mirror of
https://github.com/overcuriousity/autopsy-flatpak.git
synced 2025-07-06 21:00:22 +00:00
removed isSupported from ContentViewer API
This commit is contained in:
Brian Carrier
parent
3f9a296a0f
commit
a5de0c23b8
@ -1,7 +1,6 @@
|
||||
Changes to make to API when we are ready to make backward incompatible changes:
|
||||
|
||||
- HTMLReport has special API for more context on columns and special handling in REportGenerator. Change all reports to the new API.
|
||||
- DataContentViewer.isPreferred does not need isSupported to be passed in
|
||||
- DataContentViewerHex and Strings can have the public setDataView methods removed in favor of the new private ones
|
||||
- Content.getUniquePath() should not thrown TskException. We should deal with it in the method.
|
||||
- Make the list of events that Case fires off to be part of an enum to group them together (like IngestManager does).
|
||||
|
||||
@ -185,7 +185,7 @@ public class Metadata extends javax.swing.JPanel implements DataContentViewer
|
||||
}
|
||||
|
||||
@Override
|
||||
public int isPreferred(Node node, boolean isSupported) {
|
||||
public int isPreferred(Node node) {
|
||||
return 1;
|
||||
}
|
||||
}
|
||||
|
||||
@ -83,16 +83,15 @@ public interface DataContentViewer {
|
||||
* Checks whether the given viewer is preferred for the Node.
|
||||
* This is a bit subjective, but the idea is that Autopsy wants to display
|
||||
* the most relevant tab. The more generic the viewer, the lower
|
||||
* the return value should be.
|
||||
* the return value should be. This will only be called on viewers that
|
||||
* support the given node.
|
||||
*
|
||||
* @param node Node to check for preference
|
||||
* @param isSupported true if the viewer is supported by the node, false otherwise
|
||||
* as determined by a previous check
|
||||
* @return an int (0-10) higher return means the viewer has higher priority
|
||||
* 0 means not supported
|
||||
* 1 to 2 means the module will display all file types (such as the hex viewer)
|
||||
* 3-10 are prioritized by Content viewer developer. Modules that operate on very
|
||||
* few file types should be towards 10.
|
||||
*/
|
||||
public int isPreferred(Node node, boolean isSupported);
|
||||
public int isPreferred(Node node);
|
||||
}
|
||||
|
||||
@ -181,7 +181,7 @@ public class DataContentPanel extends javax.swing.JPanel implements DataContent,
|
||||
jTabbedPane1.setEnabledAt(i, true);
|
||||
|
||||
// remember the viewer with the highest preference value
|
||||
int currentPreferred = dcv.isPreferred(selectedNode, true);
|
||||
int currentPreferred = dcv.isPreferred(selectedNode);
|
||||
if (currentPreferred > maxPreferred) {
|
||||
preferredViewerIndex = i;
|
||||
maxPreferred = currentPreferred;
|
||||
@ -258,8 +258,8 @@ public class DataContentPanel extends javax.swing.JPanel implements DataContent,
|
||||
return this.wrapped.isSupported(node);
|
||||
}
|
||||
|
||||
int isPreferred(Node node, boolean isSupported) {
|
||||
return this.wrapped.isPreferred(node, isSupported);
|
||||
int isPreferred(Node node) {
|
||||
return this.wrapped.isPreferred(node);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
@ -326,18 +326,13 @@ public class DataContentViewerArtifact extends javax.swing.JPanel implements Dat
|
||||
}
|
||||
|
||||
@Override
|
||||
public int isPreferred(Node node, boolean isSupported) {
|
||||
public int isPreferred(Node node) {
|
||||
BlackboardArtifact artifact = node.getLookup().lookup(BlackboardArtifact.class);
|
||||
if(isSupported) {
|
||||
if(artifact == null) {
|
||||
return 3;
|
||||
}
|
||||
else {
|
||||
return 5;
|
||||
}
|
||||
if(artifact == null) {
|
||||
return 3;
|
||||
}
|
||||
else {
|
||||
return 0;
|
||||
return 5;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
@ -434,12 +434,8 @@ public class DataContentViewerHex extends javax.swing.JPanel implements DataCont
|
||||
}
|
||||
|
||||
@Override
|
||||
public int isPreferred(Node node, boolean isSupported) {
|
||||
if (isSupported) {
|
||||
return 1;
|
||||
} else {
|
||||
return 0;
|
||||
}
|
||||
public int isPreferred(Node node) {
|
||||
return 1;
|
||||
}
|
||||
|
||||
@Override
|
||||
|
||||
@ -226,25 +226,22 @@ public class DataContentViewerMedia extends javax.swing.JPanel implements DataCo
|
