Autopsy  4.18.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Static Public Member Functions | Protected Member Functions | Protected Attributes | Static Protected Attributes | Private Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode Class Reference

Inherits org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.

Public Member Functions

void addNodeProperty (NodeProperty<?> property)
 
Action[] getActions (boolean context)
 
BlackboardArtifact getArtifact ()
 
getContent ()
 
List< Content > getContentChildren ()
 
int getContentChildrenCount ()
 
List< Long > getContentChildrenIds ()
 
String getItemType ()
 
String getName ()
 
String getSourceName ()
 
boolean hasContentChildren ()
 
boolean hasVisibleContentChildren ()
 
boolean isLeafTypeNode ()
 
int read (byte[] buf, long offset, long len) throws TskException
 
void setName (String name)
 

Static Public Member Functions

static boolean contentHasVisibleContentChildren (Content c)
 

Protected Member Functions

final void addCommentProperty (Sheet.Set sheetSet, List< Tag > tags, CorrelationAttributeInstance attribute)
 
final void addCountProperty (Sheet.Set sheetSet, CorrelationAttributeInstance attribute)
 
final void addScorePropertyAndDescription (Sheet.Set sheetSet, List< Tag > tags)
 
void addTagProperty (Sheet.Set sheetSet) throws MissingResourceException
 
final void addTagProperty (Sheet.Set sheetSet, List< Tag > tags)
 
Sheet createSheet ()
 
void finalize () throws Throwable
 
final List< Tag > getAllTagsFromDatabase ()
 
DataResultViewerTable.HasCommentStatus getCommentProperty (List< Tag > tags, CorrelationAttributeInstance attribute)
 
final CorrelationAttributeInstance getCorrelationAttributeInstance ()
 
Pair< Long, String > getCountPropertyAndDescription (Type corrAttrType, String attributeValue, String defaultDescription)
 
Pair< Score, String > getScorePropertyAndDescription (List< Tag > tags)
 
synchronized void updateSheet (NodeProperty<?>...newProps)
 

Protected Attributes

final T content
 

Static Protected Attributes

static final String NO_DESCR
 
static final String VALUE_LOADING
 

Private Member Functions

 AccountArtifactNode (BlackboardArtifact artifact)
 
void updateSheet ()
 

Private Attributes

final BlackboardArtifact artifact
 

Detailed Description

Definition at line 1808 of file Accounts.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.AccountArtifactNode ( BlackboardArtifact  artifact)
private

Definition at line 1812 of file Accounts.java.

Member Function Documentation

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty ( Sheet.Set  sheetSet,
List< Tag >  tags,
CorrelationAttributeInstance  attribute 
)
protectedinherited

Adds the other occurrences property for the artifact represented by this node to the node property sheet.

Parameters
sheetSetThe property sheet.
tagsThe tags that have been applied to the artifact and its source content.
attributeThe correlation attribute instance to use for the central repository lookup.
Deprecated:
Do not use. The other occurrences property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1159 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty ( Sheet.Set  sheetSet,
CorrelationAttributeInstance  attribute 
)
protectedinherited

Adds the count property for the artifact represented by this node to the node property sheet.

Parameters
sheetSetThe property sheet.
attributeThe correlation attribute instance to use for the central repository lookup.
Deprecated:
Do not use. The count property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1137 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addNodeProperty ( NodeProperty<?>  property)
inherited

Adds a "custom" property to the property sheet of this node, indepoendent of the artifact this node represents or its source content.

Parameters
propertyThe custom property.

Definition at line 928 of file BlackboardArtifactNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode().

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addScorePropertyAndDescription ( Sheet.Set  sheetSet,
List< Tag >  tags 
)
protectedinherited

Adds the score property for the artifact represented by this node to the node property sheet.

Parameters
sheetSetThe property sheet.
tagsThe tags that have been applied to the artifact and its source content.
Deprecated:
Do not use. The score property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1072 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.getScorePropertyAndDescription().

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty ( Sheet.Set  sheetSet) throws MissingResourceException
protectedinherited

Adds the tags property for the artifact represented by this node to the node property sheet.

Parameters
sheetSetThe property sheet.
Deprecated:
Do not use. The tags property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1090 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

final void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addTagProperty ( Sheet.Set  sheetSet,
List< Tag >  tags 
)
protectedinherited

Adds the tags property for the artifact represented by this node to the node property sheet.

Parameters
sheetSetThe property sheet.
tagsThe tags that have been applied to the artifact and its source content.
Deprecated:
Do not use. The tags property is now computed in a background thread and added to the property sheet via property change event.

Definition at line 1113 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.

static boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.contentHasVisibleContentChildren ( Content  c)
staticinherited

Return true if the given content object has children. Useful for lazy loading.

Parameters
cThe content object to look for children on
Returns
true if has children

Definition at line 158 of file AbstractContentNode.java.

Sheet org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.createSheet ( )
protected

Definition at line 1832 of file Accounts.java.

void org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.finalize ( ) throws Throwable
protectedinherited

Unregisters the application event listener when this node is garbage collected, if this finalizer is actually called.

RC: Isn't there some node lifecycle property change event that could be used to unregister the listener instead?

Exceptions
Throwable

Definition at line 419 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener().

