Autopsy  4.18.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Public Attributes | Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary Class Reference

Inherits org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.

Public Member Functions

 AnalysisSummary ()
 
 AnalysisSummary (SleuthkitCaseProvider provider)
 
Set< Integer > getArtifactTypeIdsForRefresh ()
 
default Set< Case.Events > getCaseEventUpdates ()
 
List< Pair< String, Long > > getHashsetCounts (DataSource dataSource) throws SleuthkitCaseProviderException, TskCoreException
 
default Set< IngestJobEvent > getIngestJobEventUpdates ()
 
List< Pair< String, Long > > getInterestingItemCounts (DataSource dataSource) throws SleuthkitCaseProviderException, TskCoreException
 
List< Pair< String, Long > > getKeywordCounts (DataSource dataSource) throws SleuthkitCaseProviderException, TskCoreException
 
default boolean isRefreshRequired (ModuleDataEvent evt)
 
default boolean isRefreshRequired (ModuleContentEvent evt)
 
default boolean isRefreshRequired (IngestManager.IngestJobEvent evt)
 
default boolean isRefreshRequired (AbstractFile evt)
 
boolean isRefreshRequired (IngestJobEvent evt)
 
default boolean isRefreshRequiredForCaseEvent (PropertyChangeEvent evt)
 

Public Attributes

Set< IngestJobEvent > INGEST_JOB_EVENTS
 

Private Member Functions

List< Pair< String, Long > > getCountsData (DataSource dataSource, BlackboardAttribute.Type keyType, ARTIFACT_TYPE...artifactTypes) throws SleuthkitCaseProviderException, TskCoreException
 

Private Attributes

final SleuthkitCaseProvider provider
 

Static Private Attributes

static final Set< Integer > ARTIFACT_UPDATE_TYPE_IDS
 
static final Set< String > EXCLUDED_KEYWORD_SEARCH_ITEMS = new HashSet<>()
 
static final BlackboardAttribute.Type TYPE_SET_NAME = new BlackboardAttribute.Type(ATTRIBUTE_TYPE.TSK_SET_NAME)
 

Detailed Description

Providing data for the data source analysis tab.

Definition at line 45 of file AnalysisSummary.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.AnalysisSummary ( )
org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.AnalysisSummary ( SleuthkitCaseProvider  provider)

Main constructor.

Parameters
providerThe means of obtaining a sleuthkit case.

Definition at line 72 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.provider.

Member Function Documentation

Set<Integer> org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getArtifactTypeIdsForRefresh ( )
default Set<Case.Events> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.getCaseEventUpdates ( )
inherited
Returns
The set of Case Events for which data should be updated.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Definition at line 57 of file DefaultUpdateGovernor.java.

List<Pair<String, Long> > org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getCountsData ( DataSource  dataSource,
BlackboardAttribute.Type  keyType,
ARTIFACT_TYPE...  artifactTypes 
) throws SleuthkitCaseProviderException, TskCoreException
private

Get counts for the artifact of the specified type.

Parameters
dataSourceThe datasource.
keyTypeThe attribute to use as the key type.
artifactTypesThe types of artifacts for which to query.
Returns
A list of key value pairs where the key is the attribute type value and the value is the count of items found. This list is sorted by the count descending max to min.
Exceptions
SleuthkitCaseProviderException
TskCoreException

Definition at line 142 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.SleuthkitCaseProvider.get().

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getHashsetCounts(), org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getInterestingItemCounts(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getKeywordCounts().

List<Pair<String, Long> > org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getHashsetCounts ( DataSource  dataSource) throws SleuthkitCaseProviderException, TskCoreException

Gets counts for hashset hits.

Parameters
dataSourceThe datasource for which to identify hashset hits.
Returns
The hashset set name with the number of hits in descending order.
Exceptions
SleuthkitCaseProviderException
TskCoreException

Definition at line 91 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getCountsData(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.TYPE_SET_NAME.

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.AnalysisPanel.AnalysisPanel().

default Set<IngestJobEvent> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getIngestJobEventUpdates ( )
inherited
List<Pair<String, Long> > org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getInterestingItemCounts ( DataSource  dataSource) throws SleuthkitCaseProviderException, TskCoreException

Gets counts for interesting item hits.

Parameters
dataSourceThe datasource for which to identify interesting item hits.
Returns
The interesting item set name with the number of hits in descending order.
Exceptions
SleuthkitCaseProviderException
TskCoreException

Definition at line 124 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getCountsData(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.TYPE_SET_NAME.