||||
}
|
||||
|
||||
@Override
|
||||
public int isPreferred(Node node, boolean isSupported) {
|
||||
if (isSupported) {
|
||||
//special case, check if deleted video, then do not make it preferred
|
||||
AbstractFile file = node.getLookup().lookup(AbstractFile.class);
|
||||
if (file == null) {
|
||||
return 0;
|
||||
}
|
||||
String name = file.getName().toLowerCase();
|
||||
boolean deleted = file.isDirNameFlagSet(TSK_FS_NAME_FLAG_ENUM.UNALLOC);
|
||||
|
||||
if (containsExt(name, videoExtensions) && deleted) {
|
||||
return 0;
|
||||
}
|
||||
else {
|
||||
return 7;
|
||||
}
|
||||
} else {
|
||||
public int isPreferred(Node node) {
|
||||
//special case, check if deleted video, then do not make it preferred
|
||||
AbstractFile file = node.getLookup().lookup(AbstractFile.class);
|
||||
if (file == null) {
|
||||
return 0;
|
||||
}
|
||||
String name = file.getName().toLowerCase();
|
||||
boolean deleted = file.isDirNameFlagSet(TSK_FS_NAME_FLAG_ENUM.UNALLOC);
|
||||
|
||||
if (containsExt(name, videoExtensions) && deleted) {
|
||||
return 0;
|
||||
}
|
||||
else {
|
||||
return 7;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
private static boolean containsExt(String name, String[] exts) {
|
||||
|
||||
@ -484,12 +484,8 @@ public class DataContentViewerString extends javax.swing.JPanel implements DataC
|
||||
}
|
||||
|
||||
@Override
|
||||
public int isPreferred(Node node, boolean isSupported) {
|
||||
if (node != null && isSupported) {
|
||||
return 1;
|
||||
} else {
|
||||
return 0;
|
||||
}
|
||||
public int isPreferred(Node node) {
|
||||
return 1;
|
||||
}
|
||||
|
||||
@Override
|
||||
|
||||
@ -1,31 +1,31 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
|
||||
<!DOCTYPE toc PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp TOC Version 2.0//EN" "http://java.sun.com/products/javahelp/toc_2_0.dtd">
|
||||
<toc version="2.0">
|
||||
<tocitem text="Data Explorers">
|
||||
<tocitem text="About Data Explorers" target="org.sleuthkit.autopsy.corecomponents.dataexplorer-about"/>
|
||||
<tocitem text="Directory Tree">
|
||||
<tocitem text="About Directory Tree" target="org.sleuthkit.autopsy.directorytree.about"/>
|
||||
<tocitem text="Image Details Window" target="org.sleuthkit.autopsy.directorytree.image-details"/>
|
||||
<tocitem text="Volume Details Window" target="org.sleuthkit.autopsy.directorytree.volume-details"/>
|
||||
<tocitem text="Extracting Unallocated Space" target="org.sleuthkit.autopsy.directorytree.unallocated-space"/>
|
||||
</tocitem>
|
||||
<tocitem text="File Search">
|
||||
<tocitem text="About File Search" target="org.sleuthkit.autopsy.filesearch.about"/>
|
||||
<tocitem text="How to Open File Search" target="org.sleuthkit.autopsy.filesearch.open-filesearch"/>
|
||||
<tocitem text="How to Use File Search" target="org.sleuthkit.autopsy.filesearch.how-to-use-filesearch"/>
|
||||
</tocitem>
|
||||
</tocitem>
|
||||
<tocitem text="Result Viewers">
|
||||
<tocitem text="About Result Viewers" target="org.sleuthkit.autopsy.corecomponents.dataresult-about"/>
|
||||
<tocitem text="Table Results Viewer" target="org.sleuthkit.autopsy.corecomponents.table-results-viewer"/>
|
||||
<tocitem text="Thumbnail Result Viewer" target="org.sleuthkit.autopsy.corecomponents.thumbnail-results-viewer"/>
|
||||
</tocitem>
|
||||
<tocitem text="Content Viewers">
|
||||
<tocitem text="About Content Viewers" target="org.sleuthkit.autopsy.corecomponents.datacontent-about"/>
|
||||
<tocitem text="Hex Content Viewer" target="org.sleuthkit.autopsy.corecomponents.hex-content-viewer"/>
|
||||
<tocitem text="String Content Viewer" target="org.sleuthkit.autopsy.corecomponents.string-content-viewer"/>
|
||||
<tocitem text="Text Content Viewer" target="org.sleuthkit.autopsy.corecomponents.text-content-viewer"/>
|
||||
<tocitem text="Media Content Viewer" target="org.sleuthkit.autopsy.corecomponents.picture-content-viewer"/>
|
||||
</tocitem>
|
||||
</toc>
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
|
||||
<!DOCTYPE toc PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp TOC Version 2.0//EN" "http://java.sun.com/products/javahelp/toc_2_0.dtd">
|
||||
<toc version="2.0">
|
||||
<tocitem text="Data Explorers">
|
||||
<tocitem text="About Data Explorers" target="org.sleuthkit.autopsy.corecomponents.dataexplorer-about"/>
