19 package org.sleuthkit.autopsy.datamodel;
21 import java.beans.PropertyChangeEvent;
22 import java.beans.PropertyChangeListener;
23 import java.sql.ResultSet;
24 import java.sql.SQLException;
25 import java.util.ArrayList;
26 import java.util.HashMap;
27 import java.util.LinkedHashMap;
28 import java.util.List;
30 import java.util.Observable;
31 import java.util.Observer;
33 import java.util.logging.Level;
34 import org.openide.nodes.ChildFactory;
35 import org.openide.nodes.Children;
36 import org.openide.nodes.Node;
37 import org.openide.nodes.Sheet;
38 import org.openide.util.NbBundle;
39 import org.openide.util.lookup.Lookups;
76 private final Map<String, Map<String, List<Long>>>
accounts =
new LinkedHashMap<>();
84 return accounts.keySet();
90 return accounts.get(account).keySet();
96 return accounts.get(account).get(folder);
100 @SuppressWarnings(
"deprecation")
105 if (skCase == null) {
111 String query =
"SELECT value_text,blackboard_attributes.artifact_id,attribute_type_id "
112 +
"FROM blackboard_attributes,blackboard_artifacts WHERE "
113 +
"attribute_type_id=" + pathAttrId
114 +
" AND blackboard_attributes.artifact_id=blackboard_artifacts.artifact_id"
115 +
" AND blackboard_artifacts.artifact_type_id=" + artId;
118 ResultSet resultSet = dbQuery.getResultSet();
120 while (resultSet.next()) {
121 final String path = resultSet.getString(
"value_text");
122 final long artifactId = resultSet.getLong(
"artifact_id");
123 final Map<String, String> parsedPath =
parsePath(path);
124 final String account = parsedPath.get(MAIL_ACCOUNT);
125 final String folder = parsedPath.get(MAIL_FOLDER);
127 Map<String, List<Long>> folders = accounts.get(account);
128 if (folders == null) {
129 folders =
new LinkedHashMap<>();
130 accounts.put(account, folders);
132 List<Long> messages = folders.get(folder);
133 if (messages == null) {
134 messages =
new ArrayList<>();
135 folders.put(folder, messages);
137 messages.add(artifactId);
141 logger.log(Level.WARNING,
"Cannot initialize email extraction: ", ex);
148 Map<String, String> parsed =
new HashMap<>();
149 String[] split = path.split(MAIL_PATH_SEPARATOR);
150 if (split.length < 4) {
151 parsed.put(MAIL_ACCOUNT, NbBundle.getMessage(
EmailExtracted.class,
"EmailExtracted.defaultAcct.text"));
152 parsed.put(MAIL_FOLDER, NbBundle.getMessage(
EmailExtracted.class,
"EmailExtracted.defaultFolder.text"));
155 parsed.put(MAIL_ACCOUNT, split[2]);
156 parsed.put(MAIL_FOLDER, split[3]);
163 return v.
visit(
this);
173 super(Children.create(
new AccountFactory(),
true), Lookups.singleton(DISPLAY_NAME));
174 super.setName(LABEL_NAME);
175 super.setDisplayName(DISPLAY_NAME);
176 this.setIconBaseWithExtension(
"org/sleuthkit/autopsy/images/mail-icon-16.png");
187 return v.
