Modified code to add shellbag attributes in one call

This commit is contained in:
Kelly Kelly 2019-09-09 12:56:48 -04:00
parent 0a18e51a92
commit 37327f49c3

View File

@ -1023,29 +1023,33 @@ class ExtractRegistry extends Extract {
void createShellBagArtifacts(AbstractFile regFile, List<ShellBag> shellbags) throws TskCoreException { void createShellBagArtifacts(AbstractFile regFile, List<ShellBag> shellbags) throws TskCoreException {
List<BlackboardArtifact> artifacts = new ArrayList<>(); List<BlackboardArtifact> artifacts = new ArrayList<>();
for (ShellBag bag : shellbags) { for (ShellBag bag : shellbags) {
Collection<BlackboardAttribute> attributes = new ArrayList<>();
BlackboardArtifact artifact = regFile.newArtifact(getShellBagArtifact().getTypeID()); BlackboardArtifact artifact = regFile.newArtifact(getShellBagArtifact().getTypeID());
artifact.addAttribute(new BlackboardAttribute(TSK_PATH, getName(), bag.getResource())); attributes.add(new BlackboardAttribute(TSK_PATH, getName(), bag.getResource()));
artifact.addAttribute(new BlackboardAttribute(getKeyAttribute(), getName(), bag.getKey())); attributes.add(new BlackboardAttribute(getKeyAttribute(), getName(), bag.getKey()));
long time = bag.getModified(); long time;
time = bag.getLastWrite();
if (time != 0) { if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_MODIFIED, getName(), time)); attributes.add(new BlackboardAttribute(getLastWriteAttribute(), getName(), time));
}
time = bag.getModified();
if (time != 0) {
attributes.add(new BlackboardAttribute(TSK_DATETIME_MODIFIED, getName(), time));
} }
time = bag.getCreated(); time = bag.getCreated();
if (time != 0) { if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_CREATED, getName(), time)); attributes.add(new BlackboardAttribute(TSK_DATETIME_CREATED, getName(), time));
} }
time = bag.getAccessed(); time = bag.getAccessed();
if (time != 0) { if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_ACCESSED, getName(), time)); attributes.add(new BlackboardAttribute(TSK_DATETIME_ACCESSED, getName(), time));
} }
time = bag.getLastWrite(); artifact.addAttributes(attributes);
if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(getLastWriteAttribute(), getName(), time));
}
artifacts.add(artifact); artifacts.add(artifact);
} }