Autopsy
4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
class | CancelButtonListener |
enum | CaseType |
enum | Events |
Public Member Functions | |
Image | addImage (String imgPath, long imgId, String timeZone) throws CaseActionException |
void | addReport (String localPath, String srcModuleName, String reportName) throws TskCoreException |
void | closeCase () throws CaseActionException |
void | deleteReports (Collection<?extends Report > reports) throws TskCoreException |
void | deleteReports (Collection<?extends Report > reports, boolean deleteFromDisk) throws TskCoreException |
List< Report > | getAllReports () throws TskCoreException |
String | getCacheDirectory () |
String | getCaseDirectory () |
CaseType | getCaseType () |
String | getCreatedDate () |
List< Content > | getDataSources () throws TskCoreException |
String | getDisplayName () |
String | getExaminer () |
String | getExportDirectory () |
String | getLogDirectoryPath () |
String | getModuleDirectory () |
String | getModuleOutputDirectoryRelativePath () |
String | getModulesOutputDirAbsPath () |
String | getName () |
String | getNumber () |
String | getOutputDirectory () |
String | getReportDirectory () |
Services | getServices () |
SleuthkitCase | getSleuthkitCase () |
String | getTempDirectory () |
String | getTextIndexName () |
Set< TimeZone > | getTimeZone () |
Set< TimeZone > | getTimeZones () |
boolean | hasData () |
void | notifyAddingDataSource (UUID eventId) |
void | notifyBlackBoardArtifactTagAdded (BlackboardArtifactTag newTag) |
void | notifyBlackBoardArtifactTagDeleted (BlackboardArtifactTag deletedTag) |
void | notifyContentTagAdded (ContentTag newTag) |
void | notifyContentTagDeleted (ContentTag deletedTag) |
void | notifyDataSourceAdded (Content dataSource, UUID addingDataSourceEventId) |
void | notifyFailedAddingDataSource (UUID addingDataSourceEventId) |
void | setTextIndexName (String textIndexName) throws CaseMetadataException |
Static Public Member Functions | |
static void | addEventSubscriber (Set< String > eventNames, PropertyChangeListener subscriber) |
static void | addEventSubscriber (String eventName, PropertyChangeListener subscriber) |
static void | addPropertyChangeListener (PropertyChangeListener listener) |
static void | closeCurrentCase () throws CaseActionException |
static String | convertTimeZone (String timeZoneId) |
static void | create (String caseDir, String caseDisplayName, String caseNumber, String examiner) throws CaseActionException |
static void | create (String caseDir, String caseDisplayName, String caseNumber, String examiner, CaseType caseType) throws CaseActionException |
static void | createAsCurrentCase (String caseDir, String caseDisplayName, String caseNumber, String examiner, CaseType caseType) throws CaseActionException |
static void | deleteCase (CaseMetadata metadata) throws CaseActionException |
static void | deleteCurrentCase () throws CaseActionException |
static boolean | existsCurrentCase () |
static String | getAutopsyVersion () |
static Case | getCurrentCase () |
static String | getModulesOutputDirRelPath () |
static PropertyChangeSupport | getPropertyChangeSupport () |
static void | invokeStartupDialog () |
static boolean | isCaseOpen () |
static boolean | isValidName (String caseName) |
static void | open (String caseMetadataFilePath) throws CaseActionException |
static void | openAsCurrentCase (String caseMetadataFilePath) throws CaseActionException |
static boolean | pathExists (String filePath) |
static void | removeEventSubscriber (String eventName, PropertyChangeListener subscriber) |
static void | removeEventSubscriber (Set< String > eventNames, PropertyChangeListener subscriber) |
static void | removePropertyChangeListener (PropertyChangeListener listener) |
Private Member Functions | |
Case () | |
void | acquireSharedCaseDirLock (String caseDir) throws CaseActionException |
void | close () throws CaseActionException |
void | close (ProgressIndicator progressIndicator) |
void | closeAppServiceCaseResources () |
void | create (CaseType caseType, String caseDir, String caseDisplayName, String caseNumber, String examiner) throws CaseActionException |
void | create (CaseType caseType, String caseDir, String caseDisplayName, String caseNumber, String examiner, ProgressIndicator progressIndicator) throws CaseActionException |
String | getOrCreateSubdirectory (String subDirectoryName) |
void | open (Path caseMetadataFilePath) throws CaseActionException |
void | openAppServiceCaseResources () throws CaseActionException |
void | openCaseDatabase (ProgressIndicator progressIndicator) throws CaseActionException |
void | openServices (ProgressIndicator progressIndicator) throws CaseActionException |
void | releaseSharedCaseDirLock (String caseDir) |
Static Private Member Functions | |
static CoordinationService.Lock | acquireExclusiveCaseResourcesLock (String caseDir) throws CaseActionException |
static void | addCaseNameToMainWindowTitle (String caseName) |
static void | cleanupDeletedCase (CaseMetadata metadata, ProgressIndicator progressIndicator) |
static void | clearTempSubDir (String tempSubDirPath) |
static String | displayNameToUniqueName (String caseDisplayName) |
static void | getMainWindowAndAppName () throws CaseActionException |
static void | updateGUIForCaseClosed () |
static void | updateGUIForCaseOpened (Case newCurrentCase) |
Private Attributes | |
SleuthkitCase | caseDb |
CoordinationService.Lock | caseDirLock |
ExecutorService | caseLockingExecutor |
CaseMetadata | caseMetadata |
Services | caseServices |
CollaborationMonitor | collaborationMonitor |
boolean | hasDataSources |
SleuthkitErrorReporter | sleuthkitErrorReporter |
Static Private Attributes | |
static String | appName |
static final String | CACHE_FOLDER = "Cache" |
static volatile Case | currentCase |
static final Object | currentCaseWriteLock = new Object() |
static final int | DIR_LOCK_TIMOUT_HOURS = 12 |
static final String | EVENT_CHANNEL_NAME = "%s-Case-Events" |
static final AutopsyEventPublisher | eventPublisher = new AutopsyEventPublisher() |
static final String | EXPORT_FOLDER = "Export" |
static final String | LOG_FOLDER = "Log" |
static final Logger | logger = Logger.getLogger(Case.class.getName()) |
static Frame | mainFrame |
static final int | MIN_SECS_BETWEEN_TSK_ERROR_REPORTS = 60 |
static final String | MODULE_FOLDER = "ModuleOutput" |
static final String | REPORTS_FOLDER = "Reports" |
static final int | RESOURCES_LOCK_TIMOUT_HOURS = 12 |
static final String | SINGLE_USER_CASE_DB_NAME = "autopsy.db" |
static final String | TEMP_FOLDER = "Temp" |
An Autopsy case. Currently, only one case at a time may be open.
