mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-19 11:07:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Date fixes for milliseconds on epoch times.

Browse Source 
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
This commit is contained in:
Alex Ebadirad 2012-05-02 11:56:50 -07:00
parent 9d0ba3ceb9
commit 36aef683ca
3 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
RecentActivity/src/org/sleuthkit/autopsy/recentactivity/Chrome.java
View File

@ -346,7 +346,10 @@ public class Chrome {
BlackboardArtifact bbart = FFSqlitedb.get(j).newArtifact(ARTIFACT_TYPE.TSK_WEB_DOWNLOAD); BlackboardArtifact bbart = FFSqlitedb.get(j).newArtifact(ARTIFACT_TYPE.TSK_WEB_DOWNLOAD);
Collection<BlackboardAttribute> bbattributes = new ArrayList<BlackboardAttribute>(); Collection<BlackboardAttribute> bbattributes = new ArrayList<BlackboardAttribute>();
String domain = Util.extractDomain(temprs.getString("url")); String domain = Util.extractDomain(temprs.getString("url"));
bbattributes.add(new BlackboardAttribute(ATTRIBUTE_TYPE.TSK_LAST_ACCESSED.getTypeID(), "RecentActivity", "Last Visited", (temprs.getLong("start_time") / 10000))); Long time = temprs.getLong("start_time");
String Tempdate = time.toString() + "000";
time = Long.valueOf(Tempdate);
bbattributes.add(new BlackboardAttribute(ATTRIBUTE_TYPE.TSK_LAST_ACCESSED.getTypeID(), "RecentActivity", "Last Visited", time));
bbattributes.add(new BlackboardAttribute(ATTRIBUTE_TYPE.TSK_URL.getTypeID(), "RecentActivity", "", ((temprs.getString("url") != null) ? temprs.getString("url") : ""))); bbattributes.add(new BlackboardAttribute(ATTRIBUTE_TYPE.TSK_URL.getTypeID(), "RecentActivity", "", ((temprs.getString("url") != null) ? temprs.getString("url") : "")));
//bbattributes.add(new BlackboardAttribute(ATTRIBUTE_TYPE.TSK_NAME.getTypeID(), "RecentActivity","", ((temprs.getString("title") != null) ? temprs.getString("title").replaceAll("'", "''") : ""))); //bbattributes.add(new BlackboardAttribute(ATTRIBUTE_TYPE.TSK_NAME.getTypeID(), "RecentActivity","", ((temprs.getString("title") != null) ? temprs.getString("title").replaceAll("'", "''") : "")));
bbattributes.add(new BlackboardAttribute(ATTRIBUTE_TYPE.TSK_PATH.getTypeID(), "Recent Activity", "", temprs.getString("full_path"))); bbattributes.add(new BlackboardAttribute(ATTRIBUTE_TYPE.TSK_PATH.getTypeID(), "Recent Activity", "", temprs.getString("full_path")));

