mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-13 16:36:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

1917 made FileTypeByExtType a inner class of FileTypesByExtType

Browse Source
This commit is contained in:
William Schaefer 2016-12-01 16:51:13 -05:00
parent 038ce32767
commit d8c4ea9044
7 changed files with 583 additions and 614 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Core/src/org/sleuthkit/autopsy/datamodel/Bundle.properties
View File

@ -118,12 +118,12 @@ FileSize.createSheet.filterType.displayName=Filter Type
FileSize.createSheet.filterType.desc=no description FileSize.createSheet.filterType.desc=no description
FileSize.exception.notSupported.msg=Not supported for this type of Displayable Item\: {0} FileSize.exception.notSupported.msg=Not supported for this type of Displayable Item\: {0}
FileTypeChildren.exception.notSupported.msg=Not supported for this type of Displayable Item\: {0} FileTypeChildren.exception.notSupported.msg=Not supported for this type of Displayable Item\: {0}
FileTypeByExtNode.createSheet.filterType.name=Filter Type FileTypesByExtNode.createSheet.filterType.name=Filter Type
FileTypeByExtNode.createSheet.filterType.displayName=Filter Type FileTypesByExtNode.createSheet.filterType.displayName=Filter Type
FileTypeByExtNode.createSheet.filterType.desc=no description FileTypesByExtNode.createSheet.filterType.desc=no description
FileTypeByExtNode.createSheet.fileExt.name=File Extensions FileTypesByExtNode.createSheet.fileExt.name=File Extensions
FileTypeByExtNode.createSheet.fileExt.displayName=File Extensions FileTypesByExtNode.createSheet.fileExt.displayName=File Extensions
FileTypeByExtNode.createSheet.fileExt.desc=no description FileTypesByExtNode.createSheet.fileExt.desc=no description
FileTypesByExtNode.fname.text=By Extension FileTypesByExtNode.fname.text=By Extension
FileTypesByExtNode.createSheet.name.name=Name FileTypesByExtNode.createSheet.name.name=Name
FileTypesByExtNode.createSheet.name.displayName=Name FileTypesByExtNode.createSheet.name.displayName=Name

8
Core/src/org/sleuthkit/autopsy/datamodel/DisplayableItemNodeVisitor.java
View File

@ -58,7 +58,7 @@ public interface DisplayableItemNodeVisitor<T> {
*/ */
T visit(ViewsNode vn); T visit(ViewsNode vn);
T visit(FileTypeByExtNode fsfn); T visit(FileTypesByExtNode.ByExtNode fsfn);
T visit(DeletedContentNode dcn); T visit(DeletedContentNode dcn);
@ -154,8 +154,6 @@ public interface DisplayableItemNodeVisitor<T> {
T visit(EmptyNode.MessageNode emptyNode); T visit(EmptyNode.MessageNode emptyNode);
/** /**
* Visitor with an implementable default behavior for all types. Override * Visitor with an implementable default behavior for all types. Override
* specific visit types to not use the default behavior. * specific visit types to not use the default behavior.
@ -214,7 +212,7 @@ public interface DisplayableItemNodeVisitor<T> {
} }
@Override @Override
public T visit(FileTypeByExtNode fsfn) { public T visit(FileTypesByExtNode.ByExtNode fsfn) {
return defaultVisit(fsfn); return defaultVisit(fsfn);
} }
@ -302,6 +300,7 @@ public interface DisplayableItemNodeVisitor<T> {
public T visit(FileTypesNode ft) { public T visit(FileTypesNode ft) {
return defaultVisit(ft); return defaultVisit(ft);
} }
@Override @Override
public T visit(DataSourcesNode in) { public T visit(DataSourcesNode in) {
return defaultVisit(in); return defaultVisit(in);
@ -426,6 +425,7 @@ public interface DisplayableItemNodeVisitor<T> {
public T visit(Accounts.BINNode node) { public T visit(Accounts.BINNode node) {
return defaultVisit(node); return defaultVisit(node);
} }
@Override @Override
public T visit(Accounts.DefaultAccountTypeNode node) { public T visit(Accounts.DefaultAccountTypeNode node) {
return defaultVisit(node); return defaultVisit(node);

14
Core/src/org/sleuthkit/autopsy/datamodel/EmptyNode.java
View File

@ -25,20 +25,6 @@ public final class EmptyNode extends AbstractNode {
} }
/**
* Method to check if the node in question is a ByMimeTypeNode which is empty.
*
* @param originNode the Node which you wish to check.
* @return True if originNode is an instance of ByMimeTypeNode and is empty, false otherwise.
*/
public static boolean isEmptyMimeTypeNode(Node originNode) {
boolean isEmptyMimeNode = false;
if (originNode instanceof FileTypesByMimeType.ByMimeTypeNode && ((FileTypesByMimeType.ByMimeTypeNode) originNode).isEmpty()) {
isEmptyMimeNode = true;
}
return isEmptyMimeNode;
}
static class EmptyChildFactory extends ChildFactory<String> { static class EmptyChildFactory extends ChildFactory<String> {
String fileIdMsg; //NON-NLS String fileIdMsg; //NON-NLS

