org.sleuthkit.autopsy.datamodel.ScoreContent Class Reference

Inherits org.sleuthkit.autopsy.datamodel.AutopsyVisitableItem.

Classes
class	ScoreArtifactNode
enum	ScoreContentFilter
class	ScoreContentsChildren
class	ScoreContentsNode
class	ScoreFileNode

Public Member Functions
	ScoreContent (SleuthkitCase skCase)
	ScoreContent (SleuthkitCase skCase, long dsObjId)
SleuthkitCase	getSleuthkitCase ()

Static Private Member Functions
static Sheet	createScoreSheet (String type, String path, Long time)
static String	getDataArtifactFilter (ScoreContent.ScoreContentFilter filter, long filteringDsObjId) throws IllegalArgumentException
static String	getFileFilter (ScoreContent.ScoreContentFilter filter, long filteringDsObjId) throws IllegalArgumentException
static String	getFilter (ScoreContent.ScoreContentFilter filter, String objIdAlias, String dsIdAlias, long filteringDSObjId) throws IllegalArgumentException
static PropertyChangeListener	getPcl (final Runnable onRefresh, final Runnable onRemove)
static String	getScoreFilter (ScoreContentFilter filter) throws IllegalArgumentException
static boolean	isRefreshRequired (PropertyChangeEvent evt)

Private Attributes
final long	filteringDSObjId
SleuthkitCase	skCase

Static Private Attributes
static final Set< Case.Events >	CASE_EVENTS_OF_INTEREST
static final Set< String >	CASE_EVENTS_OF_INTEREST_STRS
static final String	DATE_PROP = "Created Date"
static final Set< IngestManager.IngestJobEvent >	INGEST_JOB_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestJobEvent.COMPLETED, IngestManager.IngestJobEvent.CANCELLED)
static final Set< IngestManager.IngestModuleEvent >	INGEST_MODULE_EVENTS_OF_INTEREST = EnumSet.of(IngestModuleEvent.CONTENT_CHANGED)
static final String	PATH_PROP = "Path"
static final String	SOURCE_PROP = "Source"
static final String	TYPE_PROP = "Type"

Detailed Description

Score content view nodes.

Definition at line 81 of file ScoreContent.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContent

(

SleuthkitCase

skCase

)

Constructor assuming no data source filtering.

Parameters

skCase

The sleuthkit case.

Definition at line 129 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.skCase.

org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContent	(	SleuthkitCase	skCase,
		long	dsObjId
	)

Constructor.

Parameters

skCase	The sleuthkit case.
dsObjId	The data source object id to filter on if > 0.

Definition at line 139 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.skCase.

Member Function Documentation

static Sheet org.sleuthkit.autopsy.datamodel.ScoreContent.createScoreSheet ( String  type, String  path, Long  time  )

staticprivate

Definition at line 688 of file ScoreContent.java.

References org.sleuthkit.autopsy.coreutils.TimeZoneUtils.getFormattedTime().

static String org.sleuthkit.autopsy.datamodel.ScoreContent.getDataArtifactFilter ( ScoreContent.ScoreContentFilter  filter, long  filteringDsObjId  ) throws IllegalArgumentException

staticprivate

Returns a sql where statement for files.

Parameters

filter	The filter type.
filteringDSObjId	The data source object id to filter on if > 0.

Returns

The sql where statement.

Exceptions

IllegalArgumentException

Definition at line 276 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.getFilter().

static String org.sleuthkit.autopsy.datamodel.ScoreContent.getFileFilter ( ScoreContent.ScoreContentFilter  filter, long  filteringDsObjId  ) throws IllegalArgumentException

staticprivate

Returns a sql where statement for files.

Parameters

filter	The filter type.
filteringDSObjId	The data source object id to filter on if > 0.

Returns

The sql where statement.

Exceptions

IllegalArgumentException

Definition at line 264 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.getFilter().

static String org.sleuthkit.autopsy.datamodel.ScoreContent.getFilter ( ScoreContent.ScoreContentFilter  filter, String  objIdAlias, String  dsIdAlias, long  filteringDSObjId  ) throws IllegalArgumentException

staticprivate

The sql where statement for the content.

Parameters

filter	The filter type.
objIdAlias	The alias for the object id of the content. Must be sql safe.
dsIdAlias	The alias for the data source id. Must be sql safe.
filteringDSObjId	The data source object id to filter on if > 0.

Returns

The sql where statement.

Exceptions

IllegalArgumentException

Definition at line 233 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.filteringDSObjId, and org.sleuthkit.autopsy.datamodel.ScoreContent.getScoreFilter().

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.getDataArtifactFilter(), and org.sleuthkit.autopsy.datamodel.ScoreContent.getFileFilter().

static PropertyChangeListener org.sleuthkit.autopsy.datamodel.ScoreContent.getPcl ( final Runnable  onRefresh, final Runnable  onRemove  )

staticprivate

Returns a property change listener listening for possible updates to aggregate score updates for files.

