org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance Class Reference

Inherits Serializable.

Classes
class	Type

Public Member Functions
	CorrelationAttributeInstance (String correlationValue, CorrelationAttributeInstance.Type correlationType, CorrelationCase eamCase, CorrelationDataSource eamDataSource, String filePath) throws EamDbException, CorrelationAttributeNormalizationException
	CorrelationAttributeInstance (String correlationValue, CorrelationAttributeInstance.Type correlationType, CorrelationCase eamCase, CorrelationDataSource eamDataSource, String filePath, String comment, TskData.FileKnown knownStatus) throws EamDbException, CorrelationAttributeNormalizationException
	CorrelationAttributeInstance (Type correlationType, String correlationValue, CorrelationCase correlationCase, CorrelationDataSource fromTSKDataSource, String string) throws EamDbException, CorrelationAttributeNormalizationException
	CorrelationAttributeInstance (Type aType, String value) throws EamDbException, CorrelationAttributeNormalizationException
Boolean	equals (CorrelationAttributeInstance otherInstance)
String	getComment ()
CorrelationCase	getCorrelationCase ()
CorrelationDataSource	getCorrelationDataSource ()
Type	getCorrelationType ()
String	getCorrelationValue ()
String	getFilePath ()
int	getID ()
TskData.FileKnown	getKnownStatus ()
boolean	isDatabaseInstance ()
void	setComment (String comment)
void	setCorrelationType (Type correlationType)
void	setCorrelationValue (String correlationValue)
void	setKnownStatus (TskData.FileKnown knownStatus)
String	toString ()

Static Public Member Functions
static List< CorrelationAttributeInstance.Type >	getDefaultCorrelationTypes () throws EamDbException

Static Public Attributes
static final int	DOMAIN_TYPE_ID = 1
static final int	EMAIL_TYPE_ID = 2
static final int	FILES_TYPE_ID = 0
static final int	PHONE_TYPE_ID = 3
static final int	USBID_TYPE_ID = 4

Private Attributes
String	comment
CorrelationCase	correlationCase
CorrelationDataSource	correlationDataSource
CorrelationAttributeInstance.Type	correlationType
String	correlationValue
String	filePath
int	ID
TskData.FileKnown	knownStatus

Static Private Attributes
static final long	serialVersionUID = 1L

Detailed Description

Used to store details about a specific instance of a CorrelationAttribute. Includes its data source, path, etc.

Definition at line 39 of file CorrelationAttributeInstance.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.CorrelationAttributeInstance	(	String	correlationValue,
		CorrelationAttributeInstance.Type	correlationType,
		CorrelationCase	eamCase,
		CorrelationDataSource	eamDataSource,
		String	filePath
	)		throws EamDbException, CorrelationAttributeNormalizationException

Definition at line 52 of file CorrelationAttributeInstance.java.

org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.CorrelationAttributeInstance	(	String	correlationValue,
		CorrelationAttributeInstance.Type	correlationType,
		CorrelationCase	eamCase,
		CorrelationDataSource	eamDataSource,
		String	filePath,
		String	comment,
		TskData.FileKnown	knownStatus
	)		throws EamDbException, CorrelationAttributeNormalizationException

Definition at line 62 of file CorrelationAttributeInstance.java.

org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.CorrelationAttributeInstance	(	Type	correlationType,
		String	correlationValue,
		CorrelationCase	correlationCase,
		CorrelationDataSource	fromTSKDataSource,
		String	string
	)		throws EamDbException, CorrelationAttributeNormalizationException

Definition at line 74 of file CorrelationAttributeInstance.java.

org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.CorrelationAttributeInstance	(	Type	aType,
		String	value
	)		throws EamDbException, CorrelationAttributeNormalizationException

NOTE: Only used for when EamDB is NOT enabled.

Parameters

aType	CorrelationAttributeInstance.Type
value	correlation value

Definition at line 89 of file CorrelationAttributeInstance.java.

Member Function Documentation

Boolean org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals

(

CorrelationAttributeInstance

otherInstance

)

Definition at line 118 of file CorrelationAttributeInstance.java.

References org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationCase(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationDataSource(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFilePath(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getID(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getKnownStatus().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getComment

(

)

Returns

the comment

Definition at line 211 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.addCentralRepositoryEntry(), org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< SpecialDirectory >.addCommentProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCommentProperty(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationCase

(

)

Returns

the eamCase

Definition at line 190 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.addCentralRepositoryEntry(), org.sleuthkit.autopsy.commonfilesearch.CentralRepoCommonAttributeInstanceNode.createSheet(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationDataSource

(

)

Returns

the eamDataSource

Definition at line 197 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.commonfilesearch.CentralRepoCommonAttributeInstanceNode.createSheet(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

Type org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationType

(

)

Returns

the correlation Type

Definition at line 159 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.addCentralRepositoryEntry(), org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< SpecialDirectory >.addCountProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getCorrelationValue

(

)

Returns

the correlationValue

Definition at line 144 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.datamodel.AbstractAbstractFileNode< SpecialDirectory >.addCountProperty(), org.sleuthkit.autopsy.datamodel.BlackboardArtifactNode.addCountProperty(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelatedInstances().