277
Core/src/org/sleuthkit/autopsy/datamodel/FileTypeByExtNode.java
View File

@ -1,277 +0,0 @@
/*
* Autopsy Forensic Browser
*
* Copyright 2011-2016 Basis Technology Corp.
* Contact: carrier <at> sleuthkit <dot> org
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.sleuthkit.autopsy.datamodel;
import org.sleuthkit.autopsy.datamodel.accounts.FileTypeExtensionFilters;
import java.util.List;
import java.util.Observable;
import java.util.Observer;
import java.util.logging.Level;
import org.openide.nodes.AbstractNode;
import org.openide.nodes.ChildFactory;
import org.openide.nodes.Children;
import org.openide.nodes.Node;
import org.openide.nodes.Sheet;
import org.openide.util.NbBundle;
import org.openide.util.lookup.Lookups;
import org.sleuthkit.autopsy.core.UserPreferences;
import org.sleuthkit.autopsy.coreutils.Logger;
import org.sleuthkit.datamodel.AbstractFile;
import org.sleuthkit.datamodel.Content;
import org.sleuthkit.datamodel.ContentVisitor;
import org.sleuthkit.datamodel.DerivedFile;
import org.sleuthkit.datamodel.Directory;
import org.sleuthkit.datamodel.File;
import org.sleuthkit.datamodel.LayoutFile;
import org.sleuthkit.datamodel.LocalFile;
import org.sleuthkit.datamodel.SleuthkitCase;
import org.sleuthkit.datamodel.TskCoreException;
import org.sleuthkit.datamodel.TskData;
/**
* Node for a specific file type / extension. Children of it will be the files
* of that type.
*/
class FileTypeByExtNode extends DisplayableItemNode {
FileTypeExtensionFilters.SearchFilterInterface filter;
SleuthkitCase skCase;
// deprecated in favor of the version that takes an observable to provide refresh updates
@Deprecated
FileTypeByExtNode(FileTypeExtensionFilters.SearchFilterInterface filter, SleuthkitCase skCase) {
super(Children.create(new FileTypeChildFactory(filter, skCase), true), Lookups.singleton(filter.getDisplayName()));
this.filter = filter;
this.skCase = skCase;
init();
}
/**
*
* @param filter Extensions that will be shown for this node
* @param skCase
* @param o Observable that sends updates when the child factories
* should refresh
*/
FileTypeByExtNode(FileTypeExtensionFilters.SearchFilterInterface filter, SleuthkitCase skCase, Observable o) {
super(Children.create(new FileTypeChildFactory(filter, skCase, o), true), Lookups.singleton(filter.getDisplayName()));
this.filter = filter;
this.skCase = skCase;
init();
o.addObserver(new FileTypeNodeObserver());
}
private void init() {
super.setName(filter.getName());
updateDisplayName();
this.setIconBaseWithExtension("org/sleuthkit/autopsy/images/file-filter-icon.png"); //NON-NLS
}
// update the display name when new events are fired
private class FileTypeNodeObserver implements Observer {
@Override
public void update(Observable o, Object arg) {
updateDisplayName();
}
}
private void updateDisplayName() {
final long count = FileTypeChildFactory.calculateItems(skCase, filter);
super.setDisplayName(filter.getDisplayName() + " (" + count + ")");
}
@Override
public <T> T accept(DisplayableItemNodeVisitor<T> v) {
return v.visit(this);
}
@Override
protected Sheet createSheet() {
Sheet s = super.createSheet();
Sheet.Set ss = s.get(Sheet.PROPERTIES);
if (ss == null) {
ss = Sheet.createPropertiesSet();
s.put(ss);
}
ss.put(new NodeProperty<>(NbBundle.getMessage(this.getClass(), "FileTypeByExtNode.createSheet.filterType.name"),
NbBundle.getMessage(this.getClass(), "FileTypeByExtNode.createSheet.filterType.displayName"),
NbBundle.getMessage(this.getClass(), "FileTypeByExtNode.createSheet.filterType.desc"),
filter.getDisplayName()));
String extensions = "";
for (String ext : filter.getFilter()) {
extensions += "'" + ext + "', ";
}
extensions = extensions.substring(0, extensions.lastIndexOf(','));
ss.put(new NodeProperty<>(NbBundle.getMessage(this.getClass(), "FileTypeByExtNode.createSheet.fileExt.name"),
NbBundle.getMessage(this.getClass(), "FileTypeByExtNode.createSheet.fileExt.displayName"),
