Ejemplo n.º 1
0
        private void listView1_SelectedIndexChanged(object sender, EventArgs e)
        {
            if (listView1.SelectedIndices.Count < 1)
            {
                return;
            }
            Timestamp      ts       = (Timestamp)timestampList[listView1.SelectedIndices[0]];
            DateTime       dateTime = new DateTime(ts.GetTimestamp());
            EvidenceObject currentEvidence;

            timeLineViewPort.SetSelectedEventTimestamp(dateTime);


            string eventType  = ts.GetEventType();
            string sourceType = ts.EvidenceObject().GetSourceType();

            treeViewEvidenceChain.Nodes.Clear();

            currentEvidence = ts.EvidenceObject();

            selectedEvidence = currentEvidence;

            listViewProperties.Items.Clear();

            int i = 0;

            while (true)
            {
                if (currentEvidence.getName(i) == null)
                {
                    break;
                }

                ListViewItem lvi = new ListViewItem(currentEvidence.getName(i));
                lvi.SubItems.Add(currentEvidence.getValue(i));
                listViewProperties.Items.Add(lvi);
                i++;
            }


            TreeNode currentTreeNode = null;

            do
            {
                TreeNode parentTreeNode = new TreeNode(currentEvidence.GetSourceType() + " " + currentEvidence.GetEventId() + " " + currentEvidence.GetTitle());
                parentTreeNode.ToolTipText = "Type: " + currentEvidence.GetSourceType() + "\nId: " + currentEvidence.GetEventId() + "\nTitle: " + currentEvidence.GetTitle();
                parentTreeNode.Expand();

                if (currentTreeNode != null)
                {
                    parentTreeNode.Nodes.Add(currentTreeNode);
                }
                currentTreeNode = parentTreeNode;
                if (currentEvidence.GetParentId() == "")
                {
                    break;
                }
                currentEvidence = db.GetEvidenceObject(Int32.Parse(currentEvidence.GetParentId()));
            }while(true);

            treeViewEvidenceChain.Nodes.Clear();
            treeViewEvidenceChain.Nodes.Add(currentTreeNode);

            showEvidenceData(0);
        }