|
private |
Constructs an Autopsy case.
Definition at line 1544 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
staticprivate |
Acquires an exclusive case resources lock.
caseDir | The full path of the case directory. |
CaseActionException | with a user-friendly message if the lock cannot be acquired. |
Definition at line 933 of file Case.java.
References org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), and org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetExclusiveLock().
|
private |
Acquires a shared case directory lock for the current case.
caseDir | The full path of the case directory. |
CaseActionException | with a user-friendly message if the lock cannot be acquired. |
Definition at line 2289 of file Case.java.
References org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), and org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetSharedLock().
|
staticprivate |
Changes the title of the main window to include the case name.
caseName | The name of the case. |
Definition at line 1090 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
|
static |
Adds a subscriber to specific case events.
eventNames | The events the subscriber is interested in. |
subscriber | The subscriber (PropertyChangeListener) to add. |
Definition at line 396 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().
Referenced by org.sleuthkit.autopsy.casemodule.Case.addPropertyChangeListener(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToCaseEvents(), and org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.subscribeToChangeEvents().
|
static |
Adds a subscriber to specific case events.
eventName | The event the subscriber is interested in. |
subscriber | The subscriber (PropertyChangeListener) to add. |
Definition at line 406 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.addSubscriber().
Image org.sleuthkit.autopsy.casemodule.Case.addImage | ( | String | imgPath, |
long | imgId, | ||
String | timeZone | ||
) | throws CaseActionException |
Adds an image to the current case after it has been added to the DB. Sends out event and reopens windows if needed.
imgPath | The path of the image file. |
imgId | The ID of the image. |
timeZone | The time zone of the image. |
|
static |
Adds a subscriber to all case events. To subscribe to only specific events, use one of the overloads of addEventSubscriber.
listener | The subscriber (PropertyChangeListener) to add. |
Definition at line 372 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.addEventSubscriber().
Referenced by org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.addNotify(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.ExtractedContent.TypeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.addNotify(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.addNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountsRootNode.AccountTypeFactory.addNotify(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.addNotify(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.BlackboardArtifactNode(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.FileTypesByExtObservable(), org.sleuthkit.autopsy.datamodel.ImageNode.ImageNode(), org.sleuthkit.autopsy.report.ReportWizardAction.ReportWizardAction(), and org.sleuthkit.autopsy.datamodel.VolumeNode.VolumeNode().
void org.sleuthkit.autopsy.casemodule.Case.addReport | ( | String | localPath, |
String | srcModuleName, | ||
String | reportName | ||
) | throws TskCoreException |
Adds a report to the case.
localPath | The path of the report file, must be in the case directory or one of its subdirectories. |
srcModuleName | The name of the module that created the report. |
reportName | The report name, may be empty. |
TskCoreException | if there is a problem adding the report to the case database. |
Definition at line 1466 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.modules.stix.STIXReportModule.generateReport(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importReports(), and org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport().
|
staticprivate |
Deletes the case directory of a deleted case and removes the case form the Recent Cases menu.
metadata | The case metadata. |
progressIndicator | A progress indicator. |
Definition at line 903 of file Case.java.
References org.sleuthkit.autopsy.coreutils.FileUtil.deleteDir(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.framework.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteCase().
|
staticprivate |
Empties the temp subdirectory for the current case.
Definition at line 1100 of file Case.java.
References org.sleuthkit.autopsy.coreutils.FileUtil.deleteDir().
Referenced by org.sleuthkit.autopsy.casemodule.Case.openServices().
|
private |
Closes the case.
progressIndicator | A progress indicator. |
Definition at line 2094 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.mainFrame, org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.framework.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase().
|
private |
Definition at line 2167 of file Case.java.
References org.sleuthkit.autopsy.ingest.IngestManager.cancelAllIngestJobs(), org.sleuthkit.autopsy.ingest.IngestJob.CancellationReason.CASE_CLOSED, org.sleuthkit.autopsy.events.AutopsyEventPublisher.closeRemoteEventChannel(), org.sleuthkit.autopsy.ingest.IngestManager.getInstance(), org.sleuthkit.autopsy.coreutils.PlatformUtil.getLogDirectory(), org.sleuthkit.autopsy.framework.ProgressIndicator.progress(), and org.sleuthkit.autopsy.coreutils.Logger.setLogDirectory().
|
private |
Allows any registered application-level services to close any resources specific to this case.