NbBundle.getMessage(this.getClass(), "FileTypeByExtNode.createSheet.fileExt.desc"),
extensions));
return s;
}
@Override
public boolean isLeafTypeNode() {
return true;
}
/**
* Consider allowing different configurations for Images, Videos, etc
* (in which case we'd return getClass().getName() + filter.getName()
* for all filters).
*/
@Override
public String getItemType() {
return DisplayableItemNode.FILE_PARENT_NODE_KEY;
}
/**
* Child node factory for a specific file type - does the database query.
*/
private static class FileTypeChildFactory extends ChildFactory.Detachable<Content> {
private final SleuthkitCase skCase;
private final FileTypeExtensionFilters.SearchFilterInterface filter;
private final static Logger LOGGER = Logger.getLogger(FileTypeChildFactory.class.getName());
private final Observable notifier;
// use the constructor that gets an observable passed in for updates
@Deprecated
FileTypeChildFactory(FileTypeExtensionFilters.SearchFilterInterface filter, SleuthkitCase skCase) {
super();
this.filter = filter;
this.skCase = skCase;
notifier = null;
}
/**
*
* @param filter Extensions to display
* @param skCase
* @param o Observable that will notify when there could be new
* data to display
*/
private FileTypeChildFactory(FileTypeExtensionFilters.SearchFilterInterface filter, SleuthkitCase skCase, Observable o) {
super();
this.filter = filter;
this.skCase = skCase;
notifier = o;
}
@Override
protected void addNotify() {
if (notifier != null) {
notifier.addObserver(observer);
}
}
@Override
protected void removeNotify() {
if (notifier != null) {
notifier.deleteObserver(observer);
}
}
private final Observer observer = new FileTypeChildFactoryObserver();
// Cause refresh of children if there are changes
private class FileTypeChildFactoryObserver implements Observer {
@Override
public void update(Observable o, Object arg) {
refresh(true);
}
}
/**
* Get children count without actually loading all nodes
*
* @return
*/
private static long calculateItems(SleuthkitCase sleuthkitCase, FileTypeExtensionFilters.SearchFilterInterface filter) {
try {
return sleuthkitCase.countFilesWhere(createQuery(filter));
} catch (TskCoreException ex) {
LOGGER.log(Level.SEVERE, "Error getting file search view count", ex); //NON-NLS
return 0;
}
}
@Override
protected boolean createKeys(List<Content> list) {
try {
List<AbstractFile> files = skCase.findAllFilesWhere(createQuery(filter));
list.addAll(files);
} catch (TskCoreException ex) {
LOGGER.log(Level.SEVERE, "Couldn't get search results", ex); //NON-NLS
}
return true;
}
private static String createQuery(FileTypeExtensionFilters.SearchFilterInterface filter) {
StringBuilder query = new StringBuilder();
query.append("(dir_type = ").append(TskData.TSK_FS_NAME_TYPE_ENUM.REG.getValue()).append(")"); //NON-NLS
if (UserPreferences.hideKnownFilesInViewsTree()) {
query.append(" AND (known IS NULL OR known != ").append(TskData.FileKnown.KNOWN.getFileKnownValue()).append(")"); //NON-NLS
}
query.append(" AND (NULL"); //NON-NLS
for (String s : filter.getFilter()) {
query.append(" OR LOWER(name) LIKE LOWER('%").append(s).append("')"); //NON-NLS
}
query.append(')');
return query.toString();
}
@Override
protected Node createNodeForKey(Content key) {
return key.accept(new ContentVisitor.Default<AbstractNode>() {
@Override
public FileNode visit(File f) {
return new FileNode(f, false);
}
@Override
public DirectoryNode visit(Directory d) {
return new DirectoryNode(d);
}
@Override
public LayoutFileNode visit(LayoutFile lf) {
return new LayoutFileNode(lf);
}
@Override
public LocalFileNode visit(DerivedFile df) {
return new LocalFileNode(df);
}
@Override
public LocalFileNode visit(LocalFile lf) {
return new LocalFileNode(lf);
}
@Override
protected AbstractNode defaultVisit(Content di) {
throw new UnsupportedOperationException(NbBundle.getMessage(this.getClass(), "FileTypeChildren.exception.notSupported.msg", di.toString()));
}
});
}
}
}

