Autopsy
4.18.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.
Public Member Functions | |
void | addNodeProperty (NodeProperty<?> property) |
Action[] | getActions (boolean context) |
BlackboardArtifact | getArtifact () |
T | getContent () |
List< Content > | getContentChildren () |
int | getContentChildrenCount () |
List< Long > | getContentChildrenIds () |
String | getItemType () |
String | getName () |
String | getSourceName () |
boolean | hasContentChildren () |
boolean | hasVisibleContentChildren () |
boolean | isLeafTypeNode () |
int | read (byte[] buf, long offset, long len) throws TskException |
void | setName (String name) |
Static Public Member Functions | |
static boolean | contentHasVisibleContentChildren (Content c) |
Protected Member Functions | |
final void | addCommentProperty (Sheet.Set sheetSet, List< Tag > tags, CorrelationAttributeInstance attribute) |
final void | addCountProperty (Sheet.Set sheetSet, CorrelationAttributeInstance attribute) |
final void | addScorePropertyAndDescription (Sheet.Set sheetSet, List< Tag > tags) |
void | addTagProperty (Sheet.Set sheetSet) throws MissingResourceException |
final void | addTagProperty (Sheet.Set sheetSet, List< Tag > tags) |
Sheet | createSheet () |
void | finalize () throws Throwable |
final List< Tag > | getAllTagsFromDatabase () |
DataResultViewerTable.HasCommentStatus | getCommentProperty (List< Tag > tags, CorrelationAttributeInstance attribute) |
final CorrelationAttributeInstance | getCorrelationAttributeInstance () |
Pair< Long, String > | getCountPropertyAndDescription (Type corrAttrType, String attributeValue, String defaultDescription) |
Pair< Score, String > | getScorePropertyAndDescription (List< Tag > tags) |
synchronized void | updateSheet (NodeProperty<?>...newProps) |
Protected Attributes | |
final T | content |
Static Protected Attributes | |
static final String | NO_DESCR |
static final String | VALUE_LOADING |
Private Member Functions | |
AccountArtifactNode (BlackboardArtifact artifact) | |
void | updateSheet () |
Private Attributes | |
final BlackboardArtifact | artifact |
Definition at line 1808 of file Accounts.java.
|
private |
Definition at line 1812 of file Accounts.java.
|
protectedinherited |
Adds the other occurrences property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
tags | The tags that have been applied to the artifact and its source content. |
attribute | The correlation attribute instance to use for the central repository lookup. |
Definition at line 1159 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCommentProperty(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
protectedinherited |
Adds the count property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
attribute | The correlation attribute instance to use for the central repository lookup. |
Definition at line 1137 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.getCountPropertyAndDescription().
|
inherited |
Adds a "custom" property to the property sheet of this node, indepoendent of the artifact this node represents or its source content.
property | The custom property. |
Definition at line 928 of file BlackboardArtifactNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode().
|
protectedinherited |
Adds the score property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
tags | The tags that have been applied to the artifact and its source content. |
Definition at line 1072 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.getScorePropertyAndDescription().
|
protectedinherited |
Adds the tags property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
Definition at line 1090 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager(), and org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
protectedinherited |
Adds the tags property for the artifact represented by this node to the node property sheet.
sheetSet | The property sheet. |
tags | The tags that have been applied to the artifact and its source content. |
Definition at line 1113 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.AbstractContentNode< BlackboardArtifact >.NO_DESCR.
|
staticinherited |
Return true if the given content object has children. Useful for lazy loading.
c | The content object to look for children on |
Definition at line 158 of file AbstractContentNode.java.
|
protected |
Definition at line 1832 of file Accounts.java.
|
protectedinherited |
Unregisters the application event listener when this node is garbage collected, if this finalizer is actually called.
RC: Isn't there some node lifecycle property change event that could be used to unregister the listener instead?
Throwable |
Definition at line 419 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.unregisterListener().
Action [] org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountArtifactNode.getActions | ( | boolean | context | ) |
Definition at line 1821 of file Accounts.java.
|
protectedinherited |
Gets all of the tags applied to the artifact represented by this node and its source content.
Definition at line 785 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.casemodule.services.TagsManager.getBlackboardArtifactTagsByArtifact(), org.sleuthkit.autopsy.casemodule.services.TagsManager.getContentTagsByContent(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCaseThrows(), org.sleuthkit.autopsy.casemodule.Case.getServices(), and org.sleuthkit.autopsy.casemodule.services.Services.getTagsManager().
|
inherited |
Gets the artifact represented by this node.
Definition at line 436 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.artifact.
Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.IsLeafItemVisitor.visit(), org.sleuthkit.autopsy.directorytree.DataResultFilterNode.GetPopupActionsDisplayableItemNodeVisitor.visit(), org.sleuthkit.autopsy.directorytree.DirectoryTreeFilterChildren.ShowItemVisitor.visit(), and org.sleuthkit.autopsy.directorytree.DataResultFilterNode.GetPreferredActionsDisplayableItemNodeVisitor.visit().
|
protectedinherited |
Computes the value of the comment property ("C" in S, C, O) for the artifact represented by this node.
An icon is displayed in the property sheet if a commented tag has been applied to the artifact or its source content, or if there is a corresponding commented correlation attribute instance in the central repository.
tags | The tags applied to the artifact and its source content. |
attribute | A correlation attribute instance Ffor the central repository lookup. |
Definition at line 829 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_AND_TAG_COMMENTS, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.CR_COMMENT, org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment(), org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.NO_COMMENT, org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_COMMENT, and org.sleuthkit.autopsy.corecomponents.DataResultViewerTable.HasCommentStatus.TAG_NO_COMMENT.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty().
|
inherited |
Return the content data associated with this node
Definition at line 126 of file AbstractContentNode.java.
|
inherited |
Return children of the underlying content.
Definition at line 238 of file AbstractContentNode.java.
|
inherited |
Get count of the underlying content object children.
Useful for lazy loading.
Definition at line 260 of file AbstractContentNode.java.
|
inherited |
Return ids of children of the underlying content. The ids can be treated as keys - useful for lazy loading.
Definition at line 218 of file AbstractContentNode.java.
|
protectedinherited |
Gets the correlation attribute for the MD5 hash of the source file of the artifact represented by this node. The correlation attribute instance can only be returned if the central repository is enabled and the source content is a file.
Definition at line 805 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeUtil.getCorrAttrForFile(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.isEnabled().
|
protectedinherited |
Computes the value of the other occurrences property ("O" in S, C, O) for the artifact represented by this node. The value of the other occurrences property is the number of other data sources this artifact appears in according to a correlation attribute instance lookup in the central repository, plus one for the data source for this instance of the artifact.
corrAttrType | The correlation attribute instance type to use for the central repsoitory lookup. |
attributeValue | The correlation attribute instane value to use for the central repsoitory lookup. |
defaultDescription | A default description. |
Definition at line 877 of file BlackboardArtifactNode.java.
References org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getCountUniqueCaseDataSourceTuplesHavingTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.Type.getDisplayName(), and org.sleuthkit.autopsy.centralrepository.datamodel.CentralRepository.getInstance().
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty().
|
inherited |
Definition at line 1043 of file BlackboardArtifactNode.java.
|
inherited |
Definition at line 136 of file AbstractContentNode.java.
|
protectedinherited |
Returns Score property for the node.
tags | list of tags. |
Definition at line 349 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addScorePropertyAndDescription().
|
inherited |
Gets the name of the source content of the artifact represented by this node.
Definition at line 494 of file BlackboardArtifactNode.java.
|
inherited |
Return true if the underlying content object has children Useful for lazy loading.
Definition at line 198 of file AbstractContentNode.java.
|
inherited |
Return true if the underlying content object has children Useful for lazy loading.
Definition at line 146 of file AbstractContentNode.java.
|
inherited |
Definition at line 1038 of file BlackboardArtifactNode.java.
|
inherited |
Reads the content of this node (of the underlying content object).
buf | buffer to read into |
offset | the starting offset in the content object |
len | the length to read |
TskException | exception thrown if the requested part of content could not be read |
Definition at line 286 of file AbstractContentNode.java.
|
inherited |
Definition at line 131 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::BlackboardArtifactNode().
|
protectedinherited |
Updates the values of the properties in the current property sheet with the new properties being passed in. Only if that property exists in the current sheet will it be applied. That way, we allow for subclasses to add their own (or omit some!) properties and we will not accidentally disrupt their UI.
Race condition if not synchronized. Only one update should be applied at a time.
newProps | New file property instances to be updated in the current sheet. |
Definition at line 303 of file AbstractContentNode.java.
|
private |
Definition at line 1858 of file Accounts.java.
|
private |
Definition at line 1810 of file Accounts.java.
|
protectedinherited |
Underlying Sleuth Kit Content object
Definition at line 63 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createLookup().
|
staticprotectedinherited |
Default no description string
Definition at line 78 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addCommentProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::addTagProperty(), and org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createSheet().
|
staticprotectedinherited |
Definition at line 79 of file AbstractContentNode.java.
Referenced by org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode::createSheet().
Copyright © 2012-2021 Basis Technology. Generated on: Thu Jul 8 2021
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.