|
||||
<tocitem text="Directory Tree">
|
||||
<tocitem text="About Directory Tree" target="org.sleuthkit.autopsy.directorytree.about"/>
|
||||
<tocitem text="Image Details Window" target="org.sleuthkit.autopsy.directorytree.image-details"/>
|
||||
<tocitem text="Volume Details Window" target="org.sleuthkit.autopsy.directorytree.volume-details"/>
|
||||
<tocitem text="Extracting Unallocated Space" target="org.sleuthkit.autopsy.directorytree.unallocated-space"/>
|
||||
</tocitem>
|
||||
<tocitem text="File Search">
|
||||
<tocitem text="About File Search" target="org.sleuthkit.autopsy.filesearch.about"/>
|
||||
<tocitem text="How to Open File Search" target="org.sleuthkit.autopsy.filesearch.open-filesearch"/>
|
||||
<tocitem text="How to Use File Search" target="org.sleuthkit.autopsy.filesearch.how-to-use-filesearch"/>
|
||||
</tocitem>
|
||||
</tocitem>
|
||||
<tocitem text="Result Viewers">
|
||||
<tocitem text="About Result Viewers" target="org.sleuthkit.autopsy.corecomponents.dataresult-about"/>
|
||||
<tocitem text="Table Results Viewer" target="org.sleuthkit.autopsy.corecomponents.table-results-viewer"/>
|
||||
<tocitem text="Thumbnail Result Viewer" target="org.sleuthkit.autopsy.corecomponents.thumbnail-results-viewer"/>
|
||||
</tocitem>
|
||||
<tocitem text="Content Viewers">
|
||||
<tocitem text="About Content Viewers" target="org.sleuthkit.autopsy.corecomponents.datacontent-about"/>
|
||||
<tocitem text="Hex Content Viewer" target="org.sleuthkit.autopsy.corecomponents.hex-content-viewer"/>
|
||||
<tocitem text="String Content Viewer" target="org.sleuthkit.autopsy.corecomponents.string-content-viewer"/>
|
||||
<tocitem text="Text Content Viewer" target="org.sleuthkit.autopsy.corecomponents.text-content-viewer"/>
|
||||
<tocitem text="Media Content Viewer" target="org.sleuthkit.autopsy.corecomponents.picture-content-viewer"/>
|
||||
</tocitem>
|
||||
</toc>
|
||||
|
||||
@ -1,50 +1,50 @@
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>About Content Viewers</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Content Viewers</h2>
|
||||
<p>
|
||||
The Content Viewer area is in the lower right area of the interface.
|
||||
This area is used to view a specific file in a variety of formats.
|
||||
There are different tabs for different viewers.
|
||||
Not all tabs support all file types, so only some of them will be enabled.
|
||||
To display data in this area, a file must be selected from the
|
||||
<a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataresult-about.html">Result Viewer</a> window.
|
||||
</p>
|
||||
|
||||
<p>
|
||||
The Content Viewer area is part of a plug-in framework.
|
||||
You can install modules that will add more viewer types.
|
||||
This section describes the viewers that come by default with Autopsy.
|
||||
</p>
|
||||
|
||||
<p>Here's an example of a "Content Viewer" window:</p>
|
||||
<img src="ContentViewer_example.png" alt="Example of Content Viewer Window" />
|
||||
|
||||
<h2>Default Viewers</h2>
|
||||
<p> Currently, there are 5 main tabs on "Content Viewer" window:</p>
|
||||
<ul>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/result-viewer.html">Result Viewer</a></li>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/hex-content-viewer.html">Hex Content Viewer</a></li>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/string-content-viewer.html">String Content Viewer</a></li>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/picture-content-viewer.html">Media Viewer</a></li>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/text-content-viewer.html">Text Viewer</a></li>
|
||||
</ul>
|
||||
</body>
|
||||
</html>
|
||||
<!--
|
||||
Tip: to create a link which will open in an external web browser, try:
|
||||
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
|
||||
<param name="content" value="http://www.netbeans.org/">
|
||||
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
|
||||
<param name="textFontSize" value="medium">
|
||||
<param name="textColor" value="blue">
|
||||
</object>
|
||||
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
|
||||
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
|
||||
(This link will behave sanely if that module is disabled or missing.)
