Examples of org.sleuthkit.autopsy.ingest.ModuleDataEvent

org.sleuthkit.autopsy.ingest.ModuleDataEvent
Event data that are fired off by ingest modules when they have posted new data of specific type to the blackboard. The name of property change fired is then IngestManager.IngestModuleEvent.DATA.toString() In its most generic form, it only gives notice about a type of artifact and it can also give notice about specific IDs that can be retrieved. The object wraps a collection of blackboard artifacts and their associated attributes that are to be reported as the new data to listeners. Passing the data as part of the event reduces memory footprint and decreases number of garbage collections of the blackboard artifacts and attributes objects (the objects are expected to be reused by the data event listeners). If a module does not pass the data as part of ModuleDataEvent (ModuleDataEvent.getArtifacts() returns null) - it is an indication that the module has new data but it does not implement new data tracking. The listener can then perform a blackboard query to get the latest data of interest (e.g. by artifact type). By design, only a single type of artifacts can be contained in a single data event.

                                                     NbBundle.getMessage(this.getClass(),
                                                                         "RecentDocumentsByLnk.parentModuleName.noSpace"),
                                                     recentFile.getCrtime()));
            this.addArtifact(ARTIFACT_TYPE.TSK_RECENT_OBJECT, recentFile, bbattributes);
        }
        services.fireModuleDataEvent(new ModuleDataEvent(
                NbBundle.getMessage(this.getClass(), "RecentDocumentsByLnk.parentModuleName"),
                BlackboardArtifact.ARTIFACT_TYPE.TSK_RECENT_OBJECT));
    }

View Full Code Here

            for (AbstractFile derived : derivedFiles) {
                services.fireModuleContentEvent(new ModuleContentEvent(derived));
            }
        }
        context.addFilesToJob(derivedFiles);
        services.fireModuleDataEvent(new ModuleDataEvent(EmailParserModuleFactory.getModuleName(), BlackboardArtifact.ARTIFACT_TYPE.TSK_EMAIL_MSG));
    }

View Full Code Here

            bbattributes.add(new BlackboardAttribute(ATTRIBUTE_TYPE.TSK_DOMAIN.getTypeID(),
                                                     NbBundle.getMessage(this.getClass(),
                                                                         "ExtractIE.parentModuleName.noSpace"), domain));
            this.addArtifact(ARTIFACT_TYPE.TSK_WEB_BOOKMARK, fav, bbattributes);
        }
        services.fireModuleDataEvent(new ModuleDataEvent(
                NbBundle.getMessage(this.getClass(), "ExtractIE.parentModuleName"), BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK));
    }

View Full Code Here

            bbattributes.add(new BlackboardAttribute(ATTRIBUTE_TYPE.TSK_DOMAIN.getTypeID(),
                                                     NbBundle.getMessage(this.getClass(),
                                                                         "ExtractIE.parentModuleName.noSpace"), domain));
            this.addArtifact(ARTIFACT_TYPE.TSK_WEB_COOKIE, cookiesFile, bbattributes);
        }
        services.fireModuleDataEvent(new ModuleDataEvent(
                NbBundle.getMessage(this.getClass(), "ExtractIE.parentModuleName"), BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE));
    }

View Full Code Here

                        NbBundle.getMessage(this.getClass(), "ExtractIE.getHistory.errMsg.errProcHist", this.getName()));
            }
        }
        
        if (foundHistory) {
            services.fireModuleDataEvent(new ModuleDataEvent(
                    NbBundle.getMessage(this.getClass(), "ExtractIE.parentModuleName"), BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY));
        }
    }

View Full Code Here

                this.addArtifact(ARTIFACT_TYPE.TSK_WEB_HISTORY, historyFile, bbattributes);
            }
            dbFile.delete();
        }


        IngestServices.getInstance().fireModuleDataEvent(new ModuleDataEvent(NbBundle.getMessage(this.getClass(), "Chrome.parentModuleName"),
                                                         BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY));
    }

View Full Code Here

                }
            }
            dbFile.delete();
        }


        IngestServices.getInstance().fireModuleDataEvent(new ModuleDataEvent(NbBundle.getMessage(this.getClass(), "Chrome.parentModuleName"), BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_BOOKMARK));
    }

View Full Code Here

            }


            dbFile.delete();
        }


        IngestServices.getInstance().fireModuleDataEvent(new ModuleDataEvent(NbBundle.getMessage(this.getClass(), "Chrome.parentModuleName"), BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_COOKIE));
    }

View Full Code Here

            }


            dbFile.delete();
        }


        IngestServices.getInstance().fireModuleDataEvent(new ModuleDataEvent(NbBundle.getMessage(this.getClass(), "Chrome.parentModuleName"),
                                                         BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_DOWNLOAD));
    }

View Full Code Here

            }


            dbFile.delete();
        }


        IngestServices.getInstance().fireModuleDataEvent(new ModuleDataEvent(NbBundle.getMessage(this.getClass(), "Chrome.parentModuleName"), BlackboardArtifact.ARTIFACT_TYPE.TSK_WEB_HISTORY));
    }

View Full Code Here

0 1 2

TOP

Related Classes of org.sleuthkit.autopsy.ingest.ModuleDataEvent

org.sleuthkit.autopsy.actions.TagAction

org.sleuthkit.autopsy.examples.SampleFileIngestModule

org.sleuthkit.autopsy.externalresults.ExternalResultsImporter

org.sleuthkit.autopsy.keywordsearch.QueryResults

org.sleuthkit.autopsy.modules.exif.ExifParserFileIngestModule

org.sleuthkit.autopsy.modules.fileextmismatch.FileExtMismatchIngestModule

org.sleuthkit.autopsy.modules.hashdatabase.HashDbIngestModule

org.sleuthkit.autopsy.modules.sevenzip.SevenZipIngestModule

org.sleuthkit.autopsy.recentactivity.Chrome

org.sleuthkit.autopsy.recentactivity.ExtractIE

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.