276
Core/src/org/sleuthkit/autopsy/datamodel/FileTypesByExtNode.java
View File

@ -24,6 +24,9 @@ import java.beans.PropertyChangeListener;
import java.util.Arrays; import java.util.Arrays;
import java.util.List; import java.util.List;
import java.util.Observable; import java.util.Observable;
import java.util.Observer;
import java.util.logging.Level;
import org.openide.nodes.AbstractNode;
import org.openide.nodes.ChildFactory; import org.openide.nodes.ChildFactory;
import org.openide.nodes.Children; import org.openide.nodes.Children;
import org.openide.nodes.Node; import org.openide.nodes.Node;
@ -31,8 +34,20 @@ import org.openide.nodes.Sheet;
import org.openide.util.NbBundle; import org.openide.util.NbBundle;
import org.openide.util.lookup.Lookups; import org.openide.util.lookup.Lookups;
import org.sleuthkit.autopsy.casemodule.Case; import org.sleuthkit.autopsy.casemodule.Case;
import org.sleuthkit.autopsy.core.UserPreferences;
import org.sleuthkit.autopsy.coreutils.Logger;
import org.sleuthkit.autopsy.ingest.IngestManager; import org.sleuthkit.autopsy.ingest.IngestManager;
import org.sleuthkit.datamodel.AbstractFile;
import org.sleuthkit.datamodel.Content;
import org.sleuthkit.datamodel.ContentVisitor;
import org.sleuthkit.datamodel.DerivedFile;
import org.sleuthkit.datamodel.Directory;
import org.sleuthkit.datamodel.File;
import org.sleuthkit.datamodel.LayoutFile;
import org.sleuthkit.datamodel.LocalFile;
import org.sleuthkit.datamodel.SleuthkitCase; import org.sleuthkit.datamodel.SleuthkitCase;
import org.sleuthkit.datamodel.TskCoreException;
import org.sleuthkit.datamodel.TskData;
/** /**
* Node for root of file types view. Children are nodes for specific types. * Node for root of file types view. Children are nodes for specific types.
@ -41,6 +56,7 @@ class FileTypesByExtNode extends DisplayableItemNode {
private static final String FNAME = NbBundle.getMessage(FileTypesByExtNode.class, "FileTypesByExtNode.fname.text"); private static final String FNAME = NbBundle.getMessage(FileTypesByExtNode.class, "FileTypesByExtNode.fname.text");
private final FileTypeExtensionFilters.RootFilter filter; private final FileTypeExtensionFilters.RootFilter filter;
/** /**
* *
* @param skCase * @param skCase
@ -48,7 +64,7 @@ class FileTypesByExtNode extends DisplayableItemNode {
* something to provide a sub-node. * something to provide a sub-node.
*/ */
FileTypesByExtNode(SleuthkitCase skCase, FileTypeExtensionFilters.RootFilter filter) { FileTypesByExtNode(SleuthkitCase skCase, FileTypeExtensionFilters.RootFilter filter) {
super(Children.create(new FileTypesByExtChildren(skCase, filter, null), true), Lookups.singleton(filter == null ? FNAME : filter.getName())); super(Children.create(new ByExtChildren(skCase, filter, null), true), Lookups.singleton(filter == null ? FNAME : filter.getName()));
this.filter = filter; this.filter = filter;
init(); init();
} }
@ -57,11 +73,11 @@ class FileTypesByExtNode extends DisplayableItemNode {
* *
* @param skCase * @param skCase
* @param filter * @param filter
* @param o Observable that was created by a higher-level node that * @param o Observable that was created by a higher-level node that provides
* provides updates on events * updates on events
*/ */
private FileTypesByExtNode(SleuthkitCase skCase, FileTypeExtensionFilters.RootFilter filter, Observable o) { private FileTypesByExtNode(SleuthkitCase skCase, FileTypeExtensionFilters.RootFilter filter, Observable o) {
super(Children.create(new FileTypesByExtChildren(skCase, filter, o), true), Lookups.singleton(filter == null ? FNAME : filter.getName())); super(Children.create(new ByExtChildren(skCase, filter, o), true), Lookups.singleton(filter == null ? FNAME : filter.getName()));
this.filter = filter; this.filter = filter;
init(); init();
} }
@ -108,21 +124,23 @@ class FileTypesByExtNode extends DisplayableItemNode {
@Override @Override
public String getItemType() { public String getItemType() {
/** /**
* Because Documents and Executable are further expandable, their * Because Documents and Executable are further expandable, their column
* column order settings should be stored separately. * order settings should be stored separately.
*/ */
if(filter == null) if (filter == null) {
return getClass().getName(); return getClass().getName();
if (filter.equals(FileTypeExtensionFilters.RootFilter.TSK_DOCUMENT_FILTER) || }
filter.equals(FileTypeExtensionFilters.RootFilter.TSK_EXECUTABLE_FILTER)) if (filter.equals(FileTypeExtensionFilters.RootFilter.TSK_DOCUMENT_FILTER)
|| filter.equals(FileTypeExtensionFilters.RootFilter.TSK_EXECUTABLE_FILTER)) {
