mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-17 18:17:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Minor tweaks.

Browse Source
This commit is contained in:
U-BASIS\dgrove 2017-11-17 13:38:55 -05:00
parent b871974e7b
commit 39cd68aca6
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
Core/src/org/sleuthkit/autopsy/modules/crypto/CryptoDetectionFileIngestModule.java
View File

@ -137,6 +137,10 @@ final class CryptoDetectionFileIngestModule implements FileIngestModule {
* InputStream.
*/
private double calculateEntropy(AbstractFile file) throws IOException {
/*
* Logic in this method is based on
* https://github.com/willjasen/entropy/blob/master/entropy.java
*/
InputStream in = null;
BufferedInputStream bin = null;
@ -201,6 +205,11 @@ final class CryptoDetectionFileIngestModule implements FileIngestModule {
private boolean isFileSupported(AbstractFile file) {
boolean supported = false;
/*
* Criteria for the checks in this method are partially based on
* http://www.forensicswiki.org/wiki/TrueCrypt#Detection
*/
/*
* Qualify the file type.
*/
@ -216,7 +225,7 @@ final class CryptoDetectionFileIngestModule implements FileIngestModule {
* Qualify the size.
*/
long contentSize = file.getSize();
if (contentSize >= 0x500000 && (contentSize & 511) == 0) {
if (contentSize >= 5242880 && (contentSize % 512) == 0) {
/*
* Qualify the MIME type.
*/