Definition at line 2226 of file Case.java.
References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), org.sleuthkit.autopsy.casemodule.Case.logger, org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.framework.ProgressIndicator.start().
void org.sleuthkit.autopsy.casemodule.Case.closeCase | ( | ) | throws CaseActionException |
Closes this Autopsy case.
CaseActionException | if there is a problem closing the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
|
static |
Closes the current case if there is a current case.
IMPORTANT: This method should not be called in the event dispatch thread (EDT).
CaseActionException |
Definition at line 579 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.close(), org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, org.sleuthkit.autopsy.casemodule.Case.currentCase, org.sleuthkit.autopsy.casemodule.Case.currentCaseWriteLock, org.sleuthkit.autopsy.events.AutopsyEventPublisher.publishLocally(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseClosed().
Referenced by org.sleuthkit.autopsy.actions.ExitAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.CaseCloseAction.actionPerformed(), org.sleuthkit.autopsy.core.Installer.closing(), org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.deleteCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
static |
Converts a Java timezone id to a coded string with only alphanumeric characters. Example: "America/New_York" is converted to "EST5EDT" by this method.
timeZoneId | The time zone id. |
Definition at line 2459 of file Case.java.
References org.sleuthkit.autopsy.coreutils.TimeZoneUtils.convertToAlphaNumericFormat().
|
private |
caseType | The type of case (single-user or multi-user). |
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDisplayName | The display name of case, which may be changed later by the user. |
caseNumber | The case number, can be the empty string. |
examiner | The examiner to associate with the case, can be the empty string. |
CaseActionException | if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 1570 of file Case.java.
References org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.framework.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase().
|
private |
Creates a new case.
caseType | The type of case (single-user or multi-user). |
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseName | The case name. |
caseDisplayName | The display name of case, which may be changed later by the user. |
caseNumber | The case number, can be the empty string. |
examiner | The examiner to associate with the case, can be the empty string. |
progressIndicator | A progress indicator. |
CaseActionException | if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 1691 of file Case.java.
References org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org::sleuthkit::datamodel::SleuthkitCase.getDatabaseName(), org::sleuthkit::datamodel::SleuthkitCase.newCase(), and org.sleuthkit.autopsy.framework.ProgressIndicator.progress().
|
static |
Creates a new, single-user Autopsy case.
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDisplayName | The display name of case, which may be changed later by the user. |
caseNumber | The case number, can be the empty string. |
examiner | The examiner to associate with the case, can be the empty string. |
CaseActionException | if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
|
static |
Creates a new Autopsy case and makes it the current case.
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDisplayName | The display name of case, which may be changed later by the user. |
caseNumber | The case number, can be the empty string. |
examiner | The examiner to associate with the case, can be the empty string. |
caseType | The type of case (single-user or multi-user). |
CaseActionException | if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
|
static |
Creates a new case and makes it the current case.
IMPORTANT: This method should not be called in the event dispatch thread (EDT).
caseDir | The full path of the case directory. The directory will be created if it doesn't already exist; if it exists, it is ASSUMED it was created by calling createCaseDirectory. |
caseDisplayName | The display name of case, which may be changed later by the user. |
caseNumber | The case number, can be the empty string. |
examiner | The examiner to associate with the case, can be the empty string. |
caseType | The type of case (single-user or multi-user). |
CaseActionException | if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 469 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.Case(), org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.create(), org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, org.sleuthkit.autopsy.casemodule.Case.currentCaseWriteLock, org.sleuthkit.autopsy.casemodule.Case.getMainWindowAndAppName(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.publishLocally(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
|
static |
Deletes a case. This method cannot be used to delete the current case; deleting the current case must be done by calling Case.deleteCurrentCase.
metadata | The metadata for the case to delete. |
CaseActionException | if there is a problem deleting the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 647 of file Case.java.
References org.sleuthkit.autopsy.coordinationservice.CoordinationService.CategoryNode.CASES, org.sleuthkit.autopsy.casemodule.Case.cleanupDeletedCase(), org.sleuthkit.autopsy.casemodule.Case.currentCaseWriteLock, org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDatabaseName(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType(), org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org::sleuthkit::datamodel::CaseDbConnectionInfo.getHost(), org.sleuthkit.autopsy.coordinationservice.CoordinationService.getInstance(), org::sleuthkit::datamodel::CaseDbConnectionInfo.getPassword(), org::sleuthkit::datamodel::CaseDbConnectionInfo.getPort(), org::sleuthkit::datamodel::CaseDbConnectionInfo.getUserName(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.framework.ProgressIndicator.start(), and org.sleuthkit.autopsy.coordinationservice.CoordinationService.tryGetExclusiveLock().
Referenced by org.sleuthkit.autopsy.casemodule.Case.deleteCurrentCase().
|
static |
Deletes the current case.
IMPORTANT: This method should not be called in the event dispatch thread (EDT).