return getClass().getName() + filter.getName(); return getClass().getName() + filter.getName();
}
return getClass().getName(); return getClass().getName();
} }
/** /**
* *
*/ */
private static class FileTypesByExtChildren extends ChildFactory<FileTypeExtensionFilters.SearchFilterInterface> { private static class ByExtChildren extends ChildFactory<FileTypeExtensionFilters.SearchFilterInterface> {
private final SleuthkitCase skCase; private final SleuthkitCase skCase;
private final FileTypeExtensionFilters.RootFilter filter; private final FileTypeExtensionFilters.RootFilter filter;
@ -132,15 +150,15 @@ class FileTypesByExtNode extends DisplayableItemNode {
* *
* @param skCase * @param skCase
* @param filter Is null for root node * @param filter Is null for root node
* @param o Observable that provides updates based on events being * @param o Observable that provides updates based on events being fired
* fired (or null if one needs to be created) * (or null if one needs to be created)
*/ */
private FileTypesByExtChildren(SleuthkitCase skCase, FileTypeExtensionFilters.RootFilter filter, Observable o) { private ByExtChildren(SleuthkitCase skCase, FileTypeExtensionFilters.RootFilter filter, Observable o) {
super(); super();
this.skCase = skCase; this.skCase = skCase;
this.filter = filter; this.filter = filter;
if (o == null) { if (o == null) {
this.notifier = new FileTypesByExtChildrenObservable(); this.notifier = new ByExtChildrenObservable();
} else { } else {
this.notifier = o; this.notifier = o;
} }
@ -150,9 +168,9 @@ class FileTypesByExtNode extends DisplayableItemNode {
* Listens for case and ingest invest. Updates observers when events are * Listens for case and ingest invest. Updates observers when events are
* fired. FileType and FileTypes nodes are all listening to this. * fired. FileType and FileTypes nodes are all listening to this.
*/ */
private final class FileTypesByExtChildrenObservable extends Observable { private final class ByExtChildrenObservable extends Observable {
private FileTypesByExtChildrenObservable() { private ByExtChildrenObservable() {
IngestManager.getInstance().addIngestJobEventListener(pcl); IngestManager.getInstance().addIngestJobEventListener(pcl);
IngestManager.getInstance().addIngestModuleEventListener(pcl); IngestManager.getInstance().addIngestModuleEventListener(pcl);
Case.addPropertyChangeListener(pcl); Case.addPropertyChangeListener(pcl);
@ -224,7 +242,231 @@ class FileTypesByExtNode extends DisplayableItemNode {
} else if (key.getName().equals(FileTypeExtensionFilters.RootFilter.TSK_EXECUTABLE_FILTER.getName())) { } else if (key.getName().equals(FileTypeExtensionFilters.RootFilter.TSK_EXECUTABLE_FILTER.getName())) {
return new FileTypesByExtNode(skCase, FileTypeExtensionFilters.RootFilter.TSK_EXECUTABLE_FILTER, notifier); return new FileTypesByExtNode(skCase, FileTypeExtensionFilters.RootFilter.TSK_EXECUTABLE_FILTER, notifier);
} else { } else {
return new FileTypeByExtNode(key, skCase, notifier); return new ByExtNode(key, skCase, notifier);
}
}
}
/**
* Node for a specific file type / extension. Children of it will be the
* files of that type.
*/
static class ByExtNode extends DisplayableItemNode {
FileTypeExtensionFilters.SearchFilterInterface filter;
SleuthkitCase skCase;
/**
*
* @param filter Extensions that will be shown for this node
* @param skCase
* @param o Observable that sends updates when the child factories
* should refresh
*/
ByExtNode(FileTypeExtensionFilters.SearchFilterInterface filter, SleuthkitCase skCase, Observable o) {
super(Children.create(new ByExtChildFactory(filter, skCase, o), true), Lookups.singleton(filter.getDisplayName()));
this.filter = filter;
this.skCase = skCase;
init();
o.addObserver(new ByExtNodeObserver());
}
private void init() {
super.setName(filter.getName());
updateDisplayName();
this.setIconBaseWithExtension("org/sleuthkit/autopsy/images/file-filter-icon.png"); //NON-NLS
}
// update the display name when new events are fired
private class ByExtNodeObserver implements Observer {
@Override
public void update(Observable o, Object arg) {
updateDisplayName();
}
}
private void updateDisplayName() {
final long count = ByExtChildFactory.calculateItems(skCase, filter);
super.setDisplayName(filter.getDisplayName() + " (" + count + ")");
}
@Override
public <T> T accept(DisplayableItemNodeVisitor<T> v) {
return v.visit(this);
}
@Override
protected Sheet createSheet() {
Sheet s = super.createSheet();
Sheet.Set ss = s.get(Sheet.PROPERTIES);
if (ss == null) {
ss = Sheet.createPropertiesSet();
s.put(ss);
}
