|
String | toString (boolean preserveState) |
|
synchronized void | close () |
|
void | finalize () throws Throwable |
|
Content | getDataSource () throws TskCoreException |
|
long | getFileSystemId () |
|
synchronized List< String > | getMetaDataText () throws TskCoreException |
|
AbstractFile | getParentDirectory () throws TskCoreException |
|
boolean | isRoot () |
|
String | toString (boolean preserveState) |
|
void | addAttributes (Collection< Attribute > attributes, final SleuthkitCase.CaseDbTransaction caseDbTransaction) throws TskCoreException |
|
boolean | canRead () |
|
void | close () |
|
long | convertToImgOffset (long fileOffset) throws TskCoreException |
|
List< TskFileRange > | convertToImgRanges (long fileOffset, long length) throws TskCoreException |
|
boolean | exists () |
|
long | getAtime () |
|
String | getAtimeAsDate () |
|
int | getAttributeId () |
|
List< Attribute > | getAttributes () throws TskCoreException |
|
short | getAttrId () |
|
TskData.TSK_FS_ATTR_TYPE_ENUM | getAttrType () |
|
long | getCrtime () |
|
String | getCrtimeAsDate () |
|
long | getCtime () |
|
String | getCtimeAsDate () |
|
Content | getDataSource () throws TskCoreException |
|
long | getDataSourceObjectId () |
|
String | getDirFlagAsString () |
|
TSK_FS_NAME_TYPE_ENUM | getDirType () |
|
String | getDirTypeAsString () |
|
FileSystem | getFileSystem () throws TskCoreException |
|
Optional< Long > | getFileSystemObjectId () |
|
int | getGid () |
|
TskData.FileKnown | getKnown () |
|
String | getLocalAbsPath () |
|
String | getLocalPath () |
|
String | getMd5Hash () |
|
long | getMetaAddr () |
|
String | getMetaFlagsAsString () |
|
long | getMetaSeq () |
|
TSK_FS_META_TYPE_ENUM | getMetaType () |
|
String | getMetaTypeAsString () |
|
String | getMIMEType () |
|
String | getModesAsString () |
|
long | getMtime () |
|
String | getMtimeAsDate () |
|
String | getNameExtension () |
|
Optional< Long > | getOsAccountObjectId () |
|
Optional< String > | getOwnerUid () |
|
String | getParentPath () |
|
List< TskFileRange > | getRanges () throws TskCoreException |
|
String | getSha1Hash () |
|
String | getSha256Hash () |
|
long | getSize () |
|
TskData.TSK_DB_FILES_TYPE_ENUM | getType () |
|
int | getUid () |
|
String | getUniquePath () throws TskCoreException |
|
boolean | hasFileSystem () |
|
boolean | isDir () |
|
boolean | isDirNameFlagSet (TSK_FS_NAME_FLAG_ENUM flag) |
|
boolean | isFile () |
|
boolean | isMetaFlagSet (TSK_FS_META_FLAG_ENUM metaFlag) |
|
MimeMatchEnum | isMimeType (SortedSet< String > mimeTypes) |
|
boolean | isModeSet (TskData.TSK_FS_META_MODE_ENUM mode) |
|
abstract boolean | isRoot () |
|
boolean | isVirtual () |
|
List< AbstractFile > | listFiles () throws TskCoreException |
|
BlackboardArtifact | newArtifact (int artifactTypeID) throws TskCoreException |
|
DataArtifact | newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList) throws TskCoreException |
|
final int | read (byte[] buf, long offset, long len) throws TskCoreException |
|
void | save () throws TskCoreException |
|
void | save (CaseDbTransaction transaction) throws TskCoreException |
|
void | setKnown (TskData.FileKnown knownState) |
|
void | setMd5Hash (String md5Hash) |
|
void | setMIMEType (String mimeType) |
|
void | setSha1Hash (String sha1Hash) |
|
void | setSha256Hash (String sha256Hash) |
|
String | toString (boolean preserveState) |
|
boolean | equals (Object obj) |
|
Score | getAggregateScore () throws TskCoreException |
|
List< AnalysisResult > | getAllAnalysisResults () throws TskCoreException |
|
ArrayList< BlackboardArtifact > | getAllArtifacts () throws TskCoreException |
|
