeEvent is null, and the new value is the new case (type: Case).

If the current case has been closed, the old value of the PropertyChangeEvent is the closed case (type: Case), and the new value is null. IMPORTANT: Subscribers to this event should not call isCaseOpen or getCurrentCase in the interval between a case closed event and a case opened event. If there is any need for upon closing interaction with a closed case, the case in the old value should be used, and it should be done synchronously in the CURRENT_CASE event handler.

Definition at line 380 of file Case.java.

Referenced by org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNodeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.MalwareHits.MalwareResults.addNotify(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.addNotify(), org.sleuthkit.autopsy.communications.VisualizationPanel.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ViewModeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.addNotify(), org.sleuthkit.autopsy.datasourcesummary.ui.DataSourceSummaryTabbedPane.close(), org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.communications.ContactCache.ContactCache(), com.basistech.df.cybertriage.autopsy.incidentoptions.CTIncidentImportOptionsPanel.CTIncidentImportOptionsPanel(), org.sleuthkit.autopsy.datasourcesummary.ui.DataSourceSummaryTabbedPane.DataSourceSummaryTabbedPane(), org.sleuthkit.autopsy.keywordsearch.ExtractedTextViewer.ExtractedTextViewer(), org.sleuthkit.autopsy.filesearch.FileSearchAction.FileSearchAction(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.FileTypesByExtObservable(), org.sleuthkit.autopsy.datamodel.OsAccounts.OsAccountNodeFactory.finalize(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.finalize(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.finalize(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountTypeFactory.finalize(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.DefaultAccountFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.ViewModeFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.FileWithCCNFactory.finalize(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.BINFactory.finalize(), org.sleuthkit.autopsy.datamodel.ScoreContent.getPcl(), org.sleuthkit.autopsy.centralrepository.optionspanel.GlobalSettingsPanel.GlobalSettingsPanel(), org.sleuthkit.autopsy.datamodel.ImageNode.ImageNode(), org.sleuthkit.autopsy.corecomponents.MultiUserSettingsPanel.MultiUserSettingsPanel(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), org.sleuthkit.autopsy.communications.OpenCommVisualizationToolAction.OpenCommVisualizationToolAction(), org.sleuthkit.autopsy.geolocation.OpenGeolocationAction.OpenGeolocationAction(), org.sleuthkit.autopsy.keywordsearch.DropdownToolbar.SearchSettingsChangeListener.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), org.sleuthkit.autopsy.datamodel.ImageNode.removeListeners(), org.sleuthkit.autopsy.datamodel.VolumeNode.removeListeners(), org.sleuthkit.autopsy.datamodel.MalwareHits.MalwareResults.removeNotify(), org.sleuthkit.autopsy.report.infrastructure.ReportWizardAction.ReportWizardAction(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToCaseEvents(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.subscribeToChangeEvents(), org.sleuthkit.autopsy.corecomponents.ViewPreferencesPanel.ViewPreferencesPanel(), and org.sleuthkit.autopsy.datamodel.VolumeNode.VolumeNode().

org.sleuthkit.autopsy.casemodule.Case.Events.DATA_SOURCE_ADDED
org.sleuthkit.autopsy.casemodule.Case.Events.DATA_SOURCE_DELETED

A data source has been deleted from the current case. The old value of the PropertyChangeEvent is the object id of the data source that was deleted (type: Long), the new value is null.

Definition at line 358 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.DataSourceDeletedEvent.DataSourceDeletedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.DATA_SOURCE_NAME_CHANGED

A data source's name has changed. The new value of the property change event is the new name.

Definition at line 363 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.DataSourceNameChangedEvent.DataSourceNameChangedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.EXAMINER

The examiner associated with the current case has changed. The old value of the PropertyChangeEvent is the old examiner (type: String), the new value is the new examiner (type: String).

Deprecated:
CASE_DETAILS event should be used instead

Definition at line 327 of file Case.java.

org.sleuthkit.autopsy.casemodule.Case.Events.HOSTS_ADDED

One or more hosts have been added to the case.

Definition at line 461 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.HostsAddedEvent.HostsAddedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.HOSTS_ADDED_TO_PERSON

One or more hosts have been added to a person.

Definition at line 485 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.HostsAddedToPersonEvent.HostsAddedToPersonEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.HOSTS_DELETED
org.sleuthkit.autopsy.casemodule.Case.Events.HOSTS_REMOVED_FROM_PERSON

One or more hosts have been removed from a person.

