mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-10 07:09:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Modified code to add shellbag attributes in one call

Browse Source
This commit is contained in:
Kelly Kelly 2019-09-09 12:56:48 -04:00
parent 0a18e51a92
commit 37327f49c3
1 changed files with 14 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
RecentActivity/src/org/sleuthkit/autopsy/recentactivity/ExtractRegistry.java
View File

@ -1023,29 +1023,33 @@ class ExtractRegistry extends Extract {
void createShellBagArtifacts(AbstractFile regFile, List<ShellBag> shellbags) throws TskCoreException { void createShellBagArtifacts(AbstractFile regFile, List<ShellBag> shellbags) throws TskCoreException {
List<BlackboardArtifact> artifacts = new ArrayList<>(); List<BlackboardArtifact> artifacts = new ArrayList<>();
for (ShellBag bag : shellbags) { for (ShellBag bag : shellbags) {
Collection<BlackboardAttribute> attributes = new ArrayList<>();
BlackboardArtifact artifact = regFile.newArtifact(getShellBagArtifact().getTypeID()); BlackboardArtifact artifact = regFile.newArtifact(getShellBagArtifact().getTypeID());
artifact.addAttribute(new BlackboardAttribute(TSK_PATH, getName(), bag.getResource())); attributes.add(new BlackboardAttribute(TSK_PATH, getName(), bag.getResource()));
artifact.addAttribute(new BlackboardAttribute(getKeyAttribute(), getName(), bag.getKey())); attributes.add(new BlackboardAttribute(getKeyAttribute(), getName(), bag.getKey()));
long time = bag.getModified(); long time;
time = bag.getLastWrite();
if (time != 0) { if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_MODIFIED, getName(), time)); attributes.add(new BlackboardAttribute(getLastWriteAttribute(), getName(), time));
}
time = bag.getModified();
if (time != 0) {
attributes.add(new BlackboardAttribute(TSK_DATETIME_MODIFIED, getName(), time));
} }
time = bag.getCreated(); time = bag.getCreated();
if (time != 0) { if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_CREATED, getName(), time)); attributes.add(new BlackboardAttribute(TSK_DATETIME_CREATED, getName(), time));
} }
time = bag.getAccessed(); time = bag.getAccessed();
if (time != 0) { if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_ACCESSED, getName(), time)); attributes.add(new BlackboardAttribute(TSK_DATETIME_ACCESSED, getName(), time));
} }
time = bag.getLastWrite(); artifact.addAttributes(attributes);
if (time != 0) {
artifact.addAttribute(new BlackboardAttribute(getLastWriteAttribute(), getName(), time));
}
artifacts.add(artifact); artifacts.add(artifact);
} }