CaseActionException | if there is a problem deleting the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 616 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.currentCaseWriteLock, and org.sleuthkit.autopsy.casemodule.Case.deleteCase().
void org.sleuthkit.autopsy.casemodule.Case.deleteReports | ( | Collection<?extends Report > | reports | ) | throws TskCoreException |
Deletes one or more reports from the case database. Does not delete the report files.
reports | The report(s) to be deleted from the case. |
TskCoreException | if there is an error deleting the report(s). |
Definition at line 1498 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish(), and org.sleuthkit.autopsy.casemodule.Case.Events.REPORT_DELETED.
Referenced by org.sleuthkit.autopsy.datamodel.Reports.ReportNode.DeleteReportAction.actionPerformed().
void org.sleuthkit.autopsy.casemodule.Case.deleteReports | ( | Collection<?extends Report > | reports, |
boolean | deleteFromDisk | ||
) | throws TskCoreException |
Deletes reports from the case.
reports | Collection of Report to be deleted from the case. |
deleteFromDisk | No longer supported - ignored. |
TskCoreException |
|
staticprivate |
|
static |
List<Report> org.sleuthkit.autopsy.casemodule.Case.getAllReports | ( | ) | throws TskCoreException |
Gets the reports that have been added to the case.
TskCoreException | if there is a problem querying the case database. |
Definition at line 1486 of file Case.java.
Referenced by org.sleuthkit.autopsy.datamodel.Reports.ReportNodeFactory.createKeys().
|
static |
Gets the Autopsy version.
Definition at line 2486 of file Case.java.
References org.sleuthkit.autopsy.coreutils.Version.getVersion().
String org.sleuthkit.autopsy.casemodule.Case.getCacheDirectory | ( | ) |
Gets the full path to the cache directory for this case, creating it if it does not exist.
Definition at line 1235 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.coreutils.ImageUtils.getCachedThumbnailLocation().
String org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory | ( | ) |
Gets the path to the top-level case directory.
Definition at line 1193 of file Case.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.SolrSearchService.closeCaseResources(), org.sleuthkit.autopsy.ingest.IngestMonitor.MonitorTimerAction.findRootDirectoryForCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.getPathRelativeToCaseFolder(), and org.sleuthkit.autopsy.keywordsearch.SolrSearchService.openCaseResources().
CaseType org.sleuthkit.autopsy.casemodule.Case.getCaseType | ( | ) |
Gets the case type.
Definition at line 1139 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseType().
Referenced by org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath(), org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory(), org.sleuthkit.autopsy.ingest.IngestManager.startIngestJob(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToServiceMonitorEvents(), and org.sleuthkit.autopsy.casemodule.ImageFilePanel.warnIfPathIsInvalid().
String org.sleuthkit.autopsy.casemodule.Case.getCreatedDate | ( | ) |
|
static |
Gets the current case, if there is one, at the time of the call.
IllegalStateException | if there is no current case. |
Definition at line 558 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.currentCase.
Referenced by org.sleuthkit.autopsy.actions.AddBookmarkTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteContentTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteBlackboardArtifactTagAction.actionPerformed(), org.sleuthkit.autopsy.directorytree.ExternalViewerAction.actionPerformed(), org.sleuthkit.autopsy.datamodel.Reports.ReportNode.DeleteReportAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag(), org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.addTag(), org.sleuthkit.autopsy.actions.AddContentTagAction.addTag(), org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< VirtualDirectory >.addTagProperty(), org.sleuthkit.autopsy.corecomponents.DataContentTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose(), org.sleuthkit.autopsy.casemodule.ImageDSProcessor.canProcess(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), org.sleuthkit.autopsy.timeline.explorernodes.EventNode.createEventNode(), org.sleuthkit.autopsy.datamodel.Reports.ReportNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.VirtualDirectoryNode.createSheet(), org.sleuthkit.autopsy.datamodel.ImageNode.createSheet(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag(), org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeDetector.detect(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeDetector.detectUserDefinedType(), org.sleuthkit.autopsy.actions.GetTagNameDialog.display(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.display(), org.sleuthkit.autopsy.directorytree.ExtractAction.extractFile(), org.sleuthkit.autopsy.directorytree.ExtractAction.extractFiles(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.findFileInCaseDatabase(), org.sleuthkit.autopsy.ingest.IngestMonitor.MonitorTimerAction.findRootDirectoryForCurrentCase(), org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.modules.stix.STIXReportModule.generateReport(), org.sleuthkit.autopsy.actions.AddTagAction.TagMenu.getAndAddTag(), org.sleuthkit.autopsy.coreutils.ImageUtils.getCachedThumbnailLocation(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentCase(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentSleuthkitCaseDb(), org.sleuthkit.autopsy.ingest.events.DataSourceAnalysisEvent.getDataSource(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getModuleOutputPath(), org.sleuthkit.autopsy.casemodule.events.ReportAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue(), org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.getOldValue(), org.sleuthkit.autopsy.report.TableReportGenerator.ArtifactData.getOrderedRowDataAsStrings(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.getPathRelativeToCaseFolder(), org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.getRawArtifactText(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getRelModuleOutputPath(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getTempPath(), org.sleuthkit.autopsy.coreutils.VideoUtils.getTempVideoFile(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.IngestJobTableModel.getValueAt(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importArtifacts(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importDerivedFiles(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importReports(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importResults(), org.sleuthkit.autopsy.ingest.IngestJobSettingsPanel.IngestJobSettingsPanel(), org.sleuthkit.autopsy.ingest.RunIngestAction.isEnabled(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.actions.GetTagNameDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction(), org.sleuthkit.autopsy.report.ArtifactSelectionDialog.populateList(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.process(), org.sleuthkit.autopsy.modules.exif.ExifParserFileIngestModule.process(), org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule.process(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule.process(), org.sleuthkit.autopsy.filesearch.DateSearchFilter.CasePropertyChangeListener.propertyChange(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.ExplorerManagerNodeSelectionListener.propertyChange(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), org.sleuthkit.autopsy.timeline.TimeLineController.AutopsyIngestModuleListener.propertyChange(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.reloadKeys(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayName(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.showTimeline(), org.sleuthkit.autopsy.ingest.IngestManager.startIngestJob(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.startUp(), org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp(), org.sleuthkit.autopsy.examples.SampleExecutableDataSourceIngestModule.startUp(), org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp(), org.sleuthkit.autopsy.ingest.IngestManager.subscribeToServiceMonitorEvents(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagTypeNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagTypeNode.updateDisplayName(), and org.sleuthkit.autopsy.casemodule.ImageFilePanel.warnIfPathIsInvalid().
