From 68e3a29a2e49b5df6f7ca7596b76723e29b9d7f3 Mon Sep 17 00:00:00 2001
From: Jeff Wallace <jwallace@basistech.com>
Date: Thu, 31 Oct 2013 13:08:36 -0400
Subject: [PATCH] Added MAC time to Keyword Hit nodes selected under Results
 node.

---
 .../autopsy/datamodel/KeywordHits.java        | 27 ++++++++++++++++++-
 1 file changed, 26 insertions(+), 1 deletion(-)

diff --git a/Core/src/org/sleuthkit/autopsy/datamodel/KeywordHits.java b/Core/src/org/sleuthkit/autopsy/datamodel/KeywordHits.java
index 9e8674a0b2..51c7bafaa2 100644
--- a/Core/src/org/sleuthkit/autopsy/datamodel/KeywordHits.java
+++ b/Core/src/org/sleuthkit/autopsy/datamodel/KeywordHits.java
@@ -32,11 +32,14 @@ import org.openide.nodes.ChildFactory;
 import org.openide.nodes.Children;
 import org.openide.nodes.Node;
 import org.openide.nodes.Sheet;
+import org.openide.util.Exceptions;
 import org.openide.util.lookup.Lookups;
 import org.sleuthkit.datamodel.BlackboardArtifact;
 import org.sleuthkit.datamodel.BlackboardAttribute;
 import org.sleuthkit.datamodel.SleuthkitCase;
 import org.sleuthkit.datamodel.TskException;
+import org.sleuthkit.datamodel.AbstractFile;
+import org.sleuthkit.datamodel.TskCoreException;
 
 /**
  * Keyword hits node support
@@ -364,7 +367,29 @@ public class KeywordHits implements AutopsyVisitableItem {
 
         @Override
         protected Node createNodeForKey(BlackboardArtifact artifact) {
-            return new BlackboardArtifactNode(artifact);
+            BlackboardArtifactNode n = new BlackboardArtifactNode(artifact);
+            AbstractFile file;
+            try {
+                file = artifact.getSleuthkitCase().getAbstractFileById(artifact.getObjectID());
+            } catch (TskCoreException ex) {
+                logger.log(Level.SEVERE, "TskCoreException while constructing BlackboardArtifact Node from KeywordHitsKeywordChildren");
+                return n;
+            }
+            
+            n.addNodeProperty(new NodeProperty("ModifiedTime",
+                    "Modified Time",
+                    "Modified Time",
+                    ContentUtils.getStringTime(file.getMtime(), file)));
+            n.addNodeProperty(new NodeProperty("AccessTime",
+                    "Access Time",
+                    "Access Time",
+                    ContentUtils.getStringTime(file.getAtime(), file)));
+            n.addNodeProperty(new NodeProperty("ChangeTime",
+                    "Change Time",
+                    "Change Time",
+                    ContentUtils.getStringTime(file.getCtime(), file)));
+            
+            return n;
         }
     }
 }