org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb Class Reference

Inherits org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Inherited by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.

Public Member Functions
void	addArtifact (CorrelationAttribute eamArtifact) throws EamDbException
void	addReferenceInstance (EamGlobalFileInstance eamGlobalFileInstance, CorrelationAttribute.Type correlationType) throws EamDbException
void	bulkInsertArtifacts () throws EamDbException
void	bulkInsertCases (List< CorrelationCase > cases) throws EamDbException
void	bulkInsertReferenceTypeEntries (Set< EamGlobalFileInstance > globalInstances, CorrelationAttribute.Type contentType) throws EamDbException
List< CorrelationAttributeInstance >	getArtifactInstancesByPath (CorrelationAttribute.Type aType, String filePath) throws EamDbException
List< CorrelationAttributeInstance >	getArtifactInstancesByTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException
List< CorrelationAttributeInstance >	getArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException
List< String >	getBadTags ()
CorrelationCase	getCaseByUUID (String caseUUID) throws EamDbException
List< CorrelationCase >	getCases () throws EamDbException
CorrelationAttribute.Type	getCorrelationTypeById (int typeId) throws EamDbException
Long	getCountArtifactInstancesByCaseDataSource (String caseUUID, String dataSourceID) throws EamDbException
Long	getCountArtifactInstancesByTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException
Long	getCountArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException
Long	getCountUniqueCaseDataSourceTuplesHavingTypeValue (CorrelationAttribute.Type aType, String value) throws EamDbException
Long	getCountUniqueDataSources () throws EamDbException
CorrelationDataSource	getDataSourceDetails (String dataSourceDeviceId) throws EamDbException
List< CorrelationDataSource >	getDataSources () throws EamDbException
String	getDbInfo (String name) throws EamDbException
List< CorrelationAttribute.Type >	getDefinedCorrelationTypes () throws EamDbException
List< CorrelationAttribute.Type >	getEnabledCorrelationTypes () throws EamDbException
int	getFrequencyPercentage (CorrelationAttribute corAttr) throws EamDbException
List< String >	getListCasesHavingArtifactInstancesKnownBad (CorrelationAttribute.Type aType, String value) throws EamDbException
EamOrganization	getOrganizationByID (int orgID) throws EamDbException
List< EamOrganization >	getOrganizations () throws EamDbException
List< EamGlobalFileInstance >	getReferenceInstancesByTypeValue (CorrelationAttribute.Type aType, String aValue) throws EamDbException
EamGlobalSet	getReferenceSetByID (int referenceSetID) throws EamDbException
List< CorrelationAttribute.Type >	getSupportedCorrelationTypes () throws EamDbException
boolean	isArtifactlKnownBadByReference (CorrelationAttribute.Type aType, String value) throws EamDbException
void	newCase (CorrelationCase eamCase) throws EamDbException
CorrelationCase	newCase (Case autopsyCase) throws EamDbException
int	newCorrelationType (CorrelationAttribute.Type newType) throws EamDbException
void	newDataSource (CorrelationDataSource eamDataSource) throws EamDbException
void	newDbInfo (String name, String value) throws EamDbException
void	newOrganization (EamOrganization eamOrg) throws EamDbException
int	newReferencelSet (EamGlobalSet eamGlobalSet) throws EamDbException
void	prepareBulkArtifact (CorrelationAttribute eamArtifact) throws EamDbException
void	reset () throws EamDbException
void	saveSettings ()
void	setArtifactInstanceKnownStatus (CorrelationAttribute eamArtifact, TskData.FileKnown knownStatus) throws EamDbException
void	setBadTags (List< String > tags)
void	shutdownConnections () throws EamDbException
void	updateCase (CorrelationCase eamCase) throws EamDbException
void	updateCorrelationType (CorrelationAttribute.Type aType) throws EamDbException
void	updateDbInfo (String name, String value) throws EamDbException
void	updateSettings ()

Static Public Member Functions
static EamDb	getInstance () throws EamDbException
static boolean	isEnabled ()

Static Public Attributes
static final int	SCHEMA_VERSION = 1

Protected Member Functions
	AbstractSqlEamDb () throws EamDbException
abstract Connection	connect () throws EamDbException
abstract String	getConflictClause ()

