Autopsy  4.7.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Static Public Member Functions | Private Member Functions | Static Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.datamodel.FileTypesByMimeType Class Reference

Inherits Observable, and org.sleuthkit.autopsy.datamodel.AutopsyVisitableItem.

Classes

class  ByMimeTypeNode
 
class  ByMimeTypeNodeChildren
 
class  MediaSubTypeNode
 
class  MediaSubTypeNodeChildren
 
class  MediaTypeNode
 
class  MediaTypeNodeChildren
 

Static Public Member Functions

static boolean isEmptyMimeTypeNode (Node node)
 

Private Member Functions

void populateHashMap ()
 
void removeListeners ()
 

Static Private Member Functions

static String createBaseWhereExpr ()
 

Private Attributes

final HashMap< String, Map< String, Long > > existingMimeTypeCounts = new HashMap<>()
 
final PropertyChangeListener pcl
 
final SleuthkitCase skCase
 
final FileTypes typesRoot
 

Static Private Attributes

static final Set< Case.Events > CASE_EVENTS_OF_INTEREST = EnumSet.of(Case.Events.DATA_SOURCE_ADDED, Case.Events.CURRENT_CASE)
 
static final Logger logger = Logger.getLogger(FileTypesByMimeType.class.getName())
 

Detailed Description

Class which contains the Nodes for the 'By Mime Type' view located in the File Types view, shows all files with a mime type. Will initially be empty until file type identification has been performed. Contains a Property Change Listener which is checking for changes in IngestJobEvent Completed or Canceled and IngestModuleEvent Content Changed.

Definition at line 61 of file FileTypesByMimeType.java.

Member Function Documentation

static String org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.createBaseWhereExpr ( )
staticprivate

Create the base expression used as the where clause in the queries for files by mime type. Filters out certain kinds of files and directories, and known/slack files based on user preferences.

Returns
The base expression to be used in the where clause of queries for files by mime type.

Definition at line 94 of file FileTypesByMimeType.java.

Referenced by org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.MediaSubTypeNodeChildren.createKeys(), and org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.populateHashMap().

static boolean org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.isEmptyMimeTypeNode ( Node  node)
static

Method to check if the node in question is a ByMimeTypeNode which is empty.

Parameters
nodethe Node which you wish to check.
Returns
True if originNode is an instance of ByMimeTypeNode and is empty, false otherwise.

Definition at line 200 of file FileTypesByMimeType.java.

void org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.populateHashMap ( )
private

Performs the query on the database to get all distinct MIME types of files in it, and populate the hashmap with those results.

Definition at line 116 of file FileTypesByMimeType.java.

References org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.createBaseWhereExpr(), and org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.existingMimeTypeCounts.

void org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.removeListeners ( )
private

Member Data Documentation

final Set<Case.Events> org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.CASE_EVENTS_OF_INTEREST = EnumSet.of(Case.Events.DATA_SOURCE_ADDED, Case.Events.CURRENT_CASE)
staticprivate
final HashMap<String, Map<String, Long> > org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.existingMimeTypeCounts = new HashMap<>()
private

The nodes of this tree will be determined dynamically by the mimetypes which exist in the database. This hashmap will store them with the media type as the key and a Map, from media subtype to count, as the value.

Definition at line 71 of file FileTypesByMimeType.java.

Referenced by org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.ByMimeTypeNodeChildren.createKeys(), and org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.populateHashMap().

final Logger org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.logger = Logger.getLogger(FileTypesByMimeType.class.getName())
staticprivate

Definition at line 63 of file FileTypesByMimeType.java.

final PropertyChangeListener org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.pcl
private

The pcl is in the class because it has the easiest mechanisms to add and remove itself during its life cycles.

Definition at line 82 of file FileTypesByMimeType.java.

final SleuthkitCase org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.skCase
private

Definition at line 65 of file FileTypesByMimeType.java.

final FileTypes org.sleuthkit.autopsy.datamodel.FileTypesByMimeType.typesRoot
private

Root of the File Types tree. Used to provide single answer to question: Should the child counts be shown next to the nodes?

Definition at line 76 of file FileTypesByMimeType.java.


The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Mon Jun 18 2018
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.