Autopsy  4.4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
Protected Member Functions | Private Member Functions | Private Attributes | List of all members
org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher Class Reference

Inherits SwingWorker< Object, Void >.

Protected Member Functions

Object doInBackground () throws Exception
 
void done ()
 

Private Member Functions

QueryResults filterResults (QueryResults queryResult)
 
void finalizeSearcher ()
 
void updateKeywords ()
 

Private Attributes

boolean finalRun = false
 
SearchJobInfo job
 
List< String > keywordListNames
 
List< KeywordListkeywordLists
 
List< Keyword > keywords
 
Map< Keyword, KeywordListkeywordToList
 
final Logger logger = Logger.getLogger(SearchRunner.Searcher.class.getName())
 
AggregateProgressHandle progressGroup
 

Detailed Description

Searcher responsible for searching the current index and writing results to blackboard and the inbox. Also, posts results to listeners as Ingest data events. Searches entire index, and keeps track of only new results to report and save. Runs as a background thread.

Definition at line 373 of file SearchRunner.java.

Member Function Documentation

Object org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground ( ) throws Exception
protected
void org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.done ( )
protected
QueryResults org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.filterResults ( QueryResults  queryResult)
private

This method filters out all of the hits found in earlier periodic searches and returns only the results found by the most recent search.

This method will only return hits for objects for which we haven't previously seen a hit for the keyword.

Parameters
queryResultThe results returned by a keyword search.
Returns
A unique set of hits found by the most recent search for objects that have not previously had a hit. The hits will be for the lowest numbered chunk associated with the object.

Definition at line 589 of file SearchRunner.java.

References org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.addKeywordResults(), and org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.currentKeywordResults().

Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground().

void org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.finalizeSearcher ( )
private

Performs the cleanup that needs to be done right AFTER doInBackground() returns without relying on done() method that is not guaranteed to run.

Definition at line 565 of file SearchRunner.java.

Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground().

void org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.updateKeywords ( )
private

Sync-up the updated keywords from the currently used lists in the XML

Definition at line 543 of file SearchRunner.java.

Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.doInBackground().

Member Data Documentation

boolean org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.finalRun = false
private

Definition at line 385 of file SearchRunner.java.

SearchJobInfo org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.job
private

Searcher has private copies/snapshots of the lists and keywords

Definition at line 378 of file SearchRunner.java.

List<String> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywordListNames
private

Definition at line 380 of file SearchRunner.java.

List<KeywordList> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywordLists
private

Definition at line 381 of file SearchRunner.java.

List<Keyword> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywords
private

Definition at line 379 of file SearchRunner.java.

Map<Keyword, KeywordList> org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.keywordToList
private

Definition at line 382 of file SearchRunner.java.

final Logger org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.logger = Logger.getLogger(SearchRunner.Searcher.class.getName())
private

Definition at line 384 of file SearchRunner.java.

AggregateProgressHandle org.sleuthkit.autopsy.keywordsearch.SearchRunner.Searcher.progressGroup
private

Definition at line 383 of file SearchRunner.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Fri Sep 29 2017
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.