Protected Attributes
int	bulkArtifactsThreshold
final List< CorrelationAttribute.Type >	DEFAULT_CORRELATION_TYPES

Private Member Functions
CorrelationAttribute.Type	getCorrelationTypeFromResultSet (ResultSet resultSet) throws EamDbException, SQLException
CorrelationAttributeInstance	getEamArtifactInstanceFromResultSet (ResultSet resultSet) throws SQLException
CorrelationCase	getEamCaseFromResultSet (ResultSet resultSet) throws SQLException
CorrelationDataSource	getEamDataSourceFromResultSet (ResultSet resultSet) throws SQLException
EamGlobalFileInstance	getEamGlobalFileInstanceFromResultSet (ResultSet resultSet) throws SQLException
EamGlobalSet	getEamGlobalSetFromResultSet (ResultSet resultSet) throws SQLException
EamOrganization	getEamOrganizationFromResultSet (ResultSet resultSet) throws SQLException

Private Attributes
final List< String >	badTags
final Map< String, Collection< CorrelationAttribute > >	bulkArtifacts
int	bulkArtifactsCount

Static Private Attributes
static final Logger	LOGGER = Logger.getLogger(AbstractSqlEamDb.class.getName())

Detailed Description

SQLite manager implementation

Definition at line 46 of file AbstractSqlEamDb.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.AbstractSqlEamDb ( ) throws EamDbException

protected

Connect to the DB and initialize it.

Exceptions

UnknownHostException,EamDbException

Definition at line 62 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.DEFAULT_CORRELATION_TYPES, and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getDefaultCorrelationTypes().

Member Function Documentation

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addArtifact

(

CorrelationAttribute

eamArtifact

)

throws EamDbException

Inserts new Artifact(s) into the database. Should add associated Case and Data Source first.

Parameters

eamArtifact

The artifact to add

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 553 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addReferenceInstance	(	EamGlobalFileInstance	eamGlobalFileInstance,
		CorrelationAttribute.Type	correlationType
	)		throws EamDbException

Add a new reference instance

Parameters

eamGlobalFileInstance	The reference instance to add
correlationType	Correlation Type that this Reference Instance is

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1501 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getComment(), org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getGlobalSetID(), org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getKnownStatus(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.getMD5Hash().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts

(

)

throws EamDbException

Executes a bulk insert of the eamArtifacts added from the prepareBulkArtifact() method

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 902 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifacts, org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getConflictClause(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.prepareBulkArtifact().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertCases

(

List< CorrelationCase >

cases

)

throws EamDbException

Executes a bulk insert of the cases

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 967 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getConflictClause().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertReferenceTypeEntries	(	Set< EamGlobalFileInstance >	globalInstances,
		CorrelationAttribute.Type	contentType
	)		throws EamDbException

Insert the bulk collection of Reference Type Instances

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1529 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getConflictClause().

abstract Connection org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect ( ) throws EamDbException

abstractprotected

Setup and create a connection to the selected database implementation

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addReferenceInstance(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertCases(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertReferenceTypeEntries(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByPath(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesKnownBad(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCaseByUUID(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCases(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeById(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByCaseDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesKnownBad(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueDataSources(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSourceDetails(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSources(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDbInfo(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEnabledCorrelationTypes(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getListCasesHavingArtifactInstancesKnownBad(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizationByID(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizations(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceInstancesByTypeValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceSetByID(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getSupportedCorrelationTypes(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.isArtifactlKnownBadByReference(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDbInfo(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newOrganization(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newReferencelSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateCase(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateCorrelationType(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateDbInfo().

List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByPath	(	CorrelationAttribute.Type	aType,
		String	filePath
	)		throws EamDbException

Retrieves eamArtifact instances from the database that are associated with the aType and filePath

Parameters

aType	EamArtifact.Type to search for
filePath	File path to search for

Returns

List of 0 or more EamArtifactInstances

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 656 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamArtifactInstanceFromResultSet().

List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByTypeValue	(	CorrelationAttribute.Type	aType,
		String	value
	)		throws EamDbException

Retrieves eamArtifact instances from the database that are associated with the eamArtifactType and eamArtifactValue of the given eamArtifact.

