From 9a11d58acbe8c18c5494a7379ddb3a35c303721e Mon Sep 17 00:00:00 2001
From: Mark McKinnon <mark.mckinnon@davenport.edu>
Date: Fri, 6 Dec 2019 15:34:33 -0500
Subject: [PATCH] Add Office Documents to Mismatch

Added Office Documents to mismatch config and checkType ONLY_MEDIA_AND_EXE.
---
 ...FileExtMismatchDetectorModuleSettings.java | 22 +++++++++++++++++--
 .../fileextmismatch/mismatch_config.xml       | 21 ++++++++++++++++++
 2 files changed, 41 insertions(+), 2 deletions(-)

diff --git a/Core/src/org/sleuthkit/autopsy/modules/fileextmismatch/FileExtMismatchDetectorModuleSettings.java b/Core/src/org/sleuthkit/autopsy/modules/fileextmismatch/FileExtMismatchDetectorModuleSettings.java
index 2e11bccc41..5b979623c2 100644
--- a/Core/src/org/sleuthkit/autopsy/modules/fileextmismatch/FileExtMismatchDetectorModuleSettings.java
+++ b/Core/src/org/sleuthkit/autopsy/modules/fileextmismatch/FileExtMismatchDetectorModuleSettings.java
@@ -61,7 +61,25 @@ final class FileExtMismatchDetectorModuleSettings implements IngestModuleIngestJ
             "application/exe",
             "application/x-dosexec",
             "application/x-exe",
-            "application/x-msdownload").collect(Collectors.toSet());
+            "application/x-msdownload",
+            "application/msword",
+            "application/pdf",
+            "application/rtf",
+            "application/vnd.ms-excel",
+            "application/vnd.ms-powerpoint",
+            "application/vnd.oasis.opendocument.presentation",
+            "application/vnd.oasis.opendocument.spreadsheet",
+            "application/vnd.oasis.opendocument.text",
+            "application/x-msoffice",
+            "application/x-ooxml",
+            "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+            "application/vnd.openxmlformats-officedocument.wordprocessingml.template",
+            "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+            "application/vnd.openxmlformats-officedocument.spreadsheetml.template",
+            "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+            "application/vnd.openxmlformats-officedocument.presentationml.template",
+            "application/vnd.openxmlformats-officedocument.presentationml.slideshow"
+    ).collect(Collectors.toSet());
 
     /**
      * Constructs an object with the ingest options for the file extension
@@ -176,5 +194,5 @@ final class FileExtMismatchDetectorModuleSettings implements IngestModuleIngestJ
             versionNumber = 2;
         }
     }
-    
+
 }
diff --git a/Core/src/org/sleuthkit/autopsy/modules/fileextmismatch/mismatch_config.xml b/Core/src/org/sleuthkit/autopsy/modules/fileextmismatch/mismatch_config.xml
index a89cb7f421..fe2868e3ab 100644
--- a/Core/src/org/sleuthkit/autopsy/modules/fileextmismatch/mismatch_config.xml
+++ b/Core/src/org/sleuthkit/autopsy/modules/fileextmismatch/mismatch_config.xml
@@ -469,4 +469,25 @@
  <signature mimetype="video/x-msvideo">
   <ext>avi</ext>
  </signature>
+ <signature mimetype="application/vnd.openxmlformats-officedocument.wordprocessingml.document">
+  <ext>docx</ext>
+ </signature>
+ <signature mimetype="application/vnd.openxmlformats-officedocument.wordprocessingml.template">
+  <ext>dotx</ext>
+ </signature>
+ <signature mimetype="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet">
+  <ext>xlsx</ext>
+ </signature>
+ <signature mimetype="application/vnd.openxmlformats-officedocument.spreadsheetml.template">
+  <ext>xltx</ext>
+ </signature>
+ <signature mimetype="application/vnd.openxmlformats-officedocument.presentationml.presentation">
+  <ext>pptx</ext>
+ </signature>
+ <signature mimetype="application/vnd.openxmlformats-officedocument.presentationml.template">
+  <ext>potx</ext>
+ </signature>
+<signature mimetype="application/vnd.openxmlformats-officedocument.presentationml.slideshow">
+  <ext>ppsx</ext>
+ </signature>
 </mismatch_config>