From 20aeaef2eefb1a66ddcff9b41d92ddb0bb0a23d8 Mon Sep 17 00:00:00 2001
From: Mark McKinnon <mark.mckinnon@davenport.edu>
Date: Tue, 6 Mar 2018 08:42:15 -0800
Subject: [PATCH] Fix for psxview plugin

fixed the psxview plugin returning many false positives
---
 .../autopsy/datasourceprocessors/VolatilityProcessor.java   | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/Core/src/org/sleuthkit/autopsy/datasourceprocessors/VolatilityProcessor.java b/Core/src/org/sleuthkit/autopsy/datasourceprocessors/VolatilityProcessor.java
index 3028491c26..1a72ce877b 100644
--- a/Core/src/org/sleuthkit/autopsy/datasourceprocessors/VolatilityProcessor.java
+++ b/Core/src/org/sleuthkit/autopsy/datasourceprocessors/VolatilityProcessor.java
@@ -552,8 +552,10 @@ class VolatilityProcessor implements Runnable{
              while ((line = br.readLine()) != null) {
                 String file_path;
                 file_path = line.substring(19, 41);
-                if (!file_path.startsWith("System")) {
-                   fileSet.add(file_path.toLowerCase());
+                if (!file_path.startsWith("System ")) {
+                   if (file_path.trim().length() > 0) {;
+                       fileSet.add(file_path.toLowerCase().trim());
+                   }
                 }
              }    
              br.close();