long | getAllArtifactsCount () throws TskCoreException |
|
List< DataArtifact > | getAllDataArtifacts () throws TskCoreException |
|
List< AnalysisResult > | getAnalysisResults (BlackboardArtifact.Type artifactType) throws TskCoreException |
|
ArrayList< BlackboardArtifact > | getArtifacts (String artifactTypeName) throws TskCoreException |
|
ArrayList< BlackboardArtifact > | getArtifacts (int artifactTypeID) throws TskCoreException |
|
ArrayList< BlackboardArtifact > | getArtifacts (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException |
|
long | getArtifactsCount (String artifactTypeName) throws TskCoreException |
|
long | getArtifactsCount (int artifactTypeID) throws TskCoreException |
|
long | getArtifactsCount (ARTIFACT_TYPE type) throws TskCoreException |
|
List< Content > | getChildren () throws TskCoreException |
|
int | getChildrenCount () throws TskCoreException |
|
List< Long > | getChildrenIds () throws TskCoreException |
|
Content | getDataSource () throws TskCoreException |
|
BlackboardArtifact | getGenInfoArtifact () throws TskCoreException |
|
BlackboardArtifact | getGenInfoArtifact (boolean create) throws TskCoreException |
|
ArrayList< BlackboardAttribute > | getGenInfoAttributes (ATTRIBUTE_TYPE attr_type) throws TskCoreException |
|
Set< String > | getHashSetNames () throws TskCoreException |
|
long | getId () |
|
String | getName () |
|
Content | getParent () throws TskCoreException |
|
Optional< Long > | getParentId () throws TskCoreException |
|
SleuthkitCase | getSleuthkitCase () |
|
String | getUniquePath () throws TskCoreException |
|
boolean | hasChildren () throws TskCoreException |
|
int | hashCode () |
|
AnalysisResultAdded | newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList) throws TskCoreException |
|
AnalysisResultAdded | newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList, long dataSourceId) throws TskCoreException |
|
BlackboardArtifact | newArtifact (int artifactTypeID) throws TskCoreException |
|
BlackboardArtifact | newArtifact (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException |
|
DataArtifact | newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId) throws TskCoreException |
|
DataArtifact | newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId, long dataSourceId) throws TskCoreException |
|
DataArtifact | newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList) throws TskCoreException |
|
String | toString () |
|
String | toString (boolean preserveState) |
|
long | getArtifactsCount (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException |
|
ArrayList< BlackboardAttribute > | getGenInfoAttributes (BlackboardAttribute.ATTRIBUTE_TYPE attr_type) throws TskCoreException |
|
|
| File (SleuthkitCase db, long objId, long fsObjId, TSK_FS_ATTR_TYPE_ENUM attrType, short attrId, String name, long metaAddr, int metaSeq, TSK_FS_NAME_TYPE_ENUM dirType, TSK_FS_META_TYPE_ENUM metaType, TSK_FS_NAME_FLAG_ENUM dirFlag, short metaFlags, long size, long ctime, long crtime, long atime, long mtime, short modes, int uid, int gid, String md5Hash, FileKnown knownState, String parentPath) |
|
synchronized int | readInt (byte[] buf, long offset, long len) throws TskCoreException |
|
void | finalize () throws Throwable |
|
int | readInt (byte[] buf, long offset, long len) throws TskCoreException |
|
final int | readLocal (byte[] buf, long offset, long len) throws TskCoreException |
|
void | setLocalPath (String localPath, boolean isAbsolute) |
|
| AbstractContent (SleuthkitCase db, long obj_id, String name) |
|
A representation of a file system file that has been added to a case.
Definition at line 32 of file File.java.