mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-09 14:49:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Modified code to add shellbag attributes in one call

Browse Source
This commit is contained in:
Kelly Kelly 2019-09-09 12:56:48 -04:00
parent 0a18e51a92
commit 37327f49c3
1 changed files with 14 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
RecentActivity/src/org/sleuthkit/autopsy/recentactivity/ExtractRegistry.java
View File

@ -1023,29 +1023,33 @@ class ExtractRegistry extends Extract {
void createShellBagArtifacts(AbstractFile regFile, List<ShellBag> shellbags) throws TskCoreException {
List<BlackboardArtifact> artifacts = new ArrayList<>();
for (ShellBag bag : shellbags) {
Collection<BlackboardAttribute> attributes = new ArrayList<>();
BlackboardArtifact artifact = regFile.newArtifact(getShellBagArtifact().getTypeID());
artifact.addAttribute(new BlackboardAttribute(TSK_PATH, getName(), bag.getResource()));
artifact.addAttribute(new BlackboardAttribute(getKeyAttribute(), getName(), bag.getKey()));
attributes.add(new BlackboardAttribute(TSK_PATH, getName(), bag.getResource()));
attributes.add(new BlackboardAttribute(getKeyAttribute(), getName(), bag.getKey()));
long time = bag.getModified();
long time;
time = bag.getLastWrite();
if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_MODIFIED, getName(), time));
attributes.add(new BlackboardAttribute(getLastWriteAttribute(), getName(), time));
}
time = bag.getModified();
if (time != 0) {
attributes.add(new BlackboardAttribute(TSK_DATETIME_MODIFIED, getName(), time));
}
time = bag.getCreated();
if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_CREATED, getName(), time));
attributes.add(new BlackboardAttribute(TSK_DATETIME_CREATED, getName(), time));
}
time = bag.getAccessed();
if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_ACCESSED, getName(), time));
attributes.add(new BlackboardAttribute(TSK_DATETIME_ACCESSED, getName(), time));
}
time = bag.getLastWrite();
if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(getLastWriteAttribute(), getName(), time));
}
artifact.addAttributes(attributes);
artifacts.add(artifact);
}