mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-14 17:06:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

file manager and visitor additions for local files

Browse Source
This commit is contained in:
adam-m 2013-05-07 12:27:32 -04:00
parent f66905831c
commit 14db785dd5
2 changed files with 78 additions and 63 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

83
Core/src/org/sleuthkit/autopsy/casemodule/services/FileManager.java
View File

@ -102,14 +102,16 @@ public class FileManager implements Closeable {
* Creates a derived file, adds it to the database and returns it.
*
* @param fileName file name the derived file
* @param localPath local path of the derived file, including the file name. The path is relative to the database path.
* @param localPath local path of the derived file, including the file name.
* The path is relative to the database path.
* @param size size of the derived file in bytes
* @param ctime
* @param crtime
* @param atime
* @param mtime
* @param isFile whether a file or directory, true if a file
* @param parentFile the parent file object this the new file was derived from, either a fs file or parent derived file/dikr\\r
* @param parentFile the parent file object this the new file was derived
* from, either a fs file or parent derived file/dikr\\r
* @param rederiveDetails details needed to re-derive file (will be specific
* to the derivation method), currently unused
* @param toolName name of derivation method/tool, currently unused
@ -117,7 +119,8 @@ public class FileManager implements Closeable {
* @param otherDetails details of derivation method/tool, currently unused
* @return newly created derived file object added to the database
* @throws TskCoreException exception thrown if the object creation failed
* due to a critical system error or of the file manager has already been closed
* due to a critical system error or of the file manager has already been
* closed
*
*/
public synchronized DerivedFile addDerivedFile(String fileName, String localPath, long size,
@ -135,65 +138,71 @@ public class FileManager implements Closeable {
}
/**
* Creates a single local file under $LocalFiles for the case, adds it to the database and returns it.
* Creates a single local file under $LocalFiles for the case, adds it to
* the database and returns it.
*
* @param fileName file name the derived file
* @param localPath local path of the derived file, including the file name. The path is relative to the database path.
* @param size size of the derived file in bytes
* @param ctime
* @param crtime
* @param atime
* @param mtime
* @param isFile whether a file or directory, true if a file
* @param localAbsPath local absolute path of the local file, including the
* file name.
* @return newly created local file object added to the database
* @throws TskCoreException exception thrown if the object creation failed
* due to a critical system error or of the file manager has already been closed
* due to a critical system error or of the file manager has already been
* closed
*
*/
public synchronized LocalFile addLocalFileSingle(String fileName, String localPath, long size,
long ctime, long crtime, long atime, long mtime,
boolean isFile) throws TskCoreException {
public synchronized LocalFile addLocalFileSingle(String localAbsPath) throws TskCoreException {
if (tskCase == null) {
throw new TskCoreException("Attempted to use FileManager after it was closed.");
}
return tskCase.addLocalFile(fileName, localPath, size,
ctime, crtime, atime, mtime,
isFile, null);
return addLocalFileSingle(localAbsPath, null);
}
/**
* Creates a single local file under parentFile for the case, adds it to the database and returns it.
* Creates a single local file under parentFile for the case, adds it to the
* database and returns it.
*
* @param fileName file name the derived file
* @param localPath local path of the derived file, including the file name. The path is relative to the database path.
* @param size size of the derived file in bytes
* @param ctime
* @param crtime
* @param atime
* @param mtime
* @param isFile whether a file or directory, true if a file
* @param parentFile parent file object (such as virtual directory, another local file, or fscontent File),
* @param localAbsPath local absolute path of the local file, including the
* file name
* @param parentFile parent file object (such as virtual directory, another
* local file, or fscontent File),
* @return newly created local file object added to the database
* @throws TskCoreException exception thrown if the object creation failed
* due to a critical system error or of the file manager has already been closed
* due to a critical system error or of the file manager has already been
* closed
*
*/
public synchronized LocalFile addLocalFileSingle(String fileName, String localPath, long size,
long ctime, long crtime, long atime, long mtime,
boolean isFile, AbstractFile parentFile) throws TskCoreException {
public synchronized LocalFile addLocalFileSingle(String localAbsPath, AbstractFile parentFile) throws TskCoreException {
if (tskCase == null) {
throw new TskCoreException("Attempted to use FileManager after it was closed.");
}
return tskCase.addLocalFile(fileName, localPath, size,
ctime, crtime, atime, mtime,
isFile, parentFile);
java.io.File localFile = new java.io.File(localAbsPath);
if (!localFile.exists()) {
throw new TskCoreException("Attempted to add a local file that does not exist: " + localAbsPath);
}
if (!localFile.canRead()) {
throw new TskCoreException("Attempted to add a local file that is not readable: " + localAbsPath);
}
long size = localFile.length();
boolean isFile = localFile.isFile();
//TODO what should do with mac times?
long ctime = 0;
long crtime = 0;
long atime = 0;
long mtime = 0;
String fileName = localFile.getName();
return tskCase.addLocalFile(fileName, localAbsPath, size,
ctime, crtime, atime, mtime,
isFile, parentFile);
//TODO decide if send event to viewers, or client should
}
@Override
public synchronized void close() throws IOException {

6
Core/src/org/sleuthkit/autopsy/datamodel/AbstractContentChildren.java
View File

@ -28,6 +28,7 @@ import org.sleuthkit.datamodel.Directory;
import org.sleuthkit.datamodel.File;
import org.sleuthkit.datamodel.Image;
import org.sleuthkit.datamodel.LayoutFile;
import org.sleuthkit.datamodel.LocalFile;
import org.sleuthkit.datamodel.SleuthkitItemVisitor;
import org.sleuthkit.datamodel.SleuthkitVisitableItem;
import org.sleuthkit.datamodel.TskException;
@ -97,6 +98,11 @@ abstract class AbstractContentChildren<T> extends Keys<T> {
return new LocalFileNode(df);
}
@Override
public AbstractContentNode visit(LocalFile lf) {
return new LocalFileNode(lf);
}
@Override
public AbstractContentNode visit(VirtualDirectory ld) {
return new VirtualDirectoryNode(ld);