6
RecentActivity/src/org/sleuthkit/autopsy/recentactivity/ExtractIE.java
View File

@ -127,6 +127,8 @@ public class ExtractIE { // implements BrowserActivity {
} }
String name = Favorite.getName(); String name = Favorite.getName();
Long datetime = Favorite.getCrtime(); Long datetime = Favorite.getCrtime();
String Tempdate = datetime.toString() + "000";
datetime = Long.valueOf(Tempdate);
String domain = Util.extractDomain(url); String domain = Util.extractDomain(url);
try { try {
BlackboardArtifact bbart = Favorite.newArtifact(ARTIFACT_TYPE.TSK_WEB_BOOKMARK); BlackboardArtifact bbart = Favorite.newArtifact(ARTIFACT_TYPE.TSK_WEB_BOOKMARK);
@ -187,6 +189,8 @@ public class ExtractIE { // implements BrowserActivity {
String value = values.length > 1 ? values[1] : ""; String value = values.length > 1 ? values[1] : "";
String name = values.length > 0 ? values[0] : ""; String name = values.length > 0 ? values[0] : "";
Long datetime = Cookie.getCrtime(); Long datetime = Cookie.getCrtime();
String Tempdate = datetime.toString() + "000";
datetime = Long.valueOf(Tempdate);
String domain = Util.extractDomain(url); String domain = Util.extractDomain(url);
try { try {
BlackboardArtifact bbart = Cookie.newArtifact(ARTIFACT_TYPE.TSK_WEB_COOKIE); BlackboardArtifact bbart = Cookie.newArtifact(ARTIFACT_TYPE.TSK_WEB_COOKIE);
@ -264,6 +268,8 @@ public class ExtractIE { // implements BrowserActivity {
String path = Util.getPath(recentString); String path = Util.getPath(recentString);
String name = Util.getFileName(path); String name = Util.getFileName(path);
Long datetime = Recent.getCrtime(); Long datetime = Recent.getCrtime();
String Tempdate = datetime.toString() + "000";
datetime = Long.valueOf(Tempdate);
try { try {
BlackboardArtifact bbart = Recent.newArtifact(ARTIFACT_TYPE.TSK_RECENT_OBJECT); BlackboardArtifact bbart = Recent.newArtifact(ARTIFACT_TYPE.TSK_RECENT_OBJECT);
Collection<BlackboardAttribute> bbattributes = new ArrayList<BlackboardAttribute>(); Collection<BlackboardAttribute> bbattributes = new ArrayList<BlackboardAttribute>();

7
RecentActivity/src/org/sleuthkit/autopsy/recentactivity/ExtractRegistry.java
View File

@ -193,6 +193,8 @@ public class ExtractRegistry {
try { try {
Long epochtime = new SimpleDateFormat("EEE MMM d HH:mm:ss yyyy").parse(etime).getTime(); Long epochtime = new SimpleDateFormat("EEE MMM d HH:mm:ss yyyy").parse(etime).getTime();
time = epochtime.longValue(); time = epochtime.longValue();
String Tempdate = time.toString() + "000";
time = Long.valueOf(Tempdate);
} catch (ParseException e) { } catch (ParseException e) {
logger.log(Level.SEVERE, "RegRipper::Conversion on DateTime -> ", e.getMessage()); logger.log(Level.SEVERE, "RegRipper::Conversion on DateTime -> ", e.getMessage());
} }
@ -221,6 +223,8 @@ public class ExtractRegistry {
try { try {
utime = Long.parseLong(name); utime = Long.parseLong(name);
String Tempdate = utime.toString() + "000";
utime = Long.valueOf(Tempdate);
} catch (Exception e) { } catch (Exception e) {
logger.log(Level.SEVERE, "RegRipper::Conversion on DateTime -> ", e.getMessage()); logger.log(Level.SEVERE, "RegRipper::Conversion on DateTime -> ", e.getMessage());
} }
@ -236,6 +240,7 @@ public class ExtractRegistry {
try { try {
Long epochtime = new SimpleDateFormat("EEE MMM d HH:mm:ss yyyy").parse(name).getTime(); Long epochtime = new SimpleDateFormat("EEE MMM d HH:mm:ss yyyy").parse(name).getTime();
ftime = epochtime.longValue(); ftime = epochtime.longValue();
} catch (ParseException e) { } catch (ParseException e) {
logger.log(Level.SEVERE, "RegRipper::Conversion on DateTime -> ", e.getMessage()); logger.log(Level.SEVERE, "RegRipper::Conversion on DateTime -> ", e.getMessage());
} }
@ -258,6 +263,8 @@ public class ExtractRegistry {
try { try {
Long epochtime = new SimpleDateFormat("EEE MMM d HH:mm:ss yyyy").parse(value).getTime(); Long epochtime = new SimpleDateFormat("EEE MMM d HH:mm:ss yyyy").parse(value).getTime();
installtime = epochtime.longValue(); installtime = epochtime.longValue();
String Tempdate = installtime.toString() + "000";
installtime = Long.valueOf(Tempdate);
} catch (ParseException e) { } catch (ParseException e) {
logger.log(Level.SEVERE, "RegRipper::Conversion on DateTime -> ", e.getMessage()); logger.log(Level.SEVERE, "RegRipper::Conversion on DateTime -> ", e.getMessage());
} }