Parameters

eamArtifact

The type/value to look up (artifact with 0 instances)

Returns

List of artifact instances for a given type/value

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 604 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamArtifactInstanceFromResultSet().

List<CorrelationAttributeInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesKnownBad	(	CorrelationAttribute.Type	aType,
		String	value
	)		throws EamDbException

Gets list of matching eamArtifact instances that have knownStatus = "Bad".

Parameters

aType	EamArtifact.Type to search for
value	Value to search for

Returns

List with 0 or more matching eamArtifact instances.

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1140 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamArtifactInstanceFromResultSet().

List<String> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getBadTags

(

)

Get the list of tags recognized as "Bad"

Returns

The list of bad tags

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 84 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.badTags.

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCaseByUUID

(

String

caseUUID

)

throws EamDbException

Retrieves Case details based on Case UUID

Parameters

caseUUID

unique identifier for a case

Returns

The retrieved case

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 352 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamCaseFromResultSet().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().

List<CorrelationCase> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCases

(

)

throws EamDbException

Retrieves cases that are in DB.

Returns

List of cases

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 391 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamCaseFromResultSet().

abstract String org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getConflictClause ( )

abstractprotected

Get the conflict clause for bulk update statements

Returns

The conflict clause for bulk update statements

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertCases(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertReferenceTypeEntries().

CorrelationAttribute.Type org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeById

(

int

typeId

)

throws EamDbException

Get the EamArtifact.Type that has the given Type.Id.

Parameters

typeId

Type.Id of Correlation Type to get

Returns

EamArtifact.Type or null if it doesn't exist.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1806 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().

CorrelationAttribute.Type org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet ( ResultSet  resultSet ) throws EamDbException, SQLException

private

Definition at line 1884 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeById(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEnabledCorrelationTypes(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getSupportedCorrelationTypes(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCorrelationType().

Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByCaseDataSource	(	String	caseUUID,
		String	dataSourceID
	)		throws EamDbException

Retrieves number of eamArtifact instances in the database that are associated with the caseDisplayName and dataSource of the given eamArtifact instance.

Parameters

caseUUID	Case ID to search for
dataSourceID	Data source ID to search for

Returns

Number of artifact instances having caseDisplayName and dataSource

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 828 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes().

Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByTypeValue	(	CorrelationAttribute.Type	aType,
		String	value
	)		throws EamDbException

Retrieves number of artifact instances in the database that are associated with the ArtifactType and artifactValue of the given artifact.

Parameters

eamArtifact

Artifact with artifactType and artifactValue to search for

Returns

Number of artifact instances having ArtifactType and ArtifactValue.

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 707 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesKnownBad	(	CorrelationAttribute.Type	aType,
		String	value
	)		throws EamDbException

Count matching eamArtifacts instances that have knownStatus = "Bad".

Parameters

aType	EamArtifact.Type to search for
value	Value to search for

Returns

Number of matching eamArtifacts

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1190 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue	(	CorrelationAttribute.Type	aType,
		String	value
	)		throws EamDbException

Retrieves number of unique caseDisplayName / dataSource tuples in the database that are associated with the artifactType and artifactValue of the given artifact.

Parameters

eamArtifact

Artifact with artifactType and artifactValue to search for

Returns

Number of unique tuples

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 757 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getFrequencyPercentage().

Long org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueDataSources

(

)

throws EamDbException

Retrieves number of data sources in the database.

Returns

Number of unique data sources

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 791 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getFrequencyPercentage().

CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSourceDetails

(

String

dataSourceDeviceId

)

throws EamDbException

Updates a Data Source in the database

Parameters

eamDataSource	the data source to update Retrieves Data Source details based on data source device ID
dataSourceDeviceId	the data source device ID number

Returns

The data source

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 485 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamDataSourceFromResultSet().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().

List<CorrelationDataSource> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSources

(

)

throws EamDbException

Return a list of data sources in the DB

Returns

list of data sources in the DB

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 518 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamDataSourceFromResultSet().

String org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDbInfo

(

String

name

)

throws EamDbException

Get the value for the given name from the name/value db_info table.