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>About Content Viewers</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Content Viewers</h2>
|
||||
<p>
|
||||
The Content Viewer area is in the lower right area of the interface.
|
||||
This area is used to view a specific file in a variety of formats.
|
||||
There are different tabs for different viewers.
|
||||
Not all tabs support all file types, so only some of them will be enabled.
|
||||
To display data in this area, a file must be selected from the
|
||||
<a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataresult-about.html">Result Viewer</a> window.
|
||||
</p>
|
||||
|
||||
<p>
|
||||
The Content Viewer area is part of a plug-in framework.
|
||||
You can install modules that will add more viewer types.
|
||||
This section describes the viewers that come by default with Autopsy.
|
||||
</p>
|
||||
|
||||
<p>Here's an example of a "Content Viewer" window:</p>
|
||||
<img src="ContentViewer_example.png" alt="Example of Content Viewer Window" />
|
||||
|
||||
<h2>Default Viewers</h2>
|
||||
<p> Currently, there are 5 main tabs on "Content Viewer" window:</p>
|
||||
<ul>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/result-viewer.html">Result Viewer</a></li>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/hex-content-viewer.html">Hex Content Viewer</a></li>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/string-content-viewer.html">String Content Viewer</a></li>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/picture-content-viewer.html">Media Viewer</a></li>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/text-content-viewer.html">Text Viewer</a></li>
|
||||
</ul>
|
||||
</body>
|
||||
</html>
|
||||
<!--
|
||||
Tip: to create a link which will open in an external web browser, try:
|
||||
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
|
||||
<param name="content" value="http://www.netbeans.org/">
|
||||
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
|
||||
<param name="textFontSize" value="medium">
|
||||
<param name="textColor" value="blue">
|
||||
</object>
|
||||
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
|
||||
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
|
||||
(This link will behave sanely if that module is disabled or missing.)
|
||||
!-->
|
||||
@ -1,47 +1,47 @@
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Data Explorers</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>About the Data Explorer</h2>
|
||||
<p>
|
||||
The Data Explorer view in Autopsy is the <a href="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/directorytree-about.html">directory tree</a>
|
||||
node structure seen on the left hand side.
|
||||
</p>
|
||||
|
||||
<p>The data explorer contains the following data:</p>
|
||||
<ul>
|
||||
<li>Image file-system with its directory structure that can be navigated,</li>
|
||||
<li>Saved results of image and file analysis, such as results produced by the ingest process,</li>
|
||||
<li>Built-in views and filters on the file-system and saved results.</li>
|
||||
</ul>
|
||||
|
||||
<p>The data explorer provides different methods for finding relevant data, such as:</p>
|
||||
<ul>
|
||||
<li>All files of a specific type</li>
|
||||
<li>Different extracted content types (web bookmarks, web history, installed programs, devices, etc.)</li>
|
||||
<li>Hash database hits</li>
|
||||
<li>Keyword hits</li>
|
||||
<li>File bookmarks</li>
|
||||
</ul>
|
||||
<p>
|
||||
The Data Explorer will publish all relevant data to the <a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataresult-about.html">Result Viewer</a>
|
||||
when specific nodes are clicked. In general, if you are looking for an 'analysis technique', then this is where you should look.
|
||||
</p>
|
||||
</body>
|
||||
</html>
|
||||
<!--
|
||||
Tip: to create a link which will open in an external web browser, try:
|
||||
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
|
||||
<param name="content" value="http://www.netbeans.org/">
|
||||
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
|
||||
<param name="textFontSize" value="medium">
|
||||
<param name="textColor" value="blue">
|
||||
</object>
|
||||
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
|
||||
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
|
||||
(This link will behave sanely if that module is disabled or missing.)
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Data Explorers</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>About the Data Explorer</h2>
|
||||
<p>
|
||||
The Data Explorer view in Autopsy is the <a href="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/directorytree-about.html">directory tree</a>
|
||||
node structure seen on the left hand side.
|
||||
</p>
|
||||
|
||||
<p>The data explorer contains the following data:</p>
|
||||
<ul>
|
||||
<li>Image file-system with its directory structure that can be navigated,</li>
|
||||
<li>Saved results of image and file analysis, such as results produced by the ingest process,</li>
|
||||
<li>Built-in views and filters on the file-system and saved results.</li>
|
||||
</ul>
|
||||
|
||||
<p>The data explorer provides different methods for finding relevant data, such as:</p>
|
||||
<ul>
|
||||
<li>All files of a specific type</li>
|
||||
<li>Different extracted content types (web bookmarks, web history, installed programs, devices, etc.)</li>
|
||||
<li>Hash database hits</li>
|
||||
<li>Keyword hits</li>
|
||||
<li>File bookmarks</li>
|
||||
</ul>
|
||||
<p>
|
||||
The Data Explorer will publish all relevant data to the <a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataresult-about.html">Result Viewer</a>
|
||||
when specific nodes are clicked. In general, if you are looking for an 'analysis technique', then this is where you should look.