List<Content> org.sleuthkit.autopsy.casemodule.Case.getDataSources | ( | ) | throws TskCoreException |
Gets the data sources for the case.
org.sleuthkit.datamodel.TskCoreException | if there is a problem querying the case database. |
Definition at line 1304 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getTimeZones(), org.sleuthkit.autopsy.casemodule.Case.hasData(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange(), and org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.reloadKeys().
String org.sleuthkit.autopsy.casemodule.Case.getDisplayName | ( | ) |
Gets the case name that can be changed by the user.
Definition at line 1166 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseDisplayName().
Referenced by org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport(), and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
String org.sleuthkit.autopsy.casemodule.Case.getExaminer | ( | ) |
String org.sleuthkit.autopsy.casemodule.Case.getExportDirectory | ( | ) |
Gets the full path to the export directory for this case, creating it if it does not exist.
Definition at line 1245 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.directorytree.ExtractAction.extractFile(), and org.sleuthkit.autopsy.directorytree.ExtractAction.extractFiles().
String org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath | ( | ) |
Gets the full path to the log directory for this case, creating it if it does not exist.
Definition at line 1255 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed().
|
staticprivate |
Gets a reference to the main window of the desktop application to use to parent pop ups and initializes the application name for use in changing the main window title. MUST be called BEFORE any case is opened or created.
CaseActionException |
Definition at line 870 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.mainFrame, and org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI.
Referenced by org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
String org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory | ( | ) |
Gets the full path to the module output directory for this case, creating it if it does not exist.
Definition at line 1275 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getModuleOutputPath(), org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.getRAOutputPath(), org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp(), and org.sleuthkit.autopsy.examples.SampleExecutableDataSourceIngestModule.startUp().
String org.sleuthkit.autopsy.casemodule.Case.getModuleOutputDirectoryRelativePath | ( | ) |
Gets the path of the module output directory for this case, relative to the case directory, creating it if it does not exist.
Definition at line 1286 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.
Referenced by org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getRelModuleOutputPath(), and org.sleuthkit.autopsy.modules.embeddedfileextractor.EmbeddedFileExtractorIngestModule.startUp().
String org.sleuthkit.autopsy.casemodule.Case.getModulesOutputDirAbsPath | ( | ) |
Get module output directory path where modules should save their permanent data.
|
static |
Get relative (with respect to case dir) module output directory path where modules should save their permanent data. The directory is a subdirectory of this case dir.
String org.sleuthkit.autopsy.casemodule.Case.getName | ( | ) |
Gets the immutable case name.
Definition at line 1157 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getCaseName().
Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), and org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.propertyChange().
String org.sleuthkit.autopsy.casemodule.Case.getNumber | ( | ) |
|
private |
Gets the path to the specified subdirectory of the case directory, creating it if it does not already exist.
Definition at line 2322 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getCacheDirectory(), org.sleuthkit.autopsy.casemodule.Case.getExportDirectory(), org.sleuthkit.autopsy.casemodule.Case.getLogDirectoryPath(), org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory(), org.sleuthkit.autopsy.casemodule.Case.getReportDirectory(), and org.sleuthkit.autopsy.casemodule.Case.getTempDirectory().
String org.sleuthkit.autopsy.casemodule.Case.getOutputDirectory | ( | ) |
Gets the root case output directory for this case, creating it if it does not exist. If the case is a single-user case, this is the case directory. If the case is a multi-user case, this is a subdirectory of the case directory specific to the host machine.
Definition at line 1205 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), org.sleuthkit.autopsy.casemodule.Case.getCaseType(), org.sleuthkit.autopsy.coreutils.NetworkUtils.getLocalHostName(), and org.sleuthkit.autopsy.casemodule.Case.CaseType.MULTI_USER_CASE.
Referenced by org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction().
|
static |
Gets a PropertyChangeSupport object. The PropertyChangeSupport object returned is not used by instances of this class and does not have any PropertyChangeListeners.
String org.sleuthkit.autopsy.casemodule.Case.getReportDirectory | ( | ) |
Gets the full path to the reports directory for this case, creating it if it does not exist.
Definition at line 1265 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.timeline.actions.SaveSnapshotAsReport.SaveSnapshotAsReport().
Services org.sleuthkit.autopsy.casemodule.Case.getServices | ( | ) |
Gets the case services manager.
Definition at line 1130 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseServices.
