mirror of
https://github.com/overcuriousity/autopsy-flatpak.git
synced 2025-07-12 16:06:15 +00:00
98 lines
3.2 KiB
Java
98 lines
3.2 KiB
Java
/*
|
|
* Autopsy Forensic Browser
|
|
*
|
|
* Copyright 2011 Basis Technology Corp.
|
|
* Contact: carrier <at> sleuthkit <dot> org
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
package org.sleuthkit.autopsy.datamodel;
|
|
|
|
import java.sql.ResultSet;
|
|
import java.sql.SQLException;
|
|
import java.sql.Statement;
|
|
import java.util.Arrays;
|
|
import java.util.Calendar;
|
|
import java.util.List;
|
|
import java.util.logging.Level;
|
|
import java.util.logging.Logger;
|
|
import org.openide.nodes.ChildFactory;
|
|
import org.openide.nodes.Node;
|
|
import org.sleuthkit.datamodel.SleuthkitCase;
|
|
|
|
/**
|
|
*
|
|
* @author dfickling
|
|
*/
|
|
public class RecentFilesChildren extends ChildFactory<RecentFiles.RecentFilesFilter>{
|
|
|
|
SleuthkitCase skCase;
|
|
Calendar lastDay;
|
|
private final static Logger logger = Logger.getLogger(RecentFilesChildren.class.getName());
|
|
|
|
public RecentFilesChildren(SleuthkitCase skCase) {
|
|
this.skCase = skCase;
|
|
}
|
|
|
|
@Override
|
|
protected boolean createKeys(List<RecentFiles.RecentFilesFilter> list) {
|
|
list.addAll(Arrays.asList(RecentFiles.RecentFilesFilter.values()));
|
|
lastDay = Calendar.getInstance();
|
|
lastDay.setTimeInMillis(getLastTime()*1000);
|
|
lastDay.set(Calendar.HOUR_OF_DAY, 0);
|
|
lastDay.set(Calendar.MINUTE, 0);
|
|
lastDay.set(Calendar.SECOND, 0);
|
|
lastDay.set(Calendar.MILLISECOND, 0);
|
|
return true;
|
|
}
|
|
|
|
@Override
|
|
protected Node createNodeForKey(RecentFiles.RecentFilesFilter key){
|
|
return new RecentFilesFilterNode(skCase, key, lastDay);
|
|
}
|
|
|
|
private long getLastTime() {
|
|
String query = createMaxQuery("crtime");
|
|
long maxcr = runTimeQuery(query);
|
|
query = createMaxQuery("ctime");
|
|
long maxc = runTimeQuery(query);
|
|
query = createMaxQuery("mtime");
|
|
long maxm = runTimeQuery(query);
|
|
//query = createMaxQuery("atime");
|
|
//long maxa = runTimeQuery(query);
|
|
//return Math.max(maxcr, Math.max(maxc, Math.max(maxm, maxa)));
|
|
return Math.max(maxcr, Math.max(maxc, maxm));
|
|
}
|
|
|
|
private String createMaxQuery(String attr){
|
|
return "select max(" + attr + ") from tsk_files where " + attr + " < " + System.currentTimeMillis()/1000;
|
|
}
|
|
|
|
private long runTimeQuery(String query) {
|
|
long result = 0;
|
|
try {
|
|
ResultSet rs = skCase.runQuery(query);
|
|
result = rs.getLong(1);
|
|
Statement s = rs.getStatement();
|
|
rs.close();
|
|
if (s != null)
|
|
s.close();
|
|
} catch (SQLException ex) {
|
|
Logger.getLogger(RecentFilesFilterChildren.class.getName())
|
|
.log(Level.WARNING, "Couldn't get search results", ex);
|
|
}
|
|
return result;
|
|
}
|
|
|
|
}
|