|
||||
</p>
|
||||
</body>
|
||||
</html>
|
||||
<!--
|
||||
Tip: to create a link which will open in an external web browser, try:
|
||||
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
|
||||
<param name="content" value="http://www.netbeans.org/">
|
||||
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
|
||||
<param name="textFontSize" value="medium">
|
||||
<param name="textColor" value="blue">
|
||||
</object>
|
||||
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
|
||||
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
|
||||
(This link will behave sanely if that module is disabled or missing.)
|
||||
!-->
|
||||
@ -1,45 +1,45 @@
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Result Viewers</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Result Viewers</h2>
|
||||
<p>
|
||||
The Result Viewer windows are in the upper right area of the interface and display the results from selecting something in the
|
||||
<a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataexplorer-about.html">Data Explorer Tree</a> area.
|
||||
You will have the option to display the results in a variety of formats.
|
||||
</p>
|
||||
|
||||
<p>Currently, there are 2 main tabs in the Result Viewer window:</p>
|
||||
<ul>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/table-results-viewer.html">Table Results Viewer</a></li>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/thumbnail-results-viewer.html">Thumbnail Results Viewer</a></li>
|
||||
</ul>
|
||||
|
||||
<h2>Right Click Functions</h2>
|
||||
<p>
|
||||
Viewers in Result Viewers have certain right-click functions built-in into them that can be accessed when a node a certain type is selected (a file, directory or a result).
|
||||
</p>
|
||||
|
||||
<p>Here are some examples that you may see:</p>
|
||||
<ul>
|
||||
<li><strong>Open File in External Viewer</strong>:
|
||||
Opens the selected file in an "external" application as defined by the local OS.
|
||||
For example, HTML files may be opened by IE or Firefox, depending on what the local system is configured to use.</li>
|
||||
<li><strong>View in New Window:</strong>
|
||||
Opens the content in a new internal Content Viewer (instead of in the default location in the lower right).</li>
|
||||
<li><strong>Extract:</strong>
|
||||
Make a local copy of the file or directory for further analysis.</li>
|
||||
<li><strong>Search for files with the same MD5 Hash:</strong>
|
||||
Searches the entire file-system for any files with the same MD5 Hash as the one selected.</li>
|
||||
</ul>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of a "Result Viewer" window:</p>
|
||||
<img src="ResultViewer_example.png" alt="Example of Result Viewer Window" />
|
||||
</body>
|
||||
</html>
|
||||
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Result Viewers</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Result Viewers</h2>
|
||||
<p>
|
||||
The Result Viewer windows are in the upper right area of the interface and display the results from selecting something in the
|
||||
<a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataexplorer-about.html">Data Explorer Tree</a> area.
|
||||
You will have the option to display the results in a variety of formats.
|
||||
</p>
|
||||
|
||||
<p>Currently, there are 2 main tabs in the Result Viewer window:</p>
|
||||
<ul>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/table-results-viewer.html">Table Results Viewer</a></li>
|
||||
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/thumbnail-results-viewer.html">Thumbnail Results Viewer</a></li>
|
||||
</ul>
|
||||
|
||||
<h2>Right Click Functions</h2>
|
||||
<p>
|
||||
Viewers in Result Viewers have certain right-click functions built-in into them that can be accessed when a node a certain type is selected (a file, directory or a result).
|
||||
</p>
|
||||
|
||||
<p>Here are some examples that you may see:</p>
|
||||
<ul>
|
||||
<li><strong>Open File in External Viewer</strong>:
|
||||
Opens the selected file in an "external" application as defined by the local OS.
|
||||
For example, HTML files may be opened by IE or Firefox, depending on what the local system is configured to use.</li>
|
||||
<li><strong>View in New Window:</strong>
|
||||
Opens the content in a new internal Content Viewer (instead of in the default location in the lower right).</li>
|
||||
<li><strong>Extract:</strong>
|
||||
Make a local copy of the file or directory for further analysis.</li>
|
||||
<li><strong>Search for files with the same MD5 Hash:</strong>
|
||||
Searches the entire file-system for any files with the same MD5 Hash as the one selected.</li>
|
||||
</ul>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of a "Result Viewer" window:</p>
|
||||
<img src="ResultViewer_example.png" alt="Example of Result Viewer Window" />
|
||||
</body>
|
||||
</html>
|
||||
|
||||
|
||||
@ -1,21 +1,21 @@
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Hex Content Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Hex Content Viewer</h2>
|
||||
<p>
|
||||
Hex Content Viewer shows you the raw and exact contents of a file.