Referenced by org.sleuthkit.autopsy.actions.AddBookmarkTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteContentTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.DeleteBlackboardArtifactTagAction.actionPerformed(), org.sleuthkit.autopsy.actions.AddBlackboardArtifactTagAction.addTag(), org.sleuthkit.autopsy.actions.AddContentTagAction.addTag(), org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< VirtualDirectory >.addTagProperty(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagNodeFactory.createKeys(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.createSheet(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeDetector.detectUserDefinedType(), org.sleuthkit.autopsy.actions.GetTagNameDialog.display(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.display(), org.sleuthkit.autopsy.report.taggedhashes.AddTaggedHashesToHashDb.generateReport(), org.sleuthkit.autopsy.actions.AddTagAction.TagMenu.getAndAddTag(), org.sleuthkit.autopsy.report.TableReportGenerator.ArtifactData.getOrderedRowDataAsStrings(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleArtifactTagDeleted(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleContentTagDeleted(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importDerivedFiles(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importResults(), org.sleuthkit.autopsy.actions.GetTagNameAndCommentDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.actions.GetTagNameDialog.okButtonActionPerformed(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.process(), org.sleuthkit.autopsy.modules.exif.ExifParserFileIngestModule.process(), org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule.process(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule.process(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.startUp(), org.sleuthkit.autopsy.timeline.filters.TagNameFilter.TagNameFilter(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNode.updateDisplayName(), org.sleuthkit.autopsy.datamodel.Tags.ContentTagTypeNode.updateDisplayName(), and org.sleuthkit.autopsy.datamodel.Tags.BlackboardArtifactTagTypeNode.updateDisplayName().
SleuthkitCase org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase | ( | ) |
Gets the case database.
Definition at line 1121 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.caseDb.
Referenced by org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), org.sleuthkit.autopsy.timeline.explorernodes.EventNode.createEventNode(), org.sleuthkit.autopsy.datamodel.VirtualDirectoryNode.createSheet(), org.sleuthkit.autopsy.datamodel.ImageNode.createSheet(), org.sleuthkit.autopsy.modules.filetypeid.FileTypeDetector.detect(), org.sleuthkit.autopsy.timeline.db.EventsRepository.EventsRepository(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.findFileInCaseDatabase(), org.sleuthkit.autopsy.ingest.IngestServices.getCurrentSleuthkitCaseDb(), org.sleuthkit.autopsy.ingest.events.DataSourceAnalysisEvent.getDataSource(), org.sleuthkit.autopsy.casemodule.events.ReportAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.FileAnalyzedEvent.getNewValue(), org.sleuthkit.autopsy.casemodule.events.DataSourceAddedEvent.getNewValue(), org.sleuthkit.autopsy.ingest.events.ContentChangedEvent.getOldValue(), org.sleuthkit.autopsy.ingest.events.BlackboardPostEvent.getOldValue(), org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.getRawArtifactText(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.IngestJobTableModel.getValueAt(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleArtifactTagDeleted(), org.sleuthkit.autopsy.timeline.datamodel.FilteredEventsModel.handleContentTagDeleted(), org.sleuthkit.autopsy.externalresults.ExternalResultsImporter.importArtifacts(), org.sleuthkit.autopsy.ingest.IngestJobSettingsPanel.IngestJobSettingsPanel(), org.sleuthkit.autopsy.timeline.db.EventsRepository.invalidateCaches(), org.sleuthkit.autopsy.report.ArtifactSelectionDialog.populateList(), org.sleuthkit.autopsy.casemodule.IngestJobInfoPanel.refresh(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.setDisplayName(), org.sleuthkit.autopsy.timeline.filters.TagNameFilter.TagNameFilter(), and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
String org.sleuthkit.autopsy.casemodule.Case.getTempDirectory | ( | ) |
Gets the full path to the temp directory for this case, creating it if it does not exist.
Definition at line 1225 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getOrCreateSubdirectory().
Referenced by org.sleuthkit.autopsy.directorytree.ExternalViewerAction.actionPerformed(), org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.getRATempPath(), org.sleuthkit.autopsy.thunderbirdparser.ThunderbirdMboxFileIngestModule.getTempPath(), and org.sleuthkit.autopsy.coreutils.VideoUtils.getTempVideoFile().
String org.sleuthkit.autopsy.casemodule.Case.getTextIndexName | ( | ) |
Gets the name of the keyword search index for the case.
Definition at line 1347 of file Case.java.
References org.sleuthkit.autopsy.casemodule.CaseMetadata.getTextIndexName().
Set<TimeZone> org.sleuthkit.autopsy.casemodule.Case.getTimeZone | ( | ) |
Gets the time zone(s) of the image data source(s) in this case.
Set<TimeZone> org.sleuthkit.autopsy.casemodule.Case.getTimeZones | ( | ) |
Gets the time zone(s) of the image data source(s) in this case.
Definition at line 1315 of file Case.java.
References org::sleuthkit::datamodel::Content.getDataSource(), org.sleuthkit.autopsy.casemodule.Case.getDataSources(), and org::sleuthkit::datamodel::Image.getTimeZone().
boolean org.sleuthkit.autopsy.casemodule.Case.hasData | ( | ) |
Queries whether or not the case has data, i.e., whether or not at least one data source has been added to the case.
Definition at line 1357 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.getDataSources(), and org.sleuthkit.autopsy.casemodule.Case.hasDataSources.
