Inherits org.sleuthkit.datamodel.AbstractFile.

Classes
class	DerivedMethod

Public Member Functions
synchronized DerivedMethod	getDerivedMethod () throws TskCoreException
boolean	isRoot ()
String	toString (boolean preserveState)
Public Member Functions inherited from org.sleuthkit.datamodel.AbstractFile
void	addAttributes (Collection< Attribute > attributes, final SleuthkitCase.CaseDbTransaction caseDbTransaction) throws TskCoreException
boolean	canRead ()
void	close ()
long	convertToImgOffset (long fileOffset) throws TskCoreException
List< TskFileRange >	convertToImgRanges (long fileOffset, long length) throws TskCoreException
int	countChildrenOfType (List< TSK_FS_NAME_TYPE_ENUM > types) throws TskCoreException
boolean	exists ()
long	getAtime ()
String	getAtimeAsDate ()
int	getAttributeId ()
List< Attribute >	getAttributes () throws TskCoreException
short	getAttrId ()
TskData.TSK_FS_ATTR_TYPE_ENUM	getAttrType ()
TskData.CollectedStatus	getCollected ()
long	getCrtime ()
String	getCrtimeAsDate ()
long	getCtime ()
String	getCtimeAsDate ()
Content	getDataSource () throws TskCoreException
long	getDataSourceObjectId ()
String	getDirFlagAsString ()
TSK_FS_NAME_TYPE_ENUM	getDirType ()
String	getDirTypeAsString ()
FileSystem	getFileSystem () throws TskCoreException
Optional< Long >	getFileSystemObjectId ()
int	getGid ()
TskData.FileKnown	getKnown ()
String	getLocalAbsPath ()
String	getLocalPath ()
String	getMd5Hash ()
long	getMetaAddr ()
String	getMetaFlagsAsString ()
long	getMetaSeq ()
TSK_FS_META_TYPE_ENUM	getMetaType ()
String	getMetaTypeAsString ()
String	getMIMEType ()
String	getModesAsString ()
long	getMtime ()
String	getMtimeAsDate ()
String	getNameExtension ()
Optional< Long >	getOsAccountObjectId ()
Optional< String >	getOwnerUid ()
String	getParentPath ()
List< TskFileRange >	getRanges () throws TskCoreException
String	getSha1Hash ()
String	getSha256Hash ()
long	getSize ()
TskData.TSK_DB_FILES_TYPE_ENUM	getType ()
int	getUid ()
String	getUniquePath () throws TskCoreException
boolean	hasFileSystem ()
boolean	isDir ()
boolean	isDirNameFlagSet (TSK_FS_NAME_FLAG_ENUM flag)
boolean	isFile ()
boolean	isMetaFlagSet (TSK_FS_META_FLAG_ENUM metaFlag)
MimeMatchEnum	isMimeType (SortedSet< String > mimeTypes)
boolean	isModeSet (TskData.TSK_FS_META_MODE_ENUM mode)
boolean	isVirtual ()
List< AbstractFile >	listFiles () throws TskCoreException
BlackboardArtifact	newArtifact (int artifactTypeID) throws TskCoreException
DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList) throws TskCoreException
final int	read (byte[] buf, long offset, long len) throws TskCoreException
void	save () throws TskCoreException
void	save (CaseDbTransaction transaction) throws TskCoreException
void	setCollected (TskData.CollectedStatus collected)
void	setKnown (TskData.FileKnown knownState)
void	setMd5Hash (String md5Hash)
void	setMIMEType (String mimeType)
void	setSha1Hash (String sha1Hash)
void	setSha256Hash (String sha256Hash)
Public Member Functions inherited from org.sleuthkit.datamodel.AbstractContent
boolean	equals (Object obj)
Score	getAggregateScore () throws TskCoreException
List< AnalysisResult >	getAllAnalysisResults () throws TskCoreException
ArrayList< BlackboardArtifact >	getAllArtifacts () throws TskCoreException
long	getAllArtifactsCount () throws TskCoreException
List< DataArtifact >	getAllDataArtifacts () throws TskCoreException
List< AnalysisResult >	getAnalysisResults (BlackboardArtifact.Type artifactType) throws TskCoreException
ArrayList< BlackboardArtifact >	getArtifacts (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
ArrayList< BlackboardArtifact >	getArtifacts (int artifactTypeID) throws TskCoreException
ArrayList< BlackboardArtifact >	getArtifacts (String artifactTypeName) throws TskCoreException
long	getArtifactsCount (ARTIFACT_TYPE type) throws TskCoreException
long	getArtifactsCount (int artifactTypeID) throws TskCoreException
long	getArtifactsCount (String artifactTypeName) throws TskCoreException
List< Content >	getChildren () throws TskCoreException
int	getChildrenCount () throws TskCoreException
List< Long >	getChildrenIds () throws TskCoreException
BlackboardArtifact	getGenInfoArtifact () throws TskCoreException
BlackboardArtifact	getGenInfoArtifact (boolean create) throws TskCoreException
ArrayList< BlackboardAttribute >	getGenInfoAttributes (ATTRIBUTE_TYPE attr_type) throws TskCoreException
Set< String >	getHashSetNames () throws TskCoreException
long	getId ()
String	getName ()
Content	getParent () throws TskCoreException
Optional< Long >	getParentId () throws TskCoreException
SleuthkitCase	getSleuthkitCase ()
boolean	hasChildren () throws TskCoreException
int	hashCode ()
AnalysisResultAdded	newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList) throws TskCoreException
AnalysisResultAdded	newAnalysisResult (BlackboardArtifact.Type artifactType, Score score, String conclusion, String configuration, String justification, Collection< BlackboardAttribute > attributesList, long dataSourceId) throws TskCoreException
BlackboardArtifact	newArtifact (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId) throws TskCoreException
DataArtifact	newDataArtifact (BlackboardArtifact.Type artifactType, Collection< BlackboardAttribute > attributesList, Long osAccountId, long dataSourceId) throws TskCoreException
String	toString ()
Public Member Functions inherited from org.sleuthkit.datamodel.Content
long	getArtifactsCount (BlackboardArtifact.ARTIFACT_TYPE type) throws TskCoreException
ArrayList< BlackboardAttribute >	getGenInfoAttributes (BlackboardAttribute.ATTRIBUTE_TYPE attr_type) throws TskCoreException