|
||||
In this Hex Content Viewer, the data of the file is represented as hexadecimal values grouped in 2 groups of 8 bytes,
|
||||
followed by one group of 16 ASCII characters which are derived from each pair of hex values (each byte).
|
||||
Non-printable ASCII characters and characters that would take more than one character space are typically represented by a dot (".") in the following ASCII field.
|
||||
</p>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of "Hex Content Viewer" window:</p>
|
||||
<img src="Hex_Content_Viewer.png" alt="Example of Hex Content Viewer Tab" />
|
||||
</body>
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Hex Content Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Hex Content Viewer</h2>
|
||||
<p>
|
||||
Hex Content Viewer shows you the raw and exact contents of a file.
|
||||
In this Hex Content Viewer, the data of the file is represented as hexadecimal values grouped in 2 groups of 8 bytes,
|
||||
followed by one group of 16 ASCII characters which are derived from each pair of hex values (each byte).
|
||||
Non-printable ASCII characters and characters that would take more than one character space are typically represented by a dot (".") in the following ASCII field.
|
||||
</p>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of "Hex Content Viewer" window:</p>
|
||||
<img src="Hex_Content_Viewer.png" alt="Example of Hex Content Viewer Tab" />
|
||||
</body>
|
||||
</html>
|
||||
@ -1,20 +1,20 @@
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Media Content Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Media Content Viewer</h2>
|
||||
<p>
|
||||
The Media Content Viewer will show a picture or video file.
|
||||
Video files can be played and paused.
|
||||
The size of the picture or video will be reduced to fit into the screen.
|
||||
If you want more complex analysis of the media, then you must export the file.
|
||||
</p>
|
||||
<p>If you select an non-picture file or an unsupported picture format on the "Result Viewers", this tab will be disabled.</p>
|
||||
<p>Here's one of the example of the "Media Content Viewer":</p>
|
||||
<img src="Picture_Content_Viewer.png" alt="Example of Picture Content Viewer Tab" />
|
||||
</body>
|
||||
</html>
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Media Content Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Media Content Viewer</h2>
|
||||
<p>
|
||||
The Media Content Viewer will show a picture or video file.
|
||||
Video files can be played and paused.
|
||||
The size of the picture or video will be reduced to fit into the screen.
|
||||
If you want more complex analysis of the media, then you must export the file.
|
||||
</p>
|
||||
<p>If you select an non-picture file or an unsupported picture format on the "Result Viewers", this tab will be disabled.</p>
|
||||
<p>Here's one of the example of the "Media Content Viewer":</p>
|
||||
<img src="Picture_Content_Viewer.png" alt="Example of Picture Content Viewer Tab" />
|
||||
</body>
|
||||
</html>
|
||||
|
||||
@ -1,28 +1,28 @@
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Result Content Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Result Content Viewer</h2>
|
||||
<p>Result Content Viewer shows the artifacts (saved results) associated with the item selected in the Result Viewer.</p>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of "Result Content Viewer" window:</p>
|
||||
<img src="Result_Viewer.png" alt="Example of Result Content Viewer Tab" />
|
||||
</body>
|
||||
</html>
|
||||
<!--
|
||||
Tip: to create a link which will open in an external web browser, try:
|
||||
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
|
||||
<param name="content" value="http://www.netbeans.org/">
|
||||
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
|
||||
<param name="textFontSize" value="medium">
|
||||
<param name="textColor" value="blue">
|
||||
</object>
|
||||
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
|
||||
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
|
||||
(This link will behave sanely if that module is disabled or missing.)
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Result Content Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Result Content Viewer</h2>
|
||||
<p>Result Content Viewer shows the artifacts (saved results) associated with the item selected in the Result Viewer.</p>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of "Result Content Viewer" window:</p>
|
||||
<img src="Result_Viewer.png" alt="Example of Result Content Viewer Tab" />
|
||||
</body>
|
||||
</html>
|
||||
<!--
|
||||
Tip: to create a link which will open in an external web browser, try:
|
||||
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
|
||||
<param name="content" value="http://www.netbeans.org/">
|
||||
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
|
||||
<param name="textFontSize" value="medium">
|
||||
<param name="textColor" value="blue">
|
||||
</object>
|
||||
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
|
||||
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
|
||||
(This link will behave sanely if that module is disabled or missing.)
|
||||
!-->
|
||||
@ -1,23 +1,23 @@
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>String Content Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>String Content Viewer</h2>
|
||||
<p>
|
||||
Strings Content Viewer scans (potentially binary) data of the file / folder and searches it for data that could be text.
|
||||
When appropriate data is found, the String Content Viewer shows data strings extracted from binary, decoded, and interpreted as UTF8/16 for the selected script/language.