Action [] org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.getActions ( boolean  context)

Definition at line 1821 of file Accounts.java.

final List<Tag> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getAllTagsFromDatabase ( )
protectedinherited
BlackboardArtifact org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getArtifact ( )
inherited
DataResultViewerTable.HasCommentStatus org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty ( List< Tag >  tags,
CorrelationAttributeInstance  attribute 
)
protectedinherited

Computes the value of the comment property ("C" in S, C, O) for the artifact represented by this node.

An icon is displayed in the property sheet if a commented tag has been applied to the artifact or its source content, or if there is a corresponding commented correlation attribute instance in the central repository.

Parameters
tagsThe tags applied to the artifact and its source content.
attributeA correlation attribute instance Ffor the central repository lookup.
Returns
The value of the comment property.

Definition at line 829 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_AND_TAG_COMMENTS, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_COMMENT, org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment(), org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.NO_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_COMMENT, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_NO_COMMENT.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty().

T org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContent ( )
inherited

Return the content data associated with this node

Returns
the content object wrapped by this node

Definition at line 126 of file AbstractContentNode.java.

List<Content> org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildren ( )
inherited

Return children of the underlying content.

Returns
list of content children content.

Definition at line 238 of file AbstractContentNode.java.

int org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildrenCount ( )
inherited

Get count of the underlying content object children.

Useful for lazy loading.

Returns
content children count

Definition at line 260 of file AbstractContentNode.java.

List<Long> org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getContentChildrenIds ( )
inherited

Return ids of children of the underlying content. The ids can be treated as keys - useful for lazy loading.

Returns
list of content ids of children content.

Definition at line 218 of file AbstractContentNode.java.

final CorrelationAttributeInstance org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCorrelationAttributeInstance ( )
protectedinherited

Gets the correlation attribute for the MD5 hash of the source file of the artifact represented by this node. The correlation attribute instance can only be returned if the central repository is enabled and the source content is a file.

Returns
The correlation attribute instance, may be null.

Definition at line 805 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.getCorrAttrForFile(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.isEnabled().

Pair<Long, String> org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription ( Type  corrAttrType,
String  attributeValue,
String  defaultDescription 
)
protectedinherited

Computes the value of the other occurrences property ("O" in S, C, O) for the artifact represented by this node. The value of the other occurrences property is the number of other data sources this artifact appears in according to a correlation attribute instance lookup in the central repository, plus one for the data source for this instance of the artifact.

Parameters
corrAttrTypeThe correlation attribute instance type to use for the central repsoitory lookup.
attributeValueThe correlation attribute instane value to use for the central repsoitory lookup.
defaultDescriptionA default description.
Returns
The value of the occurrences property as a data sources count and a description string.

Definition at line 877 of file BlackboardArtifactNode.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getCountUniqueCaseDataSourceTuplesHavingTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.Type.getDisplayName(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getInstance().

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getItemType ( )
inherited

Definition at line 1043 of file BlackboardArtifactNode.java.

String org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getName ( )
inherited

Definition at line 136 of file AbstractContentNode.java.

Pair<Score, String> org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.getScorePropertyAndDescription ( List< Tag >  tags)
protectedinherited

Returns Score property for the node.

Parameters
tagslist of tags.
Returns
Score property for the underlying content of the node.

Definition at line 349 of file AbstractContentNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addScorePropertyAndDescription().

String org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getSourceName ( )
inherited

Gets the name of the source content of the artifact represented by this node.

Returns
The source content name.

Definition at line 494 of file BlackboardArtifactNode.java.

boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.hasContentChildren ( )
inherited

Return true if the underlying content object has children Useful for lazy loading.

Returns
true if has children

Definition at line 198 of file AbstractContentNode.java.

boolean org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.hasVisibleContentChildren ( )
inherited

Return true if the underlying content object has children Useful for lazy loading.

Returns
true if has children

Definition at line 146 of file AbstractContentNode.java.

boolean org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.isLeafTypeNode ( )
inherited

Definition at line 1038 of file BlackboardArtifactNode.java.

int org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.read ( byte[]  buf,
long  offset,
long  len 
) throws TskException
inherited

Reads the content of this node (of the underlying content object).

Parameters
bufbuffer to read into
offsetthe starting offset in the content object
lenthe length to read
Returns
the bytes read
Exceptions
TskExceptionexception thrown if the requested part of content could not be read

Definition at line 286 of file AbstractContentNode.java.

void org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.setName ( String  name)
inherited
synchronized void org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.updateSheet ( NodeProperty<?>...  newProps)
protectedinherited

Updates the values of the properties in the current property sheet with the new properties being passed in. Only if that property exists in the current sheet will it be applied. That way, we allow for subclasses to add their own (or omit some!) properties and we will not accidentally disrupt their UI.

Race condition if not synchronized. Only one update should be applied at a time.

Parameters
newPropsNew file property instances to be updated in the current sheet.

Definition at line 303 of file AbstractContentNode.java.

void org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.updateSheet ( )
private

Definition at line 1858 of file Accounts.java.

Member Data Documentation

final BlackboardArtifact org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.artifact
private

Definition at line 1810 of file Accounts.java.

final T org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.content
protectedinherited

Underlying Sleuth Kit Content object

Definition at line 63 of file AbstractContentNode.java.

Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createLookup().

final String org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.NO_DESCR
staticprotectedinherited
final String org.sleuthkit.autopsy.datamodel.AbstractContentNode< T extends Content >.VALUE_LOADING
staticprotectedinherited

The documentation for this class was generated from the following file:

Copyright © 2012-2021 Basis Technology. Generated on: Thu Jul 8 2021
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.