Definition at line 489 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.HostsRemovedFromPersonEvent.HostsRemovedFromPersonEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.HOSTS_UPDATED

One or more hosts in the case have been updated.

Definition at line 465 of file Case.java.

Referenced by org.sleuthkit.autopsy.datamodel.HostNode.HostNode(), and org.sleuthkit.autopsy.casemodule.events.HostsUpdatedEvent.HostsUpdatedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.NAME

The name of the current case has changed. The old value of the PropertyChangeEvent is the old case name (type: String), the new value is the new case name (type: String).

Deprecated:
CASE_DETAILS event should be used instead

Definition at line 309 of file Case.java.

org.sleuthkit.autopsy.casemodule.Case.Events.NUMBER

The number of the current case has changed. The old value of the PropertyChangeEvent is the old case number (type: String), the new value is the new case number (type: String).

Deprecated:
CASE_DETAILS event should be used instead

Definition at line 318 of file Case.java.

org.sleuthkit.autopsy.casemodule.Case.Events.OS_ACCOUNTS_ADDED
org.sleuthkit.autopsy.casemodule.Case.Events.OS_ACCOUNTS_DELETED
org.sleuthkit.autopsy.casemodule.Case.Events.OS_ACCOUNTS_UPDATED

One or more OS accounts in the case have been updated.

Definition at line 449 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.OsAccountsUpdatedEvent.OsAccountsUpdatedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.OS_ACCT_INSTANCES_ADDED

One or more OS account instances have been added to the case.

Definition at line 457 of file Case.java.

org.sleuthkit.autopsy.casemodule.Case.Events.PERSONS_ADDED

One or more persons have been added to the case.

Definition at line 473 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.PersonsAddedEvent.PersonsAddedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.PERSONS_DELETED

One or more persons been deleted from the case.

Definition at line 481 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.PersonsDeletedEvent.PersonsDeletedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.PERSONS_UPDATED

One or more persons in the case have been updated.

Definition at line 477 of file Case.java.

Referenced by org.sleuthkit.autopsy.datamodel.PersonNode.PersonNode(), and org.sleuthkit.autopsy.casemodule.events.PersonsUpdatedEvent.PersonsUpdatedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.REPORT_ADDED

A report has been added to the current case. The old value of the PropertyChangeEvent is null, the new value is the report (type: Report).

Definition at line 386 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.ReportAddedEvent.ReportAddedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.REPORT_DELETED

A report has been deleted from the current case. The old value of the PropertyChangeEvent is the report (type: Report), the new value is null.

Definition at line 392 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteReports().

org.sleuthkit.autopsy.casemodule.Case.Events.TAG_DEFINITION_CHANGED

A tag definition has changed (e.g., description, known status). The old value of the PropertyChangeEvent is the display name of the tag definition that has changed.

Definition at line 430 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.Case.notifyTagDefinitionChanged().

org.sleuthkit.autopsy.casemodule.Case.Events.TAG_NAMES_ADDED

One or more TagNames have been added.

Definition at line 494 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.TagNamesEvent.TagNamesAddedEvent.TagNamesAddedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.TAG_NAMES_DELETED

One or more TagNames have been deleted.

Definition at line 504 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.TagNamesEvent.TagNamesDeletedEvent.TagNamesDeletedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.TAG_NAMES_UPDATED

One or more TagNames have been updated.

Definition at line 499 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.TagNamesEvent.TagNamesUpdatedEvent.TagNamesUpdatedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.TAG_SETS_ADDED

One or more TagSets have been added.

Definition at line 509 of file Case.java.

Referenced by org.sleuthkit.autopsy.casemodule.events.TagSetsEvent.TagSetsAddedEvent.TagSetsAddedEvent().

org.sleuthkit.autopsy.casemodule.Case.Events.TIMELINE_EVENT_ADDED

An timeline event, such mac time or web activity was added to the current case. The old value is null and the new value is the TimelineEvent that was added.

Definition at line 436 of file Case.java.

Referenced by org.sleuthkit.autopsy.timeline.events.TimelineEventAddedEvent.TimelineEventAddedEvent().


The documentation for this enum was generated from the following file:

Copyright © 2012-2022 Basis Technology. Generated on: Tue Feb 6 2024
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.