|
||||
</p>
|
||||
<p>
|
||||
Note that this is different from the Text Content Viewer, which displays the text for a file that is stored in the keyword search index.
|
||||
The results may be the same or they could be different, depending how the data were interpreted by the indexer.
|
||||
</p>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of "String Content Viewer" window:</p>
|
||||
<img src="String_Content_Viewer.png" alt="Example of String Content Viewer Tab" />
|
||||
</body>
|
||||
</html>
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>String Content Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>String Content Viewer</h2>
|
||||
<p>
|
||||
Strings Content Viewer scans (potentially binary) data of the file / folder and searches it for data that could be text.
|
||||
When appropriate data is found, the String Content Viewer shows data strings extracted from binary, decoded, and interpreted as UTF8/16 for the selected script/language.
|
||||
</p>
|
||||
<p>
|
||||
Note that this is different from the Text Content Viewer, which displays the text for a file that is stored in the keyword search index.
|
||||
The results may be the same or they could be different, depending how the data were interpreted by the indexer.
|
||||
</p>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of "String Content Viewer" window:</p>
|
||||
<img src="String_Content_Viewer.png" alt="Example of String Content Viewer Tab" />
|
||||
</body>
|
||||
</html>
|
||||
|
||||
@ -1,24 +1,24 @@
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Table Results (Directory Listing) Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Table Results Viewer</h2>
|
||||
<p>
|
||||
Table Results Viewer (Directory Listing) displays the data catalog as a table with some details (properties) of each file.
|
||||
The properties that it shows are: name, time (modified, changed, accessed, and created), size, flags (directory and meta), mode, user ID, group ID, metadata address, attribute address, and type (directory and meta).
|
||||
Click the Table Viewer tab to select this view.
|
||||
</p>
|
||||
<p>
|
||||
The Results Viewer can be also activated for saved results and it can show a high level results grouped,
|
||||
or a results at a file level, depending on which node on the Directory Tree is selected to populate the Table Results Viewer.
|
||||
</p>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of a "Table Results Viewer" window:</p>
|
||||
<img src="Table_Results_Viewer.png" alt="Example of Table Result Viewers Tab" />
|
||||
</body>
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Table Results (Directory Listing) Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Table Results Viewer</h2>
|
||||
<p>
|
||||
Table Results Viewer (Directory Listing) displays the data catalog as a table with some details (properties) of each file.
|
||||
The properties that it shows are: name, time (modified, changed, accessed, and created), size, flags (directory and meta), mode, user ID, group ID, metadata address, attribute address, and type (directory and meta).
|
||||
Click the Table Viewer tab to select this view.
|
||||
</p>
|
||||
<p>
|
||||
The Results Viewer can be also activated for saved results and it can show a high level results grouped,
|
||||
or a results at a file level, depending on which node on the Directory Tree is selected to populate the Table Results Viewer.
|
||||
</p>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of a "Table Results Viewer" window:</p>
|
||||
<img src="Table_Results_Viewer.png" alt="Example of Table Result Viewers Tab" />
|
||||
</body>
|
||||
</html>
|
||||
@ -1,30 +1,30 @@
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Text View</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Text View</h2>
|
||||
<p>
|
||||
Text Content Viewer uses the keyword search index that may have been populated during
|
||||
<a href="nbdocs:/org/sleuthkit/autopsy/ingest/docs/ingest-about.html">Image Ingest</a>.
|
||||
If a file has text stored in the index, then this tab will be enabled and it will be displayed to the user if a file or a result associated with a file is selected.
|
||||
</p>
|
||||
<p>
|
||||
This tab may have more text on it than the "String View", which relies on searching the file for text-looking data.
|
||||
Some files, like PDF, will not have text-looking data at the byte-level, but the keyword indexing process knows how to interpret a PDF file and produce text.
|
||||
For the files the indexer knows about, there may be the METADATA section at the end of the displayed extracted text.
|
||||
If an indexed document contains any metadata (such as creation date, author, etc), it will be displayed there.
|
||||
Note that, unlike the "String View", the Text View does not have its built-in settings for the script/language to use for extracted strings.
|
||||
This is because the script/language is used at indexing time, and that setting is associated with the Keyword Search indexer, not the viewer.
|
||||
</p>
|
||||
<p>
|
||||
If this tab is not enabled, then either the file has no text or you did not enable Keyword Search as an ingest module.
|
||||
Note that this viewer is also used to display highlighted keyword hits when operated in the "Search Matches" mode,
|
||||
selected on the right-hand side of the viewer's toolbar.
|
||||
</p>
|
||||
<img src="textview.png" alt="Text View" />
|
||||
</body>
|
||||
</html>
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Text View</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Text View</h2>
|
||||
<p>
|
||||
Text Content Viewer uses the keyword search index that may have been populated during
|
||||
<a href="nbdocs:/org/sleuthkit/autopsy/ingest/docs/ingest-about.html">Image Ingest</a>.