Parameters

name	Name to search for

Returns

value associated with name.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 141 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDefinedCorrelationTypes

(

)

throws EamDbException

Get the list of EamArtifact.Type's that are defined in the DB and can be used to correlate artifacts.

Returns

List of EamArtifact.Type's. If none are defined in the database, the default list will be returned.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1669 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountArtifactInstancesByCaseDataSource().

CorrelationAttributeInstance org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamArtifactInstanceFromResultSet ( ResultSet  resultSet ) throws SQLException

private

Convert a ResultSet to a EamArtifactInstance object

Parameters

resultSet

A resultSet with a set of values to create a EamArtifactInstance object.

Returns

fully populated EamArtifactInstance, or null

Exceptions

SQLException

when an expected column name is not in the resultSet

Definition at line 1910 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.GlobalStatus.LOCAL.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByPath(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesByTypeValue(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getArtifactInstancesKnownBad().

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamCaseFromResultSet ( ResultSet  resultSet ) throws SQLException

private

Convert a ResultSet to a EamCase object

Parameters

resultSet

A resultSet with a set of values to create a EamCase object.

Returns

fully populated EamCase object, or null

Exceptions

SQLException

when an expected column name is not in the resultSet

Definition at line 1841 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationCase.setCaseNumber(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationCase.setCreationDate(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationCase.setExaminerEmail(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationCase.setExaminerName(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationCase.setExaminerPhone(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationCase.setNotes(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationCase.setOrg().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCaseByUUID(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCases().

CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamDataSourceFromResultSet ( ResultSet  resultSet ) throws SQLException

private

Definition at line 1870 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSourceDetails(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSources().

EamGlobalFileInstance org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalFileInstanceFromResultSet ( ResultSet  resultSet ) throws SQLException

private

Definition at line 1958 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceInstancesByTypeValue().

EamGlobalSet org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalSetFromResultSet ( ResultSet  resultSet ) throws SQLException

private

Definition at line 1942 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceSetByID().

EamOrganization org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamOrganizationFromResultSet ( ResultSet  resultSet ) throws SQLException

private

Definition at line 1926 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizationByID(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizations().

List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEnabledCorrelationTypes

(

)

throws EamDbException

Get the list of enabled EamArtifact.Type's that will be used to correlate artifacts.

Returns

List of enabled EamArtifact.Type's. If none are defined in the database, the default list will be returned.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1704 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().

int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getFrequencyPercentage

(

CorrelationAttribute

corAttr

)

throws EamDbException

Calculate the percentage of data sources that have this attribute value.

Parameters

corAttr

Attribute type and value to get data about

Returns

Int between 0 and 100

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 739 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueCaseDataSourceTuplesHavingTypeValue(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCountUniqueDataSources().

static EamDb org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.getInstance ( ) throws EamDbException

staticinherited

Get the instance

Returns

The EamDb instance or null if one is not configured.

Exceptions

EamDbException

Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.

Definition at line 40 of file EamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.DISABLED, org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.getInstance(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.getInstance(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.getSelectedPlatform(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.useCentralRepo().

Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.AddNewOrganizationDialog.bnOKActionPerformed(), org.sleuthkit.autopsy.centralrepository.optionspanel.EamDbSettingsDialog.bnOkActionPerformed(), org.sleuthkit.autopsy.centralrepository.actions.EamCaseEditDetailsDialog.EamCaseEditDetailsDialog(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getCorrelationAttributeFromBlackboardArtifact(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelationAttributesFromNode(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getEamArtifactFromContent(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getReferenceInstancesAsArtifactInstances(), org.sleuthkit.autopsy.centralrepository.optionspanel.ImportHashDatabaseDialog.ImportHashDatabaseWorker.importHashDatabase(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.propertyChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.IngestModuleEventListener.propertyChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.NewArtifactsRunner.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.KnownStatusChangeRunner.run(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.showCaseDetails(), and org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.showCommonalityDetails().

List<String> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getListCasesHavingArtifactInstancesKnownBad	(	CorrelationAttribute.Type	aType,
		String	value
	)		throws EamDbException

Gets list of distinct case display names, where each case has 1+ Artifact Instance matching eamArtifact with knownStatus = "Bad".

