Inherits Serializable.

Classes
class	AbstractTextCondition

class	CaseInsensitiveMultiValueStringComparisionMatcher

class	CaseInsensitivePartialStringComparisionMatcher

class	CaseInsensitiveStringComparisionMatcher

class	DateCondition

class	ExtensionCondition

interface	FileAttributeCondition

interface	FileNameCondition

class	FileSizeCondition

class	FullNameCondition

class	MetaTypeCondition

class	MimeTypeCondition

class	ParentPathCondition

class	RegexMatcher

interface	TextCondition

interface	TextMatcher

Public Member Functions
	Rule (String ruleName, FileNameCondition fileNameCondition, MetaTypeCondition metaTypeCondition, ParentPathCondition pathCondition, MimeTypeCondition mimeTypeCondition, FileSizeCondition fileSizeCondition, DateCondition dateCondition, Boolean exclusive)

DateCondition	getDateCondition ()

FileNameCondition	getFileNameCondition ()

FileSizeCondition	getFileSizeCondition ()

MetaTypeCondition	getMetaTypeCondition ()

MimeTypeCondition	getMimeTypeCondition ()

String	getName ()

ParentPathCondition	getPathCondition ()

String	getUuid ()

boolean	isExclusive ()

boolean	isSatisfied (AbstractFile file)

String	toString ()

Private Attributes
final List< FileAttributeCondition >	conditions = new ArrayList<>()

final DateCondition	dateCondition

final Boolean	exclusive

final FileNameCondition	fileNameCondition

final FileSizeCondition	fileSizeCondition

final MetaTypeCondition	metaTypeCondition

final MimeTypeCondition	mimeTypeCondition

final ParentPathCondition	pathCondition

final String	ruleName

final String	uuid

Static Private Attributes
static final long	serialVersionUID = 1L

Detailed Description

A set membership rule for an interesting files set. The immutability of a rule object allows it to be safely published to multiple threads.

Definition at line 272 of file FilesSet.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule	(	String	ruleName,
		FileNameCondition	fileNameCondition,
		MetaTypeCondition	metaTypeCondition,
		ParentPathCondition	pathCondition,
		MimeTypeCondition	mimeTypeCondition,
		FileSizeCondition	fileSizeCondition,
		DateCondition	dateCondition,
		Boolean	exclusive
	)

Construct an interesting files set membership rule.

Parameters

ruleName	The name of the rule. Can be empty string.
fileNameCondition	A file name condition, may be null.
metaTypeCondition	A file meta-type condition.
pathCondition	A file path condition, may be null.
mimeTypeCondition	A file mime type condition, may be null.
fileSizeCondition	A file size condition, may be null.
dateCondition	A file date created or modified condition, may be null
exclusive	Whether or not the rule excludes items matching the rule otherwise including them.

Definition at line 300 of file FilesSet.java.

Member Function Documentation

DateCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getDateCondition ( )

Definition at line 383 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.dateCondition.

FileNameCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileNameCondition ( )

Get the file name condition for the rule.

Returns: A file name condition. Can be null.

Definition at line 361 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileNameCondition.

FileSizeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileSizeCondition ( )

Returns: the file size condition. Can be null.

Definition at line 454 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileSizeCondition.

MetaTypeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMetaTypeCondition ( )

Get the meta-type condition for the rule.

Returns: A meta-type condition. Can be null.

Definition at line 370 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.metaTypeCondition.

MimeTypeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMimeTypeCondition ( )

Returns: the mime type condition. Can be null.

Definition at line 447 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.mimeTypeCondition.

String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getName ( )

Get the name of the rule.

Returns: A name string.

Definition at line 352 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ruleName.

ParentPathCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getPathCondition ( )

Get the path condition for the rule.

Returns: A path condition, may be null.

Definition at line 379 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.pathCondition.

String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getUuid ( )

Returns: the ruleUUID

Definition at line 440 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.uuid.

boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.isExclusive ( )

Returns: True if this rule should exclude certain files matching criteria, otherwise including files matching criteria if false.

Definition at line 392 of file FilesSet.java.

boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.isSatisfied ( AbstractFile file )

Determines whether or not a file satisfies the rule.

Parameters

file	The file to test.

Returns: True if the rule is satisfied, false otherwise.

Definition at line 403 of file FilesSet.java.

String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.toString ( )

Definition at line 417 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.getComparator(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.DateCondition.getDaysIncluded(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.MimeTypeCondition.getMimeType(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.SIZE_UNIT.getName(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.getSizeValue(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.COMPARATOR.getSymbol(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.AbstractTextCondition.getTextToMatch(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileSizeCondition.getUnit().

Member Data Documentation

final List<FileAttributeCondition> org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.conditions = new ArrayList<>()

private

Definition at line 284 of file FilesSet.java.

final DateCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.dateCondition

private

Definition at line 283 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getDateCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final Boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.exclusive

private

Definition at line 277 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final FileNameCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileNameCondition

private

Definition at line 278 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileNameCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final FileSizeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.fileSizeCondition

private

Definition at line 282 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getFileSizeCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final MetaTypeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.metaTypeCondition

private

Definition at line 279 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMetaTypeCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final MimeTypeCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.mimeTypeCondition

private

Definition at line 281 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getMimeTypeCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final ParentPathCondition org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.pathCondition

private

Definition at line 280 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getPathCondition(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ruleName

private

Definition at line 276 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getName(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.Rule().

final long org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.serialVersionUID = 1L

staticprivate

Definition at line 274 of file FilesSet.java.

final String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.uuid

private

Definition at line 275 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.getUuid().

The documentation for this class was generated from the following file:

/home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/modules/interestingitems/FilesSet.java

Classes

Public Member Functions

Private Attributes

Static Private Attributes

Detailed Description

Constructor & Destructor Documentation

Member Function Documentation

Member Data Documentation