Package org.sleuthkit.autopsy.casemodule

Examples of org.sleuthkit.autopsy.casemodule.Case


            }
        });
        Case.addPropertyChangeListener((PropertyChangeEvent evt) -> {
            switch (Case.Events.valueOf(evt.getPropertyName())) {
                case CURRENT_CASE:
                    Case newCase = (Case) evt.getNewValue();
                    if (newCase != null) { // case has been opened
                        setCase(newCase);    //connect db, groupmanager, start worker thread
                    } else { // case is closing
                        //close window, reset everything
                        SwingUtilities.invokeLater(ImageAnalyzerTopComponent::closeTopComponent);
View Full Code Here


        //check case
        if (!Case.existsCurrentCase()) {
            return;
        }
        final Case currentCase = Case.getCurrentCase();

        if (ImageAnalyzerModule.isCaseStale(currentCase)) {
            //case is stale, ask what to do
            int answer = JOptionPane.showConfirmDialog(WindowManager.getDefault().getMainWindow(), "The image / video databse may be out of date. "
                                                       + "Do you want to update and listen for further ingest results?\n"
View Full Code Here

     * Given a string hash value, find all files with that hash.
     * @param md5Hash   hash value to match files with
     * @return a List of all FsContent with the given hash
     */
    static List<AbstractFile> findFilesByMd5(String md5Hash) {
        final Case currentCase = Case.getCurrentCase();
        final SleuthkitCase skCase = currentCase.getSleuthkitCase();
        return skCase.findFilesByMd5(md5Hash);
    }
View Full Code Here

     * Checks if the search feature is ready/enabled. Does so by checking
     * if there are no Fs files in tsk_files that have and empty md5.
     * @return true if the search feature is ready.
     */
    static boolean allFilesMd5Hashed() {
        final Case currentCase = Case.getCurrentCase();
        final SleuthkitCase skCase = currentCase.getSleuthkitCase();
        return skCase.allFilesMd5Hashed();
    }
View Full Code Here

    /**
     * Counts the number of FsContent in the database that have an MD5
     * @return the number of files with an MD5
     */
    static int countFilesMd5Hashed() {
        final Case currentCase = Case.getCurrentCase();
        final SleuthkitCase skCase = currentCase.getSleuthkitCase();
        return skCase.countFilesMd5Hashed();
    }
View Full Code Here

        if (currentCore != null) {
            throw new KeywordSearchModuleException(
                    NbBundle.getMessage(this.getClass(), "Server.openCore.exception.alreadyOpen.msg"));
        }

        Case currentCase = Case.getCurrentCase();

        validateIndexLocation(currentCase);

        currentCore = openCore(currentCase);
        serverAction.putValue(CORE_EVT, CORE_EVT_STATES.STARTED);
View Full Code Here

        //check case
        if (!Case.existsCurrentCase()) {
            return;
        }
        final Case currentCase = Case.getCurrentCase();

        if (currentCase.hasData() == false) {
            JOptionPane.showMessageDialog(WindowManager.getDefault().getMainWindow(), "Error creating timeline, there are no data sources.");
            LOGGER.log(Level.INFO, "Error creating timeline, there are no data sources.");
            return;
        }
        synchronized (OpenTimelineAction.class) {
View Full Code Here

        }

        // There are two tasks to do.
        progressBar.switchToDeterminate(2);

        Case autopsyCase = Case.getCurrentCase();
        SleuthkitCase sleuthkitCase = autopsyCase.getSleuthkitCase();
        Services services = new Services(sleuthkitCase);
        FileManager fileManager = services.getFileManager();
        try {
            // Get count of files with .doc extension.
            long fileCount = 0;
View Full Code Here

        List<String> timeZones = new ArrayList<String>();

        if (Case.existsCurrentCase()) {
            // get the latest case
            Case currentCase = Case.getCurrentCase(); // get the most updated case

            Set<TimeZone> caseTimeZones = currentCase.getTimeZone();
            Iterator<TimeZone> iterator = caseTimeZones.iterator();
            while (iterator.hasNext()) {
                TimeZone zone = iterator.next();
                int offset = zone.getRawOffset() / 1000;
                int hour = offset / 3600;
View Full Code Here

                // For this sample, make a new attribute type to use to post
                // results to the blackboard. There are many standard blackboard
                // artifact and attribute types and you should use them instead
                // creating new ones to facilitate use of your results by other
                // modules.
                Case autopsyCase = Case.getCurrentCase();
                SleuthkitCase sleuthkitCase = autopsyCase.getSleuthkitCase();
                try {
                    // See if the attribute type has already been defined.
                    attrId = sleuthkitCase.getAttrTypeID("ATTR_SAMPLE");
                    if (attrId == -1) {
                        attrId = sleuthkitCase.addAttrType("ATTR_SAMPLE", "Sample Attribute");
View Full Code Here

TOP

Related Classes of org.sleuthkit.autopsy.casemodule.Case

Copyright © 2018 www.massapicom. All rights reserved.
All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.