Parameters

aType	EamArtifact.Type to search for
value	Value to search for

Returns

List of cases containing this artifact with instances marked as bad

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1234 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName().

EamOrganization org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizationByID

(

int

orgID

)

throws EamDbException

Get an organization having the given ID

Parameters

orgID

The id to look up

Returns

The organization with the given ID

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1387 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamOrganizationFromResultSet().

List<EamOrganization> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getOrganizations

(

)

throws EamDbException

Get all organizations

Returns

A list of all organizations

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1352 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamOrganizationFromResultSet().

List<EamGlobalFileInstance> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceInstancesByTypeValue	(	CorrelationAttribute.Type	aType,
		String	aValue
	)		throws EamDbException

Get all reference entries having a given correlation type and value

Parameters

aType	Type to use for matching
aValue	Value to use for matching

Returns

List of all global file instances with a type and value

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1576 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalFileInstanceFromResultSet().

EamGlobalSet org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getReferenceSetByID

(

int

referenceSetID

)

throws EamDbException

Get a reference set by ID

Parameters

referenceSetID

The ID to look up

Returns

The global set associated with the ID

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1468 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getEamGlobalSetFromResultSet().

List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getSupportedCorrelationTypes

(

)

throws EamDbException

Get the list of supported EamArtifact.Type's that can be used to correlate artifacts.

Returns

List of supported EamArtifact.Type's. If none are defined in the database, the default list will be returned.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1739 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().

boolean org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.isArtifactlKnownBadByReference	(	CorrelationAttribute.Type	aType,
		String	value
	)		throws EamDbException

Is the artifact known as bad according to the reference entries?

Parameters

aType	EamArtifact.Type to search for
value	Value to search for

Returns

Global known status of the artifact

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1282 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToReferenceTableName(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.FILES_TYPE_ID.

static boolean org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.isEnabled ( )

staticinherited

Is the database enabled?

Returns

Is the database enabled

Definition at line 93 of file EamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.DISABLED, org.sleuthkit.autopsy.centralrepository.datamodel.EamDbPlatformEnum.getSelectedPlatform(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.useCentralRepo().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.connect(), org.sleuthkit.autopsy.centralrepository.optionspanel.ImportHashDatabaseDialog.ImportHashDatabaseWorker.ImportHashDatabaseWorker(), org.sleuthkit.autopsy.centralrepository.actions.EamEditCaseInfoAction.isEnabled(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.isSupported(), org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.propertyChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.IngestEventsListener.IngestModuleEventListener.propertyChange(), org.sleuthkit.autopsy.centralrepository.eventlisteners.KnownStatusChangeRunner.run(), org.sleuthkit.autopsy.centralrepository.eventlisteners.NewArtifactsRunner.run(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.setNode(), and org.sleuthkit.autopsy.centralrepository.actions.EamCaseEditDetailsDialog.updateDb().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase

(

CorrelationCase

eamCase

)

throws EamDbException

Creates new Case in the database

Expects the Organization for this case to already exist in the database.

Parameters

eamCase

The case to add

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 201 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase

(

Case

autopsyCase

)

throws EamDbException

Creates new Case in the database from the given case

Parameters

case	The case to add

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 262 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamOrganization.getDefault(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase().

int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCorrelationType

(

CorrelationAttribute.Type

newType

)

throws EamDbException

Add a new EamArtifact.Type to the db.

Parameters

newType

New type to add.

Returns

ID of this new Correlation Type

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1612 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCorrelationTypeFromResultSet().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDataSource

(

CorrelationDataSource

eamDataSource

)

throws EamDbException

Creates new Data Source in the database

Parameters

eamDataSource

the data source to add

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 428 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDbInfo	(	String	name,
		String	value
	)		throws EamDbException

Add a new name/value pair in the db_info table.

