mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-17 18:17:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Minor tweaks.

Browse Source
This commit is contained in:
U-BASIS\dgrove 2017-11-17 13:38:55 -05:00
parent b871974e7b
commit 39cd68aca6
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
Core/src/org/sleuthkit/autopsy/modules/crypto/CryptoDetectionFileIngestModule.java
View File

@ -137,6 +137,10 @@ final class CryptoDetectionFileIngestModule implements FileIngestModule {
* InputStream. * InputStream.
*/ */
private double calculateEntropy(AbstractFile file) throws IOException { private double calculateEntropy(AbstractFile file) throws IOException {
/*
* Logic in this method is based on
* https://github.com/willjasen/entropy/blob/master/entropy.java
*/
InputStream in = null; InputStream in = null;
BufferedInputStream bin = null; BufferedInputStream bin = null;
@ -200,6 +204,11 @@ final class CryptoDetectionFileIngestModule implements FileIngestModule {
*/ */
private boolean isFileSupported(AbstractFile file) { private boolean isFileSupported(AbstractFile file) {
boolean supported = false; boolean supported = false;
/*
* Criteria for the checks in this method are partially based on
* http://www.forensicswiki.org/wiki/TrueCrypt#Detection
*/
/* /*
* Qualify the file type. * Qualify the file type.
@ -216,7 +225,7 @@ final class CryptoDetectionFileIngestModule implements FileIngestModule {
* Qualify the size. * Qualify the size.
*/ */
long contentSize = file.getSize(); long contentSize = file.getSize();
if (contentSize >= 0x500000 && (contentSize & 511) == 0) { if (contentSize >= 5242880 && (contentSize % 512) == 0) {
/* /*
* Qualify the MIME type. * Qualify the MIME type.
*/ */