ss.put(new NodeProperty<>(NbBundle.getMessage(this.getClass(), "FileTypesByExtNode.createSheet.filterType.name"),
NbBundle.getMessage(this.getClass(), "FileTypesByExtNode.createSheet.filterType.displayName"),
NbBundle.getMessage(this.getClass(), "FileTypesByExtNode.createSheet.filterType.desc"),
filter.getDisplayName()));
String extensions = "";
for (String ext : filter.getFilter()) {
extensions += "'" + ext + "', ";
}
extensions = extensions.substring(0, extensions.lastIndexOf(','));
ss.put(new NodeProperty<>(NbBundle.getMessage(this.getClass(), "FileTypesByExtNode.createSheet.fileExt.name"),
NbBundle.getMessage(this.getClass(), "FileTypesByExtNode.createSheet.fileExt.displayName"),
NbBundle.getMessage(this.getClass(), "FileTypesByExtNode.createSheet.fileExt.desc"),
extensions));
return s;
}
@Override
public boolean isLeafTypeNode() {
return true;
}
/**
* Consider allowing different configurations for Images, Videos, etc
* (in which case we'd return getClass().getName() + filter.getName()
* for all filters).
*/
@Override
public String getItemType() {
return DisplayableItemNode.FILE_PARENT_NODE_KEY;
}
/**
* Child node factory for a specific file type - does the database
* query.
*/
private static class ByExtChildFactory extends ChildFactory.Detachable<Content> {
private final SleuthkitCase skCase;
private final FileTypeExtensionFilters.SearchFilterInterface filter;
private final static Logger LOGGER = Logger.getLogger(ByExtChildFactory.class.getName());
private final Observable notifier;
// use the constructor that gets an observable passed in for updates
@Deprecated
ByExtChildFactory(FileTypeExtensionFilters.SearchFilterInterface filter, SleuthkitCase skCase) {
super();
this.filter = filter;
this.skCase = skCase;
notifier = null;
}
/**
*
* @param filter Extensions to display
* @param skCase
* @param o Observable that will notify when there could be new data
* to display
*/
private ByExtChildFactory(FileTypeExtensionFilters.SearchFilterInterface filter, SleuthkitCase skCase, Observable o) {
super();
this.filter = filter;
this.skCase = skCase;
notifier = o;
}
@Override
protected void addNotify() {
if (notifier != null) {
notifier.addObserver(observer);
}
}
@Override
protected void removeNotify() {
if (notifier != null) {
notifier.deleteObserver(observer);
}
}
private final Observer observer = new FileTypeChildFactoryObserver();
// Cause refresh of children if there are changes
private class FileTypeChildFactoryObserver implements Observer {
@Override
public void update(Observable o, Object arg) {
refresh(true);
}
}
/**
* Get children count without actually loading all nodes
*
* @return
*/
private static long calculateItems(SleuthkitCase sleuthkitCase, FileTypeExtensionFilters.SearchFilterInterface filter) {
try {
return sleuthkitCase.countFilesWhere(createQuery(filter));
} catch (TskCoreException ex) {
LOGGER.log(Level.SEVERE, "Error getting file search view count", ex); //NON-NLS
return 0;
}
}
@Override
protected boolean createKeys(List<Content> list) {
try {
List<AbstractFile> files = skCase.findAllFilesWhere(createQuery(filter));
list.addAll(files);
} catch (TskCoreException ex) {
LOGGER.log(Level.SEVERE, "Couldn't get search results", ex); //NON-NLS
}
return true;
}
private static String createQuery(FileTypeExtensionFilters.SearchFilterInterface filter) {
StringBuilder query = new StringBuilder();
query.append("(dir_type = ").append(TskData.TSK_FS_NAME_TYPE_ENUM.REG.getValue()).append(")"); //NON-NLS
if (UserPreferences.hideKnownFilesInViewsTree()) {
query.append(" AND (known IS NULL OR known != ").append(TskData.FileKnown.KNOWN.getFileKnownValue()).append(")"); //NON-NLS
}
query.append(" AND (NULL"); //NON-NLS
for (String s : filter.getFilter()) {
query.append(" OR LOWER(name) LIKE LOWER('%").append(s).append("')"); //NON-NLS
}
query.append(')');
return query.toString();
}
@Override
protected Node createNodeForKey(Content key) {
return key.accept(new ContentVisitor.Default<AbstractNode>() {
@Override
public FileNode visit(File f) {
return new FileNode(f, false);
}
@Override
public DirectoryNode visit(Directory d) {
return new DirectoryNode(d);
}
@Override
public LayoutFileNode visit(LayoutFile lf) {
return new LayoutFileNode(lf);
}
@Override
public LocalFileNode visit(DerivedFile df) {
return new LocalFileNode(df);
}
@Override
public LocalFileNode visit(LocalFile lf) {
return new LocalFileNode(lf);
}
@Override
protected AbstractNode defaultVisit(Content di) {
throw new UnsupportedOperationException(NbBundle.getMessage(this.getClass(), "FileTypeChildren.exception.notSupported.msg", di.toString()));
}
});
} }
} }
} }

