Autopsy
3.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits SwingWorker< Integer, Integer >.
Protected Member Functions | |
Integer | doInBackground () throws Exception |
void | done () |
Private Member Functions | |
void | makeBlackboardArtifactTables () |
void | makeContentTagsTables () |
void | makeBlackboardArtifactTagsTables () |
boolean | passesTagNamesFilter (String tagName) |
void | makeThumbnailTable () |
void | checkIfTagHasImage (BlackboardArtifactTag artifactTag) |
void | checkIfTagHasImage (ContentTag contentTag) |
void | checkIfFileIsImage (AbstractFile file) |
Private Attributes | |
List< TableReportModule > | tableModules = new ArrayList<>() |
List< ARTIFACT_TYPE > | artifactTypes = new ArrayList<>() |
HashSet< String > | tagNamesFilter = new HashSet<>() |
List< Content > | images = new ArrayList<>() |
SwingWorker to run TableReportModules to report on blackboard artifacts, content tags, and blackboard artifact tags.
Definition at line 412 of file ReportGenerator.java.
|
private |
If file is an image file, add it to the internal 'images' list.
file |
Definition at line 833 of file ReportGenerator.java.
References org::sleuthkit::datamodel::AbstractFile.getType(), org::sleuthkit::datamodel::AbstractFile.isDir(), org.sleuthkit.autopsy.coreutils.ImageUtils.thumbnailSupported(), org::sleuthkit::datamodel::TskData::TSK_DB_FILES_TYPE_ENUM.UNALLOC_BLOCKS, and org::sleuthkit::datamodel::TskData::TSK_DB_FILES_TYPE_ENUM.UNUSED_BLOCKS.
Referenced by org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.checkIfTagHasImage().
|
private |
Analyze artifact associated with tag and add to internal list if it is associated with an image.
artifactTag |
Definition at line 799 of file ReportGenerator.java.
References org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.checkIfFileIsImage(), org::sleuthkit::datamodel::SleuthkitCase.getAbstractFileById(), org::sleuthkit::datamodel::BlackboardArtifactTag.getArtifact(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org::sleuthkit::datamodel::BlackboardArtifact.getObjectID(), and org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().
Referenced by org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.makeBlackboardArtifactTagsTables(), and org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.makeContentTagsTables().
|
private |
Analyze file that tag is associated with and determine if it is an image and should have a thumbnail reported for it. Images are added to internal list.
contentTag |
Definition at line 821 of file ReportGenerator.java.
References org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.checkIfFileIsImage(), and org::sleuthkit::datamodel::ContentTag.getContent().
|
protected |
Definition at line 443 of file ReportGenerator.java.
References org.sleuthkit.autopsy.report.ReportProgressPanel.ReportStatus.CANCELED, org.sleuthkit.autopsy.report.ReportProgressPanel.ReportStatus.COMPLETE, org.sleuthkit.autopsy.report.ReportProgressPanel.getStatus(), org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.makeBlackboardArtifactTables(), org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.makeBlackboardArtifactTagsTables(), org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.makeContentTagsTables(), org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.makeThumbnailTable(), org.sleuthkit.autopsy.report.ReportProgressPanel.setIndeterminate(), org.sleuthkit.autopsy.report.ReportProgressPanel.setMaximumProgress(), and org.sleuthkit.autopsy.report.ReportProgressPanel.start().
|
protected |
Definition at line 664 of file ReportGenerator.java.
References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.MessageType.ERROR, and org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.show().
|
private |
Generate the tables for the selected blackboard artifacts
Definition at line 477 of file ReportGenerator.java.
References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.MessageType.ERROR, org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.show(), org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.tagNamesFilter, org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_HASHSET_HIT, and org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_KEYWORD_HIT.
Referenced by org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.doInBackground().
|
private |
Generate the tables for the tagged artifacts
Definition at line 686 of file ReportGenerator.java.
References org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.checkIfTagHasImage(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllBlackboardArtifactTags(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.getServices(), org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager(), org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.passesTagNamesFilter(), and org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_TAG_ARTIFACT.
Referenced by org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.doInBackground().
|
private |
Make table for tagged files
Definition at line 572 of file ReportGenerator.java.
References org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.checkIfTagHasImage(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getAllContentTags(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.getServices(), org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager(), org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.passesTagNamesFilter(), and org::sleuthkit::datamodel::BlackboardArtifact::ARTIFACT_TYPE.TSK_TAG_FILE.
Referenced by org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.doInBackground().
|
private |
Make a report for the files that were previously found to be images.
Definition at line 770 of file ReportGenerator.java.
Referenced by org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.doInBackground().
|
private |
Test if the user requested that this tag be reported on
tagName |
Definition at line 752 of file ReportGenerator.java.
Referenced by org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.makeBlackboardArtifactTagsTables(), and org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.makeContentTagsTables().
|
private |
Definition at line 414 of file ReportGenerator.java.
|
private |
Definition at line 417 of file ReportGenerator.java.
|
private |
Definition at line 413 of file ReportGenerator.java.
|
private |
Definition at line 415 of file ReportGenerator.java.
Referenced by org.sleuthkit.autopsy.report.ReportGenerator.TableReportsWorker.makeBlackboardArtifactTables().
Copyright © 2012-2015 Basis Technology. Generated on: Mon Oct 19 2015
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.