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.AnalysisPanel.AnalysisPanel().

List<Pair<String, Long> > org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getKeywordCounts ( DataSource  dataSource) throws SleuthkitCaseProviderException, TskCoreException

Gets counts for keyword hits.

Parameters
dataSourceThe datasource for which to identify keyword hits.
Returns
The keyword set name with the number of hits in descending order.
Exceptions
SleuthkitCaseProviderException
TskCoreException

Definition at line 105 of file AnalysisSummary.java.

References org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getCountsData(), and org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.TYPE_SET_NAME.

Referenced by org.sleuthkit.autopsy.datasourcesummary.ui.AnalysisPanel.AnalysisPanel().

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.isRefreshRequired ( ModuleDataEvent  evt)
inherited

Given a module data event, whether or not an update should occur.

Parameters
evtThe ModuleDataEvent that is occurring.
Returns
Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.

Definition at line 38 of file DefaultArtifactUpdateGovernor.java.

References org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getArtifactTypeIdsForRefresh(), and org.sleuthkit.autopsy.ingest.ModuleDataEvent.getBlackboardArtifactType().

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.isRefreshRequired ( ModuleContentEvent  evt)
inherited

Given a module content event, whether or not an update should occur.

Parameters
evtThe ModuleContentEvent.
Returns
Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Implemented in org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.ContainerSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.MimeTypeSummary, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TypesSummary.

Definition at line 42 of file DefaultUpdateGovernor.java.

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.isRefreshRequired ( IngestManager.IngestJobEvent  evt)
inherited
default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.isRefreshRequired ( AbstractFile  evt)
inherited
boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.isRefreshRequired ( IngestJobEvent  evt)
inherited

Given an ingest job event, determines whether or not an update should occur.

Parameters
evtThe event.
Returns
Whether or not this event should trigger an update.

Implemented in org.sleuthkit.autopsy.datasourcesummary.datamodel.TimelineSummary, org.sleuthkit.autopsy.datasourcesummary.datamodel.MimeTypeSummary, and org.sleuthkit.autopsy.datasourcesummary.datamodel.TypesSummary.

default boolean org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultUpdateGovernor.isRefreshRequiredForCaseEvent ( PropertyChangeEvent  evt)
inherited

Given a case event, whether or not an update should occur.

Parameters
evtThe event.
Returns
Whether or not this event should trigger an update.

Implements org.sleuthkit.autopsy.datasourcesummary.uiutils.UpdateGovernor.

Definition at line 37 of file DefaultUpdateGovernor.java.

Member Data Documentation

final Set<Integer> org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.ARTIFACT_UPDATE_TYPE_IDS
staticprivate
Initial value:
= new HashSet<>(Arrays.asList(
ARTIFACT_TYPE.TSK_INTERESTING_FILE_HIT.getTypeID(),
ARTIFACT_TYPE.TSK_INTERESTING_ARTIFACT_HIT.getTypeID(),
ARTIFACT_TYPE.TSK_HASHSET_HIT.getTypeID(),
ARTIFACT_TYPE.TSK_KEYWORD_HIT.getTypeID()
))

Definition at line 51 of file AnalysisSummary.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.getArtifactTypeIdsForRefresh().

final Set<String> org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.EXCLUDED_KEYWORD_SEARCH_ITEMS = new HashSet<>()
staticprivate

Definition at line 49 of file AnalysisSummary.java.

Set<IngestJobEvent> org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.INGEST_JOB_EVENTS
inherited
Initial value:
= new HashSet<>(
Arrays.asList(IngestJobEvent.COMPLETED, IngestJobEvent.CANCELLED))

Definition at line 34 of file DefaultArtifactUpdateGovernor.java.

Referenced by org.sleuthkit.autopsy.datasourcesummary.uiutils.DefaultArtifactUpdateGovernor.getIngestJobEventUpdates().

final SleuthkitCaseProvider org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.provider
private
final BlackboardAttribute.Type org.sleuthkit.autopsy.datasourcesummary.datamodel.AnalysisSummary.TYPE_SET_NAME = new BlackboardAttribute.Type(ATTRIBUTE_TYPE.TSK_SET_NAME)
staticprivate

The documentation for this class was generated from the following file:

Copyright © 2012-2021 Basis Technology. Generated on: Thu Jul 8 2021
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.