Parameters

name	Key to set
value	Value to set

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 112 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newOrganization

(

EamOrganization

eamOrg

)

throws EamDbException

Add a new organization

Parameters

eamOrg

The organization to add

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1322 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newReferencelSet

(

EamGlobalSet

eamGlobalSet

)

throws EamDbException

Add a new Global Set

Parameters

eamGlobalSet

The global set to add

Returns

The ID of the new global set

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1420 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.prepareBulkArtifact

(

CorrelationAttribute

eamArtifact

)

throws EamDbException

Adds an eamArtifact to an internal list to be later added to DB. Artifact can have 1 or more Artifact Instances. Insert will be triggered by a threshold or a call to bulkInsertArtifacts().

Parameters

eamArtifact

The artifact to add

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 878 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifacts, and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts().

void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.reset ( ) throws EamDbException

inherited

Reset the database (testing method)

Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.

void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.saveSettings ( )

inherited

Save settings

Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setArtifactInstanceKnownStatus	(	CorrelationAttribute	eamArtifact,
		TskData.FileKnown	knownStatus
	)		throws EamDbException

Sets an eamArtifact instance to the given knownStatus. If eamArtifact exists, it is updated. If eamArtifact does not exist it is added with the given status.

Parameters

eamArtifact	Artifact containing exactly one (1) ArtifactInstance.
FileKnown	The status to change the artifact to

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1048 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.addArtifact(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeResultSet(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.correlationTypeToInstanceTableName(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getCaseByUUID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationCase.getCaseUUID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationCase(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getCorrelationValue(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getDataSourceDetails(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationDataSource.getDeviceID(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFilePath(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttribute.getInstances(), org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newCase(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.newDataSource().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setBadTags

(

List< String >

tags

)

Set the tags recognized as "Bad"

Parameters

tags	The tags to consider bad

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 96 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.badTags.

void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.shutdownConnections ( ) throws EamDbException

inherited

Shutdown the connection pool.

This closes the connection pool including all idle database connections. It will not close active/in-use connections. Thus, it is vital that there are no in-use connections when you call this method.

Exceptions

EamDbException

if there is a problem closing the connection pool.

Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.

Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.EamDbSettingsDialog.bnOkActionPerformed().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateCase

(

CorrelationCase

eamCase

)

throws EamDbException

Updates an existing Case in the database

Parameters

eamCase

The case to update

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 288 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateCorrelationType

(

CorrelationAttribute.Type

aType

)

throws EamDbException

Update a EamArtifact.Type.

Parameters

aType

EamArtifact.Type to update.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 1772 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.updateDbInfo	(	String	name,
		String	value
	)		throws EamDbException

Update the value for a name in the name/value db_info table.

Parameters

name	Name to find
value	Value to assign to name.

Exceptions

EamDbException

Implements org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.

Definition at line 175 of file AbstractSqlEamDb.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closeConnection(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.closePreparedStatement(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.connect().

void org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.updateSettings ( )

inherited

Update settings

When using updateSettings, if any database settings have changed, you should call shutdownConnections() before using any API methods. That will ensure that any old connections are closed and all new connections will be made using the new settings.

Implemented in org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb, and org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.

Referenced by org.sleuthkit.autopsy.centralrepository.optionspanel.EamDbSettingsDialog.bnOkActionPerformed().

Member Data Documentation

final List<String> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.badTags

private

Definition at line 55 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.getBadTags(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.setBadTags().

final Map<String, Collection<CorrelationAttribute> > org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifacts

private

Definition at line 54 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkInsertArtifacts(), and org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.prepareBulkArtifact().

int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifactsCount

private

Definition at line 52 of file AbstractSqlEamDb.java.

int org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.bulkArtifactsThreshold

protected

Definition at line 53 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.PostgresEamDb(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.SqliteEamDb(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.updateSettings(), and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.updateSettings().

final List<CorrelationAttribute.Type> org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.DEFAULT_CORRELATION_TYPES

protected

Definition at line 50 of file AbstractSqlEamDb.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.AbstractSqlEamDb(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDb.reset(), and org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDb.reset().

final Logger org.sleuthkit.autopsy.centralrepository.datamodel.AbstractSqlEamDb.LOGGER = Logger.getLogger(AbstractSqlEamDb.class.getName())

staticprivate

Definition at line 48 of file AbstractSqlEamDb.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.EamDb.SCHEMA_VERSION = 1

staticinherited

Definition at line 31 of file EamDb.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/centralrepository/datamodel/AbstractSqlEamDb.java