69
Core/src/org/sleuthkit/autopsy/datamodel/FileTypesByMimeType.java
View File

@ -57,7 +57,7 @@ import org.sleuthkit.datamodel.TskData;
* Listener which is checking for changes in IngestJobEvent Completed or * Listener which is checking for changes in IngestJobEvent Completed or
* Cancelled and IngestModuleEvent Content Changed. * Cancelled and IngestModuleEvent Content Changed.
*/ */
class FileTypesByMimeType extends Observable implements AutopsyVisitableItem { public final class FileTypesByMimeType extends Observable implements AutopsyVisitableItem {
private final SleuthkitCase SKCASE; private final SleuthkitCase SKCASE;
/** /**
@ -168,9 +168,26 @@ class FileTypesByMimeType extends Observable implements AutopsyVisitableItem {
} }
/** /**
* Class which represents the root node of the "By MIME Type" tree, will have * Method to check if the node in question is a ByMimeTypeNode which is
* children of each media type present in the database or no children when the * empty.
* file detection module has not been run and MIME type is currently unknown. *
* @param originNode the Node which you wish to check.
* @return True if originNode is an instance of ByMimeTypeNode and is empty,
* false otherwise.
*/
public static boolean isEmptyMimeTypeNode(Node originNode) {
boolean isEmptyMimeNode = false;
if (originNode instanceof FileTypesByMimeType.ByMimeTypeNode && ((FileTypesByMimeType.ByMimeTypeNode) originNode).isEmpty()) {
isEmptyMimeNode = true;
}
return isEmptyMimeNode;
}
/**
* Class which represents the root node of the "By MIME Type" tree, will
* have children of each media type present in the database or no children
* when the file detection module has not been run and MIME type is
* currently unknown.
*/ */
class ByMimeTypeNode extends DisplayableItemNode { class ByMimeTypeNode extends DisplayableItemNode {
@ -237,8 +254,8 @@ private class ByMimeTypeNodeChildren extends ChildFactory<String> implements Obs
} }
/** /**
* The Media type node created by the ByMimeTypeNodeChildren and * The Media type node created by the ByMimeTypeNodeChildren and contains
contains one of the unique media types present in the database for this case. * one of the unique media types present in the database for this case.
*/ */
class MediaTypeNode extends DisplayableItemNode { class MediaTypeNode extends DisplayableItemNode {
@ -267,9 +284,9 @@ class MediaTypeNode extends DisplayableItemNode {
} }
/** /**
* Creates children for media type nodes, children will be MediaSubTypeNodes and * Creates children for media type nodes, children will be MediaSubTypeNodes
* represent one of the subtypes which are present in the database of their * and represent one of the subtypes which are present in the database of
* media type. * their media type.
*/ */
private class MediaTypeNodeChildren extends ChildFactory<String> implements Observer { private class MediaTypeNodeChildren extends ChildFactory<String> implements Observer {
@ -300,8 +317,8 @@ private class MediaTypeNodeChildren extends ChildFactory<String> implements Obse
} }
/** /**
* Node which represents the media sub type in the By MIME type tree, the media * Node which represents the media sub type in the By MIME type tree, the
* subtype is the portion of the MIME type following the /. * media subtype is the portion of the MIME type following the /.
*/ */
class MediaSubTypeNode extends DisplayableItemNode implements Observer { class MediaSubTypeNode extends DisplayableItemNode implements Observer {
@ -318,8 +335,8 @@ class MediaSubTypeNode extends DisplayableItemNode implements Observer {
} }
/** /**
* Updates the display name of the mediaSubTypeNode to include the count of * Updates the display name of the mediaSubTypeNode to include the count
* files which it represents. * of files which it represents.
* *
* @param mimeType - the complete MimeType, needed for accurate query * @param mimeType - the complete MimeType, needed for accurate query
* results * results
@ -332,8 +349,8 @@ class MediaSubTypeNode extends DisplayableItemNode implements Observer {
} }
/** /**
* This returns true because any MediaSubTypeNode that exists is going to be * This returns true because any MediaSubTypeNode that exists is going
* a bottom level node in the Tree view on the left of Autopsy. * to be a bottom level node in the Tree view on the left of Autopsy.
* *
* @return true * @return true
*/ */
@ -359,8 +376,9 @@ class MediaSubTypeNode extends DisplayableItemNode implements Observer {
} }
/** /**
* Factory for populating the contents of the Media Sub Type Node with the files * Factory for populating the contents of the Media Sub Type Node with the
* that match MimeType which is represented by this position in the tree. * files that match MimeType which is represented by this position in the
* tree.
*/ */
private class MediaSubTypeNodeChildren extends ChildFactory.Detachable<Content> implements Observer { private class MediaSubTypeNodeChildren extends ChildFactory.Detachable<Content> implements Observer {
@ -375,8 +393,8 @@ private class MediaSubTypeNodeChildren extends ChildFactory.Detachable<Content>
/** /**
* Get children count without actually loading all nodes * Get children count without actually loading all nodes
* *
* @return count(*) - the number of items that will be shown in this items * @return count(*) - the number of items that will be shown in this
* Directory Listing * items Directory Listing
*/ */
private long calculateItems(SleuthkitCase sleuthkitCase, String mime_type) { private long calculateItems(SleuthkitCase sleuthkitCase, String mime_type) {
try { try {
@ -409,12 +427,13 @@ private class MediaSubTypeNodeChildren extends ChildFactory.Detachable<Content>
/** /**
* Create the portion of the query following WHERE for a query of the * Create the portion of the query following WHERE for a query of the
* database for each file which matches the complete MIME type represented * database for each file which matches the complete MIME type
* by this node. Matches against the mime_type column in tsk_files. * represented by this node. Matches against the mime_type column in
* tsk_files.
* *
* @param mimeType - the complete mimetype of the file mediatype/subtype * @param mimeType - the complete mimetype of the file mediatype/subtype
* @return query.toString - portion of SQL query which will follow a WHERE * @return query.toString - portion of SQL query which will follow a
* clause. * WHERE clause.
*/ */
private String createQuery(String mime_type) { private String createQuery(String mime_type) {
StringBuilder query = new StringBuilder(); StringBuilder query = new StringBuilder();
@ -436,8 +455,8 @@ private class MediaSubTypeNodeChildren extends ChildFactory.Detachable<Content>
} }
/** /**
* Creates the content to populate the Directory Listing Table view for each * Creates the content to populate the Directory Listing Table view for
* file * each file
* *
* @param key * @param key
* @return * @return

