mirror of
https://github.com/overcuriousity/autopsy-flatpak.git
synced 2025-07-10 07:09:32 +00:00
Modified code to add shellbag attributes in one call
This commit is contained in:
parent
0a18e51a92
commit
37327f49c3
@ -1023,29 +1023,33 @@ class ExtractRegistry extends Extract {
|
|||||||
void createShellBagArtifacts(AbstractFile regFile, List<ShellBag> shellbags) throws TskCoreException {
|
void createShellBagArtifacts(AbstractFile regFile, List<ShellBag> shellbags) throws TskCoreException {
|
||||||
List<BlackboardArtifact> artifacts = new ArrayList<>();
|
List<BlackboardArtifact> artifacts = new ArrayList<>();
|
||||||
for (ShellBag bag : shellbags) {
|
for (ShellBag bag : shellbags) {
|
||||||
|
Collection<BlackboardAttribute> attributes = new ArrayList<>();
|
||||||
BlackboardArtifact artifact = regFile.newArtifact(getShellBagArtifact().getTypeID());
|
BlackboardArtifact artifact = regFile.newArtifact(getShellBagArtifact().getTypeID());
|
||||||
artifact.addAttribute(new BlackboardAttribute(TSK_PATH, getName(), bag.getResource()));
|
attributes.add(new BlackboardAttribute(TSK_PATH, getName(), bag.getResource()));
|
||||||
artifact.addAttribute(new BlackboardAttribute(getKeyAttribute(), getName(), bag.getKey()));
|
attributes.add(new BlackboardAttribute(getKeyAttribute(), getName(), bag.getKey()));
|
||||||
|
|
||||||
long time = bag.getModified();
|
long time;
|
||||||
|
time = bag.getLastWrite();
|
||||||
if (time != 0) {
|
if (time != 0) {
|
||||||
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_MODIFIED, getName(), time));
|
attributes.add(new BlackboardAttribute(getLastWriteAttribute(), getName(), time));
|
||||||
|
}
|
||||||
|
|
||||||
|
time = bag.getModified();
|
||||||
|
if (time != 0) {
|
||||||
|
attributes.add(new BlackboardAttribute(TSK_DATETIME_MODIFIED, getName(), time));
|
||||||
}
|
}
|
||||||
|
|
||||||
time = bag.getCreated();
|
time = bag.getCreated();
|
||||||
if (time != 0) {
|
if (time != 0) {
|
||||||
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_CREATED, getName(), time));
|
attributes.add(new BlackboardAttribute(TSK_DATETIME_CREATED, getName(), time));
|
||||||
}
|
}
|
||||||
|
|
||||||
time = bag.getAccessed();
|
time = bag.getAccessed();
|
||||||
if (time != 0) {
|
if (time != 0) {
|
||||||
artifact.addAttribute(new BlackboardAttribute(TSK_DATETIME_ACCESSED, getName(), time));
|
attributes.add(new BlackboardAttribute(TSK_DATETIME_ACCESSED, getName(), time));
|
||||||
}
|
}
|
||||||
|
|
||||||
time = bag.getLastWrite();
|
artifact.addAttributes(attributes);
|
||||||
if (time != 0) {
|
|
||||||
artifact.addAttribute(new BlackboardAttribute(getLastWriteAttribute(), getName(), time));
|
|
||||||
}
|
|
||||||
|
|
||||||
artifacts.add(artifact);
|
artifacts.add(artifact);
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user