org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition Class Reference

Inherits org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.AbstractTextCondition, and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FileNameCondition.

Public Member Functions
	ExtensionCondition (String extension)
	ExtensionCondition (List< String > extensions)
	ExtensionCondition (Pattern extension)
String	getTextToMatch ()
boolean	isRegex ()
boolean	passes (AbstractFile file)
boolean	textMatches (String textToMatch)

Static Private Member Functions
static List< String >	normalize (List< String > extensions)
static String	normalize (String extension)

Static Private Attributes
static final long	serialVersionUID = 1L

Detailed Description

A file name extension condition for an interesting files set membership rule. The immutability of a file name extension condition object allows it to be safely published to multiple threads.

Definition at line 948 of file FilesSet.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition.ExtensionCondition

(

String

extension

)

Construct a case-insensitive file name extension condition.

Parameters

extension

The file name extension to be matched.

Definition at line 957 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition.normalize().

org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition.ExtensionCondition

(

List< String >

extensions

)

Construct a case-insensitive file name extension condition.

Parameters

extensions

The file name extensions to be matched.

Definition at line 969 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition.normalize().

org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition.ExtensionCondition

(

Pattern

extension

)

Construct a file name extension regular expression condition.

Parameters

extension

The file name extension regular expression to be matched.

Definition at line 982 of file FilesSet.java.

Member Function Documentation

String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.AbstractTextCondition.getTextToMatch ( )

inherited

Get the text the condition matches.

Returns

The text.

Definition at line 793 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.TextMatcher.getTextToMatch().

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.toString().

boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.AbstractTextCondition.isRegex ( )

inherited

Queries whether or not the text the condition matches is a regular expression.

Returns

True if the text to be matched is a regular expression, false otherwise.

Definition at line 805 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.TextMatcher.isRegex().

static List<String> org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition.normalize ( List< String >  extensions )

staticprivate

Strip "." from the start of extensions in the provided list.

Parameters

extensions

The list of extensions to be processed.

Returns

A post-processed list of extensions.

Definition at line 998 of file FilesSet.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition.ExtensionCondition().

static String org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition.normalize ( String  extension )

staticprivate

Strip "." from the start of the provided extension.

Parameters

extension

The extension to be processed.

Returns

A post-processed extension.

Definition at line 1015 of file FilesSet.java.

boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition.passes

(

AbstractFile

file

)

Definition at line 987 of file FilesSet.java.

References org::sleuthkit::datamodel::AbstractFile.getNameExtension(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.AbstractTextCondition.textMatches().

boolean org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.AbstractTextCondition.textMatches ( String  textToMatch )

inherited

Determines whether a string of text matches the condition.

Parameters

textToMatch

The text string.

Returns

True if the text matches, false otherwise.

Definition at line 817 of file FilesSet.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.TextMatcher.textMatches().

Referenced by org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ParentPathCondition.passes(), org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.FullNameCondition.passes(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition.passes().

Member Data Documentation

final long org.sleuthkit.autopsy.modules.interestingitems.FilesSet.Rule.ExtensionCondition.serialVersionUID = 1L

staticprivate

Definition at line 950 of file FilesSet.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/modules/interestingitems/FilesSet.java