Parameters

onRefresh	Action on refresh.
onRemove	Action to remove listener (i.e. case close).

Returns

The property change listener.

Case is closed, do nothing.

Case is closed, do nothing.

Definition at line 186 of file ScoreContent.java.

References org.sleuthkit.autopsy.ingest.IngestManager.IngestModuleEvent.CONTENT_CHANGED, org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, and org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows().

static String org.sleuthkit.autopsy.datamodel.ScoreContent.getScoreFilter ( ScoreContentFilter  filter ) throws IllegalArgumentException

staticprivate

Definition at line 243 of file ScoreContent.java.

References org::sleuthkit::datamodel::Score::Significance.LIKELY_NOTABLE, org::sleuthkit::datamodel::Score::Priority.NORMAL, org::sleuthkit::datamodel::Score::Significance.NOTABLE, and org::sleuthkit::datamodel::Score::Priority.OVERRIDE.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.ScoreContentNode.calculateItems(), and org.sleuthkit.autopsy.datamodel.ScoreContent.getFilter().

SleuthkitCase org.sleuthkit.autopsy.datamodel.ScoreContent.getSleuthkitCase

(

)

Returns

The sleuthkit case used.

Definition at line 159 of file ScoreContent.java.

References org.sleuthkit.autopsy.datamodel.ScoreContent.skCase.

static boolean org.sleuthkit.autopsy.datamodel.ScoreContent.isRefreshRequired ( PropertyChangeEvent  evt )

staticprivate

Checks for analysis results added to the case that could affect the aggregate score of the file.

Parameters

evt	The event.

Returns

True if has an analysis result.

Case is closed, do nothing.

Definition at line 287 of file ScoreContent.java.

References org::sleuthkit::datamodel::BlackboardArtifact::Category.ANALYSIS_RESULT, org.sleuthkit.autopsy.ingest.IngestManager.IngestModuleEvent.DATA_ADDED, and org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows().

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.isRefreshRequired().

Member Data Documentation

final Set<Case.Events> org.sleuthkit.autopsy.datamodel.ScoreContent.CASE_EVENTS_OF_INTEREST

staticprivate

Initial value:

= EnumSet.of(
            Case.Events.DATA_SOURCE_ADDED,
            Case.Events.CURRENT_CASE,
            Case.Events.CONTENT_TAG_ADDED,
            Case.Events.CONTENT_TAG_DELETED,
            Case.Events.BLACKBOARD_ARTIFACT_TAG_ADDED,
            Case.Events.BLACKBOARD_ARTIFACT_TAG_DELETED
    )

Definition at line 163 of file ScoreContent.java.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.addNotify(), and org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.removeNotify().

final Set<String> org.sleuthkit.autopsy.datamodel.ScoreContent.CASE_EVENTS_OF_INTEREST_STRS

staticprivate

Initial value:

= CASE_EVENTS_OF_INTEREST.stream()
            .map(evt -> evt.name())
            .collect(Collectors.toSet())

Definition at line 171 of file ScoreContent.java.

final String org.sleuthkit.autopsy.datamodel.ScoreContent.DATE_PROP = "Created Date"

staticprivate

Definition at line 686 of file ScoreContent.java.

final long org.sleuthkit.autopsy.datamodel.ScoreContent.filteringDSObjId

private

Definition at line 84 of file ScoreContent.java.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.getFilter().

final Set<IngestManager.IngestJobEvent> org.sleuthkit.autopsy.datamodel.ScoreContent.INGEST_JOB_EVENTS_OF_INTEREST = EnumSet.of(IngestManager.IngestJobEvent.COMPLETED, IngestManager.IngestJobEvent.CANCELLED)

staticprivate

Definition at line 175 of file ScoreContent.java.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.addNotify(), and org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.removeNotify().

final Set<IngestManager.IngestModuleEvent> org.sleuthkit.autopsy.datamodel.ScoreContent.INGEST_MODULE_EVENTS_OF_INTEREST = EnumSet.of(IngestModuleEvent.CONTENT_CHANGED)

staticprivate

Definition at line 176 of file ScoreContent.java.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.addNotify(), and org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContentsChildren.removeNotify().

final String org.sleuthkit.autopsy.datamodel.ScoreContent.PATH_PROP = "Path"

staticprivate

Definition at line 685 of file ScoreContent.java.

SleuthkitCase org.sleuthkit.autopsy.datamodel.ScoreContent.skCase

private

Definition at line 83 of file ScoreContent.java.

Referenced by org.sleuthkit.autopsy.datamodel.ScoreContent.getSleuthkitCase(), and org.sleuthkit.autopsy.datamodel.ScoreContent.ScoreContent().

final String org.sleuthkit.autopsy.datamodel.ScoreContent.SOURCE_PROP = "Source"

staticprivate

Definition at line 683 of file ScoreContent.java.

final String org.sleuthkit.autopsy.datamodel.ScoreContent.TYPE_PROP = "Type"

staticprivate

Definition at line 684 of file ScoreContent.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/datamodel/ScoreContent.java