Autopsy  4.18.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Public Member Functions | Static Private Member Functions | Static Private Attributes | List of all members
org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader Class Reference

Inherits Runnable.

Public Member Functions

void run ()
 

Static Private Member Functions

static void addCustomFile (Map< String, FilesSet > dest, FilesSet srcFilesSet)
 
static void copyOnNewer (Map< String, FilesSet > src, Map< String, FilesSet > dest)
 
static void copyOnNewer (Map< String, FilesSet > src, Map< String, FilesSet > dest, boolean appendCustom)
 
static void handleError (String message, Exception ex)
 
static Map< String, FilesSetreadStandardFileXML () throws FilesSetsManager.FilesSetsManagerException
 

Static Private Attributes

static final String CONFIG_DIR = "InterestingFileSetRules"
 
static final FilenameFilter DEFAULT_XML_FILTER
 
static final Logger LOGGER = Logger.getLogger(StandardInterestingFilesSetsLoader.class.getName())
 

Detailed Description

When the interesting items module loads, this runnable loads standard interesting file set rules.

Definition at line 40 of file StandardInterestingFilesSetsLoader.java.

Member Function Documentation

static void org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.addCustomFile ( Map< String, FilesSet dest,
FilesSet  srcFilesSet 
)
staticprivate

Adds an entry to the destination map where the name will be the same as the key with " (custom)" appended.

Parameters
destThe destination map.
srcFilesSetThe FilesSet to append as custom. A non-readonly filesset must be provided.

Definition at line 222 of file StandardInterestingFilesSetsLoader.java.

References org.sleuthkit.autopsy.modules.interestingitems.FilesSet.getName().

Referenced by org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.copyOnNewer().

static void org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.copyOnNewer ( Map< String, FilesSet src,
Map< String, FilesSet dest 
)
staticprivate

Copies the entries in the src map to the destination map if the src item has a newer version than what is in dest or no equivalent entry exists within the dest map.

Parameters
srcThe source map.
destThe destination map.

Definition at line 170 of file StandardInterestingFilesSetsLoader.java.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.readStandardFileXML(), and org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.run().

static void org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.copyOnNewer ( Map< String, FilesSet src,
Map< String, FilesSet dest,
boolean  appendCustom 
)
staticprivate

Copies the entries in the src map to the destination map if the src item has a newer version than what is in dest or no equivalent entry exists within the dest map.

Parameters
srcThe source map.
destThe destination map.
appendCustomOn conflict, if one of the items is readonly and one is not, this flag can be set so the item that is not readonly will have " (custom)" appended.

Definition at line 185 of file StandardInterestingFilesSetsLoader.java.

References org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.addCustomFile().

static void org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.handleError ( String  message,
Exception  ex 
)
staticprivate

Responsible for handling top level exceptions and displaying to the user.

Parameters
messageThe message to display and log.
exThe exception (if any) to log.

Definition at line 95 of file StandardInterestingFilesSetsLoader.java.

References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Message.error(), and org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI.

Referenced by org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.run().

static Map<String, FilesSet> org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.readStandardFileXML ( ) throws FilesSetsManager.FilesSetsManagerException
staticprivate

Reads xml definitions for each file found in the standard interesting file set config directory and marks the files set as a standard interesting file if it isn't already.

Returns
The mapping of files set keys to the file sets.

Definition at line 109 of file StandardInterestingFilesSetsLoader.java.

References org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.copyOnNewer(), and org.sleuthkit.autopsy.modules.interestingitems.FilesSet.getName().

Referenced by org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.run().

void org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.run ( )

Member Data Documentation

final String org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.CONFIG_DIR = "InterestingFileSetRules"
staticprivate

Definition at line 44 of file StandardInterestingFilesSetsLoader.java.

final FilenameFilter org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.DEFAULT_XML_FILTER
staticprivate
Initial value:
= new FilenameFilter() {
@Override
public boolean accept(File dir, String name) {
return name.endsWith(".xml");
}
}

Definition at line 46 of file StandardInterestingFilesSetsLoader.java.

final Logger org.sleuthkit.autopsy.modules.interestingitems.StandardInterestingFilesSetsLoader.LOGGER = Logger.getLogger(StandardInterestingFilesSetsLoader.class.getName())
staticprivate

Definition at line 42 of file StandardInterestingFilesSetsLoader.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2021 Basis Technology. Generated on: Thu Jul 8 2021
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.