Referenced by org.sleuthkit.autopsy.corecomponents.DataContentTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.componentOpened(), org.sleuthkit.autopsy.ingest.RunIngestAction.isEnabled(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.showTimeline(), and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
|
static |
Invokes the startup dialog window.
Definition at line 2441 of file Case.java.
References org.sleuthkit.autopsy.casemodule.StartupWindowProvider.getInstance(), and org.sleuthkit.autopsy.casemodule.StartupWindowProvider.open().
|
static |
Checks if a case, the current case, is open at the time it is called.
Definition at line 547 of file Case.java.
Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.corecomponents.DataContentTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultTopComponent.canClose(), org.sleuthkit.autopsy.corecomponents.DataResultPanel.canClose(), org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.canClose(), org.sleuthkit.autopsy.diagnostics.PerformancePanelAction.isEnabled(), org.sleuthkit.autopsy.actions.ShowIngestProgressSnapshotAction.isEnabled(), org.sleuthkit.autopsy.timeline.OpenTimelineAction.isEnabled(), org.sleuthkit.autopsy.actions.OpenOutputFolderAction.isEnabled(), org.sleuthkit.autopsy.ingest.RunIngestAction.isEnabled(), and org.sleuthkit.autopsy.directorytree.DirectoryTreeTopComponent.respondSelection().
|
static |
void org.sleuthkit.autopsy.casemodule.Case.notifyAddingDataSource | ( | UUID | eventId | ) |
Notifies case event subscribers that a data source is being added to the case.
This should not be called from the event dispatch thread (EDT)
eventId | A unique identifier for the event. This UUID must be used to call notifyFailedAddingDataSource or notifyNewDataSource after the data source is added. |
Definition at line 1378 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagAdded | ( | BlackboardArtifactTag | newTag | ) |
Notifies case event subscribers that an artifact tag has been added.
This should not be called from the event dispatch thread (EDT)
newTag | new BlackboardArtifactTag added |
Definition at line 1440 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addBlackboardArtifactTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyBlackBoardArtifactTagDeleted | ( | BlackboardArtifactTag | deletedTag | ) |
Notifies case event subscribers that an artifact tag has been deleted.
This should not be called from the event dispatch thread (EDT)
deletedTag | BlackboardArtifactTag deleted |
Definition at line 1451 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteBlackboardArtifactTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagAdded | ( | ContentTag | newTag | ) |
Notifies case event subscribers that a content tag has been added.
This should not be called from the event dispatch thread (EDT)
newTag | new ContentTag added |
Definition at line 1418 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.addContentTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyContentTagDeleted | ( | ContentTag | deletedTag | ) |
Notifies case event subscribers that a content tag has been deleted.
This should not be called from the event dispatch thread (EDT)
deletedTag | ContentTag deleted |
Definition at line 1429 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
Referenced by org.sleuthkit.autopsy.casemodule.services.TagsManager.deleteContentTag().
void org.sleuthkit.autopsy.casemodule.Case.notifyDataSourceAdded | ( | Content | dataSource, |
UUID | addingDataSourceEventId | ||
) |
Notifies case event subscribers that a data source has been added to the case database.
This should not be called from the event dispatch thread (EDT)
dataSource | The data source. |
addingDataSourceEventId | The unique identifier for the corresponding adding data source event (see notifyAddingDataSource). |
Definition at line 1407 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
void org.sleuthkit.autopsy.casemodule.Case.notifyFailedAddingDataSource | ( | UUID | addingDataSourceEventId | ) |
Notifies case event subscribers that a data source failed to be added to the case.
This should not be called from the event dispatch thread (EDT)
addingDataSourceEventId | The unique identifier for the corresponding adding data source event (see notifyAddingDataSource). |
Definition at line 1392 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.publish().
|
private |
Opens an existing case.
caseMetadataFilePath | The path to the case metadata file. |
CaseActionException | if there is a problem creating the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 1777 of file Case.java.
References org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.framework.ProgressIndicator.start().
Referenced by org.sleuthkit.autopsy.actions.OpenLogFolderAction.actionPerformed(), org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase(), and org.sleuthkit.autopsy.actions.OpenOutputFolderAction.performAction().
|
static |
Opens an existing Autopsy case and makes it the current case.
caseMetadataFilePath | The path of the case metadata (.aut) file. |
CaseActionException | if there is a problem opening the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
|
private |
Allows any registered application-level services to open any resources specific to this case.
CaseActionException |
Definition at line 2004 of file Case.java.
References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), org.sleuthkit.autopsy.casemodule.Case.logger, org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.setCaseActionFuture(), org.sleuthkit.autopsy.casemodule.Case.CancelButtonListener.setCaseContext(), org.sleuthkit.autopsy.framework.ProgressIndicator.start(), and org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.warn().
|
static |
Opens an existing case and makes it the current case.
IMPORTANT: This method should not be called in the event dispatch thread (EDT).
caseMetadataFilePath | The path of the case metadata (.aut) file. |
CaseActionException | if there is a problem opening the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 516 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.Case(), org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.Events.CURRENT_CASE, org.sleuthkit.autopsy.casemodule.Case.currentCase, org.sleuthkit.autopsy.casemodule.Case.currentCaseWriteLock, org.sleuthkit.autopsy.casemodule.Case.getMainWindowAndAppName(), org.sleuthkit.autopsy.casemodule.Case.open(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.publishLocally(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.casemodule.Case.updateGUIForCaseOpened().
