mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-18 18:47:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added 'getDefault' method to ScalpelCarverIngestModule. Added

Browse Source 
stub implementation of process method.
This commit is contained in:
Tim McIver 2013-04-12 15:23:46 -04:00
parent 293a15706e
commit 76ca1dc0d0
1 changed files with 25 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
ScalpelCarver/src/org/sleuthkit/autopsy/scalpel/ScalpelCarverIngestModule.java
View File

@ -24,6 +24,7 @@ import org.sleuthkit.autopsy.ingest.IngestModuleAbstractFile;
import org.sleuthkit.autopsy.ingest.IngestModuleInit; import org.sleuthkit.autopsy.ingest.IngestModuleInit;
import org.sleuthkit.autopsy.ingest.PipelineContext; import org.sleuthkit.autopsy.ingest.PipelineContext;
import org.sleuthkit.datamodel.AbstractFile; import org.sleuthkit.datamodel.AbstractFile;
import org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM;
/** /**
* Scalpel carving ingest module * Scalpel carving ingest module
@ -31,13 +32,34 @@ import org.sleuthkit.datamodel.AbstractFile;
public class ScalpelCarverIngestModule implements IngestModuleAbstractFile { public class ScalpelCarverIngestModule implements IngestModuleAbstractFile {
private static final Logger logger = Logger.getLogger(ScalpelCarverIngestModule.class.getName()); private static final Logger logger = Logger.getLogger(ScalpelCarverIngestModule.class.getName());
private static IngestModuleAbstractFile instance;
private final String MODULE_NAME = "Scalpel Carver"; private final String MODULE_NAME = "Scalpel Carver";
private final String MODULE_DESCRIPTION = "Carves a variety of file types from unallocated space."; private final String MODULE_DESCRIPTION = "Carves files from unallocated space at ingest time.\nCarved files are reanalyzed and displayed in the directory tree.";
final public static String MODULE_VERSION = "1.0"; final public String MODULE_VERSION = "1.0";
private int runNumber = 0;
@Override @Override
public ProcessResult process(PipelineContext<IngestModuleAbstractFile> pipelineContext, AbstractFile abstractFile) { public ProcessResult process(PipelineContext<IngestModuleAbstractFile> pipelineContext, AbstractFile abstractFile) {
return null;
// only process files whose type is TSK_DB_FILES_TYPE_ENUM.UNALLOC_BLOCKS
TSK_DB_FILES_TYPE_ENUM type = abstractFile.getType();
if (type != TSK_DB_FILES_TYPE_ENUM.UNALLOC_BLOCKS) {
return ProcessResult.OK;
}
return ProcessResult.OK;
}
public static IngestModuleAbstractFile getDefault() {
if (instance == null) {
synchronized (ScalpelCarverIngestModule.class) {
if (instance == null) {
instance = new ScalpelCarverIngestModule();
}
}
}
return instance;
} }
@Override @Override