5
Core/src/org/sleuthkit/autopsy/directorytree/DirectoryTreeTopComponent.java
View File

@ -63,6 +63,7 @@ import org.sleuthkit.autopsy.datamodel.DataSources;
import org.sleuthkit.autopsy.datamodel.DataSourcesNode; import org.sleuthkit.autopsy.datamodel.DataSourcesNode;
import org.sleuthkit.autopsy.datamodel.DisplayableItemNode; import org.sleuthkit.autopsy.datamodel.DisplayableItemNode;
import org.sleuthkit.autopsy.datamodel.ExtractedContent; import org.sleuthkit.autopsy.datamodel.ExtractedContent;
import org.sleuthkit.autopsy.datamodel.FileTypesByMimeType;
import org.sleuthkit.autopsy.datamodel.KeywordHits; import org.sleuthkit.autopsy.datamodel.KeywordHits;
import org.sleuthkit.autopsy.datamodel.KnownFileFilterNode; import org.sleuthkit.autopsy.datamodel.KnownFileFilterNode;
import org.sleuthkit.autopsy.datamodel.Reports; import org.sleuthkit.autopsy.datamodel.Reports;
@ -645,12 +646,10 @@ public final class DirectoryTreeTopComponent extends TopComponent implements Dat
Node kffn = new KnownFileFilterNode(drfn, KnownFileFilterNode.getSelectionContext(originNode)); Node kffn = new KnownFileFilterNode(drfn, KnownFileFilterNode.getSelectionContext(originNode));
Node sffn = new SlackFileFilterNode(kffn, SlackFileFilterNode.getSelectionContext(originNode)); Node sffn = new SlackFileFilterNode(kffn, SlackFileFilterNode.getSelectionContext(originNode));
// Create a TableFilterNode with knowledge of the node's type to allow for column order settings // Create a TableFilterNode with knowledge of the node's type to allow for column order settings
//Special case for when File Type Identification has not yet been run and //Special case for when File Type Identification has not yet been run and
//there are no mime types to populate Files by Mime Type Tree //there are no mime types to populate Files by Mime Type Tree
if (EmptyNode.isEmptyMimeTypeNode(originNode)) { if (FileTypesByMimeType.isEmptyMimeTypeNode(originNode)) {
EmptyNode emptyNode = new EmptyNode(Bundle.DirectoryTreeTopComponent_emptyMimeNode_text()); EmptyNode emptyNode = new EmptyNode(Bundle.DirectoryTreeTopComponent_emptyMimeNode_text());
Node emptyDrfn = new DataResultFilterNode(emptyNode, DirectoryTreeTopComponent.this.em); Node emptyDrfn = new DataResultFilterNode(emptyNode, DirectoryTreeTopComponent.this.em);
Node emptyKffn = new KnownFileFilterNode(emptyDrfn, KnownFileFilterNode.getSelectionContext(emptyNode)); Node emptyKffn = new KnownFileFilterNode(emptyDrfn, KnownFileFilterNode.getSelectionContext(emptyNode));