Autopsy
4.17.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.MultiEvent< EventStripe >.
Public Member Functions | |
EventCluster (Interval spanningInterval, TimelineEventType type, Set< Long > eventIDs, Set< Long > hashHits, Set< Long > tagged, String description, TimelineLevelOfDetail lod) | |
EventCluster (TimelineEvent event, TimelineEventType type, TimelineLevelOfDetail lod) | |
boolean | equals (Object obj) |
SortedSet< EventCluster > | getClusters () |
String | getDescription () |
TimelineLevelOfDetail | getDescriptionLevel () |
long | getEndMillis () |
Set< Long > | getEventIDs () |
Set< Long > | getEventIDsWithHashHits () |
Set< Long > | getEventIDsWithTags () |
TimelineEventType | getEventType () |
Optional< EventStripe > | getParent () |
Optional< EventStripe > | getParentStripe () |
Interval | getSpan () |
long | getStartMillis () |
int | hashCode () |
String | toString () |
EventCluster | withParent (EventStripe parent) |
Static Public Member Functions | |
static EventCluster | merge (EventCluster cluster1, EventCluster cluster2) |
Private Member Functions | |
EventCluster (Interval spanningInterval, TimelineEventType type, Set< Long > eventIDs, Set< Long > hashHits, Set< Long > tagged, String description, TimelineLevelOfDetail lod, EventStripe parent) | |
Private Attributes | |
final String | description |
final Set< Long > | eventIDs |
final Set< Long > | hashHits |
final TimelineLevelOfDetail | lod |
final EventStripe | parent |
final Interval | span |
final Set< Long > | tagged |
final TimelineEventType | type |
Represents a set of other events clustered together. All the sub events should have the same type and matching descriptions at the designated "zoom level", and be "close together" in time.
Definition at line 40 of file EventCluster.java.
|
private |
Definition at line 128 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.description, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.eventIDs, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashHits, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.parent, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.tagged, and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.type.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.withParent().
org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster | ( | Interval | spanningInterval, |
TimelineEventType | type, | ||
Set< Long > | eventIDs, | ||
Set< Long > | hashHits, | ||
Set< Long > | tagged, | ||
String | description, | ||
TimelineLevelOfDetail | lod | ||
) |
Definition at line 143 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.description, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.eventIDs, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashHits, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.tagged, and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.type.
org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster | ( | TimelineEvent | event, |
TimelineEventType | type, | ||
TimelineLevelOfDetail | lod | ||
) |
boolean org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals | ( | Object | obj | ) |
Definition at line 264 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.description, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.eventIDs, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod, and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.type.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals().
SortedSet<EventCluster> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getClusters | ( | ) |
Definition at line 244 of file EventCluster.java.
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescription | ( | ) |
Definition at line 215 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.description.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().
TimelineLevelOfDetail org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescriptionLevel | ( | ) |
Definition at line 225 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe().
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEndMillis | ( | ) |
Definition at line 195 of file EventCluster.java.
Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDs | ( | ) |
Definition at line 200 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.eventIDs.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().
Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithHashHits | ( | ) |
Definition at line 205 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashHits.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().
Set<Long> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithTags | ( | ) |
Definition at line 210 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.tagged.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().
TimelineEventType org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventType | ( | ) |
Definition at line 220 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.type.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().
Optional<EventStripe> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParent | ( | ) |
get the EventStripe (if any) that contains this cluster
Definition at line 169 of file EventCluster.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParentStripe().
Optional<EventStripe> org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParentStripe | ( | ) |
get the EventStripe (if any) that contains this cluster
Definition at line 180 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getParent().
Interval org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getSpan | ( | ) |
Definition at line 185 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.span.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailsViewModel.mergeClustersToStripes().
long org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getStartMillis | ( | ) |
Definition at line 190 of file EventCluster.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.SingleDetailsViewEvent.getClusters().
int org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.hashCode | ( | ) |
Definition at line 254 of file EventCluster.java.
|
static |
merge two event clusters into one new event cluster.
cluster1 | |
cluster2 |
Definition at line 90 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescription(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDs(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithHashHits(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithTags(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventType(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.lod, org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.span, and org.sleuthkit.autopsy.timeline.utils.IntervalUtils.span().
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.DetailsViewModel.mergeClustersToStripes().
String org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.toString | ( | ) |
Definition at line 249 of file EventCluster.java.
EventCluster org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.withParent | ( | EventStripe | parent | ) |
return a new EventCluster identical to this one, except with the given EventBundle as the parent.
parent |
Definition at line 238 of file EventCluster.java.
References org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster().
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventStripe.EventStripe().
|
private |
the common description of all the clustered events
Definition at line 57 of file EventCluster.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescription().
|
private |
the set of ids of the clustered events
Definition at line 67 of file EventCluster.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDs().
|
private |
the ids of the subset of clustered events that have at least one hash set hit
Definition at line 79 of file EventCluster.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithHashHits().
|
private |
the description level of detail that the events were clustered at.
Definition at line 62 of file EventCluster.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getDescriptionLevel(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().
|
private |
Definition at line 42 of file EventCluster.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster().
|
private |
the smallest time interval containing all the clustered events
Definition at line 47 of file EventCluster.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getSpan(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.merge().
|
private |
the ids of the subset of clustered events that have at least one tag applied to them
Definition at line 73 of file EventCluster.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventIDsWithTags().
|
private |
the type of all the clustered events
Definition at line 52 of file EventCluster.java.
Referenced by org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.equals(), org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.EventCluster(), and org.sleuthkit.autopsy.timeline.ui.detailview.datamodel.EventCluster.getEventType().
Copyright © 2012-2021 Basis Technology. Generated on: Tue Jan 19 2021
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.