static List<CorrelationAttributeInstance.Type> org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getDefaultCorrelationTypes ( ) throws EamDbException

static

Load the default correlation types

Exceptions

EamDbException

if the Type's dbTableName has invalid characters/format

Definition at line 261 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelationAttributesFromNode(), org.sleuthkit.autopsy.commonfilesearch.CommonAttributeSearchResults.getMetadata(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDbSettings.initializeDatabaseSchema(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.initializeDatabaseSchema(), org.sleuthkit.autopsy.centralrepository.datamodel.EamDbUtil.insertDefaultCorrelationTypes(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getFilePath

(

)

Returns

the filePath

Definition at line 204 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.addCentralRepositoryEntry(), org.sleuthkit.autopsy.commonfilesearch.CentralRepoCommonAttributeInstanceNode.createSheet(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getID

(

)

Returns

the database ID

Definition at line 183 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals().

TskData.FileKnown org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.getKnownStatus

(

)

Get this knownStatus. This only indicates whether an item has been tagged as notable and should never return KNOWN.

Returns

BAD if the item has been tagged as notable, UNKNOWN otherwise

Definition at line 228 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.equals(), and org.sleuthkit.autopsy.centralrepository.eventlisteners.CaseEventListener.TagDefinitionChangeTask.run().

boolean org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.isDatabaseInstance

(

)

Is this a database instance?

Returns

True if the instance ID is greater or equal to zero; otherwise false.

Definition at line 176 of file CorrelationAttributeInstance.java.

void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setComment

(

String

comment

)

Parameters

comment

the comment to set

Definition at line 218 of file CorrelationAttributeInstance.java.

void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setCorrelationType

(

Type

correlationType

)

Parameters

correlationType

the correlation Type to set

Definition at line 166 of file CorrelationAttributeInstance.java.

void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setCorrelationValue

(

String

correlationValue

)

Parameters

correlationValue

the correlationValue to set

Definition at line 151 of file CorrelationAttributeInstance.java.

void org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.setKnownStatus

(

TskData.FileKnown

knownStatus

)

Set the knownStatus. This only indicates whether an item has been tagged as notable and should never be set to KNOWN.

Parameters

knownStatus

Should be BAD if the item is tagged as notable, UNKNOWN otherwise

Definition at line 239 of file CorrelationAttributeInstance.java.

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.toString

(

)

Definition at line 130 of file CorrelationAttributeInstance.java.

Member Data Documentation

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.comment

private

Definition at line 49 of file CorrelationAttributeInstance.java.

CorrelationCase org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationCase

private

Definition at line 46 of file CorrelationAttributeInstance.java.

CorrelationDataSource org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationDataSource

private

Definition at line 47 of file CorrelationAttributeInstance.java.

CorrelationAttributeInstance.Type org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationType

private

Definition at line 45 of file CorrelationAttributeInstance.java.

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.correlationValue

private

Definition at line 44 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.DOMAIN_TYPE_ID = 1

static

Definition at line 245 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstanceFromBlackboardArtifact(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.EMAIL_TYPE_ID = 2

static

Definition at line 246 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstanceFromBlackboardArtifact(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

String org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.filePath

private

Definition at line 48 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.FILES_TYPE_ID = 0

static

Definition at line 244 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.modules.hashdatabase.ImportCentralRepoDbProgressDialog.CentralRepoImportWorker.doInBackground(), org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.EamGlobalFileInstance(), org.sleuthkit.autopsy.modules.hashdatabase.HashDbManager.getCentralRepoHashSetsFromDatabase(), org.sleuthkit.autopsy.centralrepository.contentviewer.DataContentViewerOtherCases.getCorrelationAttributesFromNode(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.getInstanceFromContent(), org.sleuthkit.autopsy.centralrepository.datamodel.SqliteEamDbSettings.initializeDatabaseSchema(), org.sleuthkit.autopsy.centralrepository.datamodel.PostgresEamDbSettings.initializeDatabaseSchema(), org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstanceFromContent(), org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize(), org.sleuthkit.autopsy.contentviewers.AnnotationsContentViewer.populateCentralRepositoryData(), and org.sleuthkit.autopsy.centralrepository.datamodel.EamGlobalFileInstance.setMD5Hash().

int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.ID

private

Definition at line 43 of file CorrelationAttributeInstance.java.

TskData.FileKnown org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.knownStatus

private

Definition at line 50 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.PHONE_TYPE_ID = 3

static

Definition at line 247 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstanceFromBlackboardArtifact(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

final long org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.serialVersionUID = 1L

staticprivate

Definition at line 41 of file CorrelationAttributeInstance.java.

final int org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeInstance.USBID_TYPE_ID = 4

static

Definition at line 248 of file CorrelationAttributeInstance.java.

Referenced by org.sleuthkit.autopsy.centralrepository.datamodel.EamArtifactUtil.makeInstanceFromBlackboardArtifact(), and org.sleuthkit.autopsy.centralrepository.datamodel.CorrelationAttributeNormalizer.normalize().

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/centralrepository/datamodel/CorrelationAttributeInstance.java