|
||||
If a file has text stored in the index, then this tab will be enabled and it will be displayed to the user if a file or a result associated with a file is selected.
|
||||
</p>
|
||||
<p>
|
||||
This tab may have more text on it than the "String View", which relies on searching the file for text-looking data.
|
||||
Some files, like PDF, will not have text-looking data at the byte-level, but the keyword indexing process knows how to interpret a PDF file and produce text.
|
||||
For the files the indexer knows about, there may be the METADATA section at the end of the displayed extracted text.
|
||||
If an indexed document contains any metadata (such as creation date, author, etc), it will be displayed there.
|
||||
Note that, unlike the "String View", the Text View does not have its built-in settings for the script/language to use for extracted strings.
|
||||
This is because the script/language is used at indexing time, and that setting is associated with the Keyword Search indexer, not the viewer.
|
||||
</p>
|
||||
<p>
|
||||
If this tab is not enabled, then either the file has no text or you did not enable Keyword Search as an ingest module.
|
||||
Note that this viewer is also used to display highlighted keyword hits when operated in the "Search Matches" mode,
|
||||
selected on the right-hand side of the viewer's toolbar.
|
||||
</p>
|
||||
<img src="textview.png" alt="Text View" />
|
||||
</body>
|
||||
</html>
|
||||
|
||||
@ -1,22 +1,22 @@
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Thumbnail Results Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Thumbnail Results Viewer</h2>
|
||||
<p>
|
||||
Thumbnail Results Viewer displays the data catalog as a table of thumbnail images in adjustable sizes.
|
||||
This viewer only supports picture file(s) (Currently, only supports JPG, GIF, and PNG formats).
|
||||
Click the Thumbnail tab to select this view.
|
||||
Note that for a large number of images in a directory selected in the Data Explorer, or for a View selected that contains
|
||||
a large number of images, it might take a while to populate this view for the first time before the images are cached.
|
||||
</p>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of "Thumbnail Results Viewer" window:</p>
|
||||
<img src="Thumbnail_Results_Viewer.png" alt="Example of Thumbnail Results Viewer Tab" />
|
||||
</body>
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>Thumbnail Results Viewer</title>
|
||||
<link rel="stylesheet" href="nbdocs:/org/sleuthkit/autopsy/core/docs/ide.css" type="text/css">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
</head>
|
||||
<body>
|
||||
<h2>Thumbnail Results Viewer</h2>
|
||||
<p>
|
||||
Thumbnail Results Viewer displays the data catalog as a table of thumbnail images in adjustable sizes.
|
||||
This viewer only supports picture file(s) (Currently, only supports JPG, GIF, and PNG formats).
|
||||
Click the Thumbnail tab to select this view.
|
||||
Note that for a large number of images in a directory selected in the Data Explorer, or for a View selected that contains
|
||||
a large number of images, it might take a while to populate this view for the first time before the images are cached.
|
||||
</p>
|
||||
|
||||
<h2>Example</h2>
|
||||
<p>Below is an example of "Thumbnail Results Viewer" window:</p>
|
||||
<img src="Thumbnail_Results_Viewer.png" alt="Example of Thumbnail Results Viewer Tab" />
|
||||
</body>
|
||||
</html>
|
||||
@ -166,10 +166,7 @@ public class SampleContentViewer extends javax.swing.JPanel implements DataConte
|
||||
}
|
||||
|
||||
@Override
|
||||
public int isPreferred(Node node, boolean isSupported) {
|
||||
if (isSupported == false) {
|
||||
return 0;
|
||||
}
|
||||
public int isPreferred(Node node) {
|
||||
// we return 1 since this module will operate on nearly all files
|
||||
return 1;
|
||||
}
|
||||
|
||||
@ -311,19 +311,15 @@ public class ExtractedContentViewer implements DataContentViewer {
|
||||
}
|
||||
|
||||
@Override
|
||||
public int isPreferred(Node node,
|
||||
boolean isSupported) {
|
||||
public int isPreferred(Node node) {
|
||||
BlackboardArtifact art = node.getLookup().lookup(BlackboardArtifact.class);
|
||||
if (isSupported) {
|
||||
if (art == null) {
|
||||
return 4;
|
||||
} else if (art.getArtifactTypeID() == BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getTypeID()) {
|
||||
return 6;
|
||||
} else {
|
||||
return 4;
|
||||
}
|
||||
|
||||
if (art == null) {
|
||||
return 4;
|
||||
} else if (art.getArtifactTypeID() == BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getTypeID()) {
|
||||
return 6;
|
||||
} else {
|
||||
return 0;
|
||||
return 4;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user