Protected Member Functions
void	finalize () throws Throwable
Protected Member Functions inherited from org.sleuthkit.datamodel.AbstractFile
int	readInt (byte[] buf, long offset, long len) throws TskCoreException
final int	readLocal (byte[] buf, long offset, long len) throws TskCoreException
void	setLocalPath (String localPath, boolean isAbsolute)
Protected Member Functions inherited from org.sleuthkit.datamodel.AbstractContent
	AbstractContent (SleuthkitCase db, long obj_id, String name)

Additional Inherited Members
Static Public Member Functions inherited from org.sleuthkit.datamodel.AbstractFile
static String	createNonUniquePath (String uniquePath)
static String	epochToTime (long epoch)
static String	epochToTime (long epoch, TimeZone tzone)
static long	timeToEpoch (String time)
Static Public Attributes inherited from org.sleuthkit.datamodel.AbstractContent
static final long	UNKNOWN_ID = -1
Protected Attributes inherited from org.sleuthkit.datamodel.AbstractFile
final long	atime
final int	attrId
final TskData.TSK_FS_ATTR_TYPE_ENUM	attrType
final long	crtime
final long	ctime
TSK_FS_NAME_FLAG_ENUM	dirFlag
final TSK_FS_NAME_TYPE_ENUM	dirType
final Long	fileSystemObjectId
final TskData.TSK_DB_FILES_TYPE_ENUM	fileType
final int	gid
TskData.FileKnown	knownState
String	md5Hash
final long	metaAddr
Set< TSK_FS_META_FLAG_ENUM >	metaFlags
final int	metaSeq
final TSK_FS_META_TYPE_ENUM	metaType
final Set< TskData.TSK_FS_META_MODE_ENUM >	modes
final long	mtime
final String	parentPath
String	sha1Hash
String	sha256Hash
long	size
final int	uid
Protected Attributes inherited from org.sleuthkit.datamodel.AbstractContent
long	parentId

Detailed Description

A representation of a file or directory that has been derived from another file and is stored outside of the data source (e.g., on a user's machine). A typical example of a derived file is a file extracted from an archive file.

Definition at line 37 of file DerivedFile.java.

Member Function Documentation

◆ finalize()

void org.sleuthkit.datamodel.DerivedFile.finalize ( ) throws Throwable

protected

Closes this derived file, if it was open.

Exceptions

Throwable

Reimplemented from org.sleuthkit.datamodel.AbstractFile.

Definition at line 188 of file DerivedFile.java.

References org.sleuthkit.datamodel.AbstractFile.close().

◆ getDerivedMethod()

synchronized DerivedMethod org.sleuthkit.datamodel.DerivedFile.getDerivedMethod ( ) throws TskCoreException

Gets the method used to derive this file, if it has been recorded.

Returns: Derived method or null.

Exceptions

TskCoreException if there was an error querying the case database.

Definition at line 140 of file DerivedFile.java.

References org.sleuthkit.datamodel.AbstractContent.getId(), and org.sleuthkit.datamodel.AbstractContent.getSleuthkitCase().

◆ isRoot()

boolean org.sleuthkit.datamodel.DerivedFile.isRoot ( )

Indicates whether or not this derived file is the root of a file system, always returns false.

Returns: False.

Reimplemented from org.sleuthkit.datamodel.AbstractFile.

Definition at line 128 of file DerivedFile.java.

◆ toString()

String org.sleuthkit.datamodel.DerivedFile.toString ( boolean preserveState )

Provides a string representation of this derived file.

Parameters

preserveState True if state should be included in the string representation of this object.

Reimplemented from org.sleuthkit.datamodel.AbstractFile.

Definition at line 204 of file DerivedFile.java.

The documentation for this class was generated from the following file:

/home/carriersleuth/repos/sleuthkit/bindings/java/src/org/sleuthkit/datamodel/DerivedFile.java

Classes

Public Member Functions

Protected Member Functions

Additional Inherited Members

Detailed Description

Member Function Documentation

◆ finalize()

◆ getDerivedMethod()

◆ isRoot()

◆ toString()