Referenced by org.sleuthkit.autopsy.casemodule.CaseOpenAction.actionPerformed(), and org.sleuthkit.autopsy.corecomponents.Installer.restored().
|
private |
Opens an existing case database.
progressIndicator | A progress indicator. |
CaseActionException | if there is a problem opening the case. The exception will have a user-friendly message and may be a wrapper for a lower-level exception. |
Definition at line 1896 of file Case.java.
References org.sleuthkit.autopsy.core.UserPreferences.getDatabaseConnectionInfo(), org.sleuthkit.autopsy.core.UserPreferences.getIsMultiUserModeEnabled(), org::sleuthkit::datamodel::SleuthkitCase.openCase(), and org.sleuthkit.autopsy.framework.ProgressIndicator.progress().
|
private |
Completes the case opening tasks common to both new cases and existing cases.
progressIndicator | A progress indicator. |
CaseActionException |
Definition at line 1934 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.clearTempSubDir(), org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), org.sleuthkit.autopsy.events.AutopsyEventPublisher.openRemoteEventChannel(), org.sleuthkit.autopsy.framework.ProgressIndicator.progress(), org.sleuthkit.autopsy.core.RuntimeProperties.runningWithGUI, and org.sleuthkit.autopsy.coreutils.Logger.setLogDirectory().
|
static |
Check if file exists and is a normal file.
filePath | The file path. |
|
private |
|
static |
Removes a subscriber to specific case events.
eventName | The event the subscriber is no longer interested in. |
subscriber | The subscriber (PropertyChangeListener) to remove. |
Definition at line 416 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().
Referenced by org.sleuthkit.autopsy.casemodule.Case.removePropertyChangeListener().
|
static |
Removes a subscriber to specific case events.
eventNames | The event the subscriber is no longer interested in. |
subscriber | The subscriber (PropertyChangeListener) to remove. |
Definition at line 426 of file Case.java.
References org.sleuthkit.autopsy.events.AutopsyEventPublisher.removeSubscriber().
|
static |
Removes a subscriber to all case events. To remove a subscription to only specific events, use one of the overloads of removeEventSubscriber.
listener | The subscriber (PropertyChangeListener) to remove. |
Definition at line 384 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.removeEventSubscriber().
Referenced by org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.removeListeners(), org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< VirtualDirectory >.removeListeners(), org.sleuthkit.autopsy.datamodel.VolumeNode.removeListeners(), org.sleuthkit.autopsy.datamodel.FileTypesByExtension.FileTypesByExtObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.ImageNode.removeListeners(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.removeListeners(), org.sleuthkit.autopsy.datamodel.FileSize.FileSizeRootChildren.FileSizeRootChildrenObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.DeletedContent.DeletedContentsChildren.DeletedContentsChildrenObservable.removeListeners(), org.sleuthkit.autopsy.datamodel.DataSourcesNode.DataSourcesNodeChildren.removeNotify(), org.sleuthkit.autopsy.datamodel.Tags.TagNameNodeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.InterestingHits.SetNameFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.ExtractedContent.TypeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.HashsetHits.HashsetNameFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.EmailExtracted.AccountFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.accounts.Accounts.AccountsRootNode.AccountTypeFactory.removeNotify(), org.sleuthkit.autopsy.datamodel.KeywordHits.ListFactory.removeNotify(), and org.sleuthkit.autopsy.timeline.TimeLineController.shutDownTimeLine().
void org.sleuthkit.autopsy.casemodule.Case.setTextIndexName | ( | String | textIndexName | ) | throws CaseMetadataException |
|
staticprivate |
Definition at line 1039 of file Case.java.
References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.clear(), and org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.closeCoreWindows().
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase().
|
staticprivate |
Update the GUI to to reflect the current case.
Definition at line 950 of file Case.java.
References org.sleuthkit.autopsy.casemodule.Case.addCaseNameToMainWindowTitle(), org.sleuthkit.autopsy.coreutils.DriveUtils.driveExists(), org::sleuthkit::datamodel::SleuthkitCase.getBackupDatabasePath(), org.sleuthkit.autopsy.casemodule.Case.getDisplayName(), org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase(), org.sleuthkit.autopsy.casemodule.Case.hasData(), and org.sleuthkit.autopsy.corecomponentinterfaces.CoreComponentControl.openCoreWindows().
Referenced by org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
staticprivate |
|
staticprivate |
|
private |
Definition at line 166 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getSleuthkitCase().
|
private |
|
private |
|
private |
|
private |
Definition at line 169 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.getServices().
|
private |
|
staticprivate |
Definition at line 143 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
staticprivate |
Definition at line 141 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.createAsCurrentCase(), org.sleuthkit.autopsy.casemodule.Case.deleteCase(), org.sleuthkit.autopsy.casemodule.Case.deleteCurrentCase(), and org.sleuthkit.autopsy.casemodule.Case.openAsCurrentCase().
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
private |
Definition at line 170 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.hasData().
|
staticprivate |
|
staticprivate |
Definition at line 127 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(), and org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources().
|
staticprivate |
Definition at line 156 of file Case.java.
Referenced by org.sleuthkit.autopsy.casemodule.Case.close(), and org.sleuthkit.autopsy.casemodule.Case.getMainWindowAndAppName().
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
staticprivate |
|
private |
|
staticprivate |
Copyright © 2012-2016 Basis Technology. Generated on: Mon Apr 24 2017
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.