Autopsy
4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.corecomponentinterfaces.DataContentViewer.
Classes | |
class | NextFindActionListener |
class | NextPageActionListener |
class | PrevFindActionListener |
class | PrevPageActionListener |
class | SourceChangeActionListener |
Public Member Functions | |
ExtractedContentViewer () | |
DataContentViewer | createInstance () |
synchronized Component | getComponent () |
String | getTitle () |
String | getToolTip () |
int | isPreferred (Node node) |
boolean | isSupported (Node node) |
void | resetComponent () |
void | setNode (Node selectedNode) |
void | setNode (final Node node) |
Private Member Functions | |
Long | getDocumentId (Node node) |
void | nextPage () |
void | previousPage () |
void | scrollToCurrentHit () |
void | setPanel (List< IndexedText > sources) |
boolean | solrHasContent (Long objectId) |
Static Private Member Functions | |
static IndexedText | getAccountsText (Content content, Lookup nodeLookup) throws TskCoreException |
static IndexedText | getRawArtifactText (Lookup nodeLookup) throws TskCoreException |
Private Attributes | |
volatile Node | currentNode = null |
IndexedText | currentSource = null |
ExtractedContentPanel | panel |
Static Private Attributes | |
static final long | INVALID_DOCUMENT_ID = 0L |
static final Logger | logger = Logger.getLogger(ExtractedContentViewer.class.getName()) |
static final BlackboardAttribute.Type | TSK_ASSOCIATED_ARTIFACT_TYPE = new BlackboardAttribute.Type(TSK_ASSOCIATED_ARTIFACT) |
A content viewer that displays the indexed text associated with a file or an artifact, possibly marked up with HTML to highlight keyword hits.
Definition at line 50 of file ExtractedContentViewer.java.
org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.ExtractedContentViewer | ( | ) |
Constructs a content viewer that displays the indexed text associated with a file or an artifact, possibly marked up with HTML to highlight keyword hits.
Definition at line 66 of file ExtractedContentViewer.java.
DataContentViewer org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.createInstance | ( | ) |
Create and return a new instance of your viewer. The reason that this is needed is because the specific viewer modules will be found via NetBeans Lookup and the type will only be DataContentViewer. This method is used to get an instance of your specific type.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataContentViewer.
Definition at line 238 of file ExtractedContentViewer.java.
|
staticprivate |
Definition at line 205 of file ExtractedContentViewer.java.
synchronized Component org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.getComponent | ( | ) |
Return the Swing Component to display. Implementations of this method that extend JPanel and do a 'return this;'. Otherwise return an internal instance of the JPanel.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataContentViewer.
Definition at line 243 of file ExtractedContentViewer.java.
|
private |
Gets the object ID to use as the document ID for accessing any indexed text for the given node.
node | The node. |
If the node is a Blackboard artifact node for anything other than a keyword hit, the document ID for the text extracted from the artifact (the concatenation of its attributes) is the artifact ID, a large, negative integer. If it is a keyword hit, see if there is an associated artifact. If there is, get the associated artifact's ID and return it.
Definition at line 349 of file ExtractedContentViewer.java.
References org::sleuthkit::datamodel::BlackboardArtifact.getArtifactID(), org::sleuthkit::datamodel::BlackboardArtifact.getArtifactTypeID(), org::sleuthkit::datamodel::BlackboardArtifact.getAttribute(), org::sleuthkit::datamodel::Content.getId(), org::sleuthkit::datamodel::BlackboardAttribute.getValueLong(), and org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_KEYWORD_HIT.
|
staticprivate |
Definition at line 179 of file ExtractedContentViewer.java.
References org::sleuthkit::datamodel::BlackboardArtifact.getArtifactID(), org::sleuthkit::datamodel::BlackboardArtifact.getArtifactTypeID(), org::sleuthkit::datamodel::BlackboardArtifact.getAttribute(), org::sleuthkit::datamodel::SleuthkitCase.getBlackboardArtifact(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), and org::sleuthkit::datamodel::BlackboardAttribute.getValueLong().
String org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.getTitle | ( | ) |
Returns the title of this viewer to display in the tab.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataContentViewer.
Definition at line 228 of file ExtractedContentViewer.java.
String org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.getToolTip | ( | ) |
Returns a short description of this viewer to use as a tool tip for its tab.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataContentViewer.
Definition at line 233 of file ExtractedContentViewer.java.
int org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.isPreferred | ( | Node | node | ) |
Checks whether the given viewer is preferred for the Node. This is a bit subjective, but the idea is that Autopsy wants to display the most relevant tab. The more generic the viewer, the lower the return value should be. This will only be called on viewers that support the given node.
node | Node to check for preference |
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataContentViewer.
Definition at line 296 of file ExtractedContentViewer.java.
References org::sleuthkit::datamodel::BlackboardArtifact.getArtifactTypeID(), org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_ACCOUNT, and org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_KEYWORD_HIT.
boolean org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.isSupported | ( | Node | node | ) |
Checks whether the given node is supported by the viewer. This will be used to enable or disable the tab for the viewer.
node | Node to check for support |
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataContentViewer.
Definition at line 264 of file ExtractedContentViewer.java.
|
private |
Definition at line 483 of file ExtractedContentViewer.java.
References org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.scrollToCurrentHit().
|
private |
Definition at line 516 of file ExtractedContentViewer.java.
References org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.scrollToCurrentHit().
void org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.resetComponent | ( | ) |
Resets the contents of the viewer / component.
Implements org.sleuthkit.autopsy.corecomponentinterfaces.DataContentViewer.
Definition at line 256 of file ExtractedContentViewer.java.
|
private |
Definition at line 218 of file ExtractedContentViewer.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.nextPage(), and org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.previousPage().
|
inherited |
Autopsy will call this when this panel is focused with the file that should be analyzed. When called with null, must clear all references to previous nodes.
Implemented in org.sleuthkit.autopsy.corecomponents.DataContentViewerHex, org.sleuthkit.autopsy.corecomponents.DataContentViewerString, org.sleuthkit.autopsy.corecomponents.DataContentViewerArtifact, org.sleuthkit.autopsy.contentviewers.Metadata, and org.sleuthkit.autopsy.corecomponents.DataContentViewerMedia.
void org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.setNode | ( | final Node | node | ) |
Sets the node displayed by the content viewer.
node | The node to display |
Definition at line 75 of file ExtractedContentViewer.java.
References org::sleuthkit::datamodel::BlackboardArtifact.getArtifactTypeID(), and org::sleuthkit::datamodel::Content.getId().
|
private |
Set the MarkupSources for the panel to display (safe to call even if the panel hasn't been created yet)
sources |
Definition at line 315 of file ExtractedContentViewer.java.
|
private |
Check if Solr has extracted content for a given node
objectId |
Definition at line 328 of file ExtractedContentViewer.java.
References org.sleuthkit.autopsy.keywordsearch.KeywordSearch.getServer(), and org.sleuthkit.autopsy.keywordsearch.Server.queryIsIndexed().
|
private |
Definition at line 58 of file ExtractedContentViewer.java.
|
private |
Definition at line 59 of file ExtractedContentViewer.java.
|
staticprivate |
Definition at line 54 of file ExtractedContentViewer.java.
|
staticprivate |
Definition at line 52 of file ExtractedContentViewer.java.
|
private |
Definition at line 57 of file ExtractedContentViewer.java.
|
staticprivate |
Definition at line 55 of file ExtractedContentViewer.java.
Copyright © 2012-2016 Basis Technology. Generated on: Mon Apr 24 2017
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.