visit(
this);
192 Sheet s = super.createSheet();
193 Sheet.Set ss = s.get(Sheet.PROPERTIES);
195 ss = Sheet.createPropertiesSet();
199 ss.put(
new NodeProperty<>(NbBundle.getMessage(
this.getClass(),
"EmailExtracted.createSheet.name.name"),
200 NbBundle.getMessage(
this.getClass(),
"EmailExtracted.createSheet.name.displayName"),
201 NbBundle.getMessage(
this.getClass(),
"EmailExtracted.createSheet.name.desc"),
209 return getClass().getName();
216 private class AccountFactory extends ChildFactory.Detachable<String> implements Observer {
222 private final PropertyChangeListener
pcl =
new PropertyChangeListener() {
224 public void propertyChange(PropertyChangeEvent evt) {
225 String eventType = evt.getPropertyName();
245 }
catch (IllegalStateException notUsed) {
261 }
catch (IllegalStateException notUsed) {
268 if (evt.getNewValue() == null) {
282 emailResults.addObserver(
this);
290 emailResults.deleteObserver(
this);
305 public void update(Observable o, Object arg) {
318 super(Children.create(
new FolderFactory(accountName),
true), Lookups.singleton(accountName));
319 super.setName(accountName);
321 this.setIconBaseWithExtension(
"org/sleuthkit/autopsy/images/account-icon-16.png");
323 emailResults.addObserver(
this);
327 super.setDisplayName(accountName +
" (" + emailResults.
getFolders(accountName) +
")");
332 Sheet s = super.createSheet();
333 Sheet.Set ss = s.get(Sheet.PROPERTIES);
335 ss = Sheet.createPropertiesSet();
339 ss.put(
new NodeProperty<>(NbBundle.getMessage(
this.getClass(),
"EmailExtracted.createSheet.name.name"),
340 NbBundle.getMessage(
this.getClass(),
"EmailExtracted.createSheet.name.displayName"),
341 NbBundle.getMessage(
this.getClass(),
"EmailExtracted.createSheet.name.desc"),
354 return v.
visit(
this);
358 public void update(Observable o, Object arg) {
364 return getClass().getName();
371 private class FolderFactory extends ChildFactory<String> implements Observer {
378 emailResults.addObserver(
this);
383 list.addAll(emailResults.
getFolders(accountName));
389 return new FolderNode(accountName, folderName);
393 public void update(Observable o, Object arg) {
407 super(Children.create(
new MessageFactory(accountName, folderName),
true), Lookups.singleton(accountName));
408 super.setName(folderName);
409 this.setIconBaseWithExtension(
"org/sleuthkit/autopsy/images/folder-icon-16.png");
413 emailResults.addObserver(
this);
417 super.setDisplayName(folderName +
" (" + emailResults.
getArtifactIds(accountName, folderName).size() +
")");
428 Sheet s = super.createSheet();
429 Sheet.Set ss = s.get(Sheet.PROPERTIES);
431 ss = Sheet.createPropertiesSet();
435 ss.put(
new NodeProperty<>(NbBundle.getMessage(
this.getClass(),
"EmailExtracted.createSheet.name.name"),
436 NbBundle.getMessage(
this.getClass(),
"EmailExtracted.createSheet.name.displayName"),
437 NbBundle.getMessage(
this.getClass(),
"EmailExtracted.createSheet.name.desc"),
445 return v.
visit(
this);
449 public void update(Observable o, Object arg) {
455 return getClass().getName();
471 emailResults.addObserver(
this);
476 list.addAll(emailResults.
getArtifactIds(accountName, folderName));
482 if (skCase == null) {
489 logger.log(Level.WARNING,
"Error creating mail messages nodes", ex);
495 public void update(Observable o, Object arg) {
BlackboardArtifact.Type getBlackboardArtifactType()
void removeIngestModuleEventListener(final PropertyChangeListener listener)
static synchronized IngestManager getInstance()
static void removePropertyChangeListener(PropertyChangeListener listener)
BlackboardArtifact getBlackboardArtifact(long artifactID)
T visit(DataSourcesNode in)
void removeIngestJobEventListener(final PropertyChangeListener listener)
void addIngestJobEventListener(final PropertyChangeListener listener)
static void addPropertyChangeListener(PropertyChangeListener listener)
void addIngestModuleEventListener(final PropertyChangeListener listener)
static Case getCurrentCase()
synchronized static Logger getLogger(String name)
CaseDbQuery executeQuery(String query)