mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-14 08:56:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

temp path changes

Browse Source
This commit is contained in:
Greg DiCristofaro 2021-04-09 09:45:53 -04:00
parent cd5c224ade
commit 9b9607a492
2 changed files with 40 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
RecentActivity/src/org/sleuthkit/autopsy/recentactivity/ChromeCacheExtractor.java
View File

@ -176,7 +176,7 @@ final class ChromeCacheExtractor {
// Create an output folder to save any derived files // Create an output folder to save any derived files
absOutputFolderName = RAImageIngestModule.getRAOutputPath(currentCase, moduleName); absOutputFolderName = RAImageIngestModule.getRAOutputPath(currentCase, moduleName);
relOutputFolderName = Paths.get( RAImageIngestModule.getRelModuleOutputPath(), moduleName).normalize().toString(); relOutputFolderName = RAImageIngestModule.getRelModuleOutputPath(currentCase, moduleName);
File dir = new File(absOutputFolderName); File dir = new File(absOutputFolderName);
if (dir.exists() == false) { if (dir.exists() == false) {

66
RecentActivity/src/org/sleuthkit/autopsy/recentactivity/RAImageIngestModule.java
View File

@ -23,15 +23,16 @@
package org.sleuthkit.autopsy.recentactivity; package org.sleuthkit.autopsy.recentactivity;
import java.io.File; import java.io.File;
import java.nio.file.Path;
import java.nio.file.Paths; import java.nio.file.Paths;
import java.util.ArrayList; import java.util.ArrayList;
import java.util.List; import java.util.List;
import java.util.Map;
import java.util.logging.Level; import java.util.logging.Level;
import org.openide.util.NbBundle; import org.openide.util.NbBundle;
import org.sleuthkit.autopsy.casemodule.Case; import org.sleuthkit.autopsy.casemodule.Case;
import org.sleuthkit.autopsy.casemodule.NoCurrentCaseException; import org.sleuthkit.autopsy.casemodule.NoCurrentCaseException;
import org.sleuthkit.autopsy.coreutils.Logger; import org.sleuthkit.autopsy.coreutils.Logger;
import org.sleuthkit.autopsy.coreutils.TimeStampUtils;
import org.sleuthkit.autopsy.ingest.DataSourceIngestModule; import org.sleuthkit.autopsy.ingest.DataSourceIngestModule;
import org.sleuthkit.autopsy.ingest.DataSourceIngestModuleProgress; import org.sleuthkit.autopsy.ingest.DataSourceIngestModuleProgress;
import org.sleuthkit.autopsy.ingest.IngestServices; import org.sleuthkit.autopsy.ingest.IngestServices;
@ -41,7 +42,6 @@ import org.sleuthkit.datamodel.Content;
import org.sleuthkit.autopsy.ingest.IngestModule.ProcessResult; import org.sleuthkit.autopsy.ingest.IngestModule.ProcessResult;
import org.sleuthkit.autopsy.ingest.IngestJobContext; import org.sleuthkit.autopsy.ingest.IngestJobContext;
import org.sleuthkit.datamodel.DataSource; import org.sleuthkit.datamodel.DataSource;
import org.sleuthkit.datamodel.OsAccount;
import org.sleuthkit.datamodel.SleuthkitCase; import org.sleuthkit.datamodel.SleuthkitCase;
/** /**
@ -49,6 +49,7 @@ import org.sleuthkit.datamodel.SleuthkitCase;
*/ */
public final class RAImageIngestModule implements DataSourceIngestModule { public final class RAImageIngestModule implements DataSourceIngestModule {
private static final String RECENT_ACTIVITY_FOLDER = "RecentActivity";
private static final Logger logger = Logger.getLogger(RAImageIngestModule.class.getName()); private static final Logger logger = Logger.getLogger(RAImageIngestModule.class.getName());
private final List<Extract> extractors = new ArrayList<>(); private final List<Extract> extractors = new ArrayList<>();
private final List<Extract> browserExtractors = new ArrayList<>(); private final List<Extract> browserExtractors = new ArrayList<>();
@ -64,7 +65,7 @@ public final class RAImageIngestModule implements DataSourceIngestModule {
@Override @Override
public void startUp(IngestJobContext context) throws IngestModuleException { public void startUp(IngestJobContext context) throws IngestModuleException {
this.context = context; this.context = context;
tskCase = Case.getCurrentCase().getSleuthkitCase(); tskCase = Case.getCurrentCase().getSleuthkitCase();
Extract iexplore; Extract iexplore;
@ -104,10 +105,10 @@ public final class RAImageIngestModule implements DataSourceIngestModule {
extractors.add(webAccountType); // this needs to run after the web browser modules extractors.add(webAccountType); // this needs to run after the web browser modules
extractors.add(zoneInfo); // this needs to run after the web browser modules extractors.add(zoneInfo); // this needs to run after the web browser modules
extractors.add(recycleBin); // this needs to run after ExtractRegistry and ExtractOS extractors.add(recycleBin); // this needs to run after ExtractRegistry and ExtractOS
extractors.add(sru); extractors.add(sru);
extractors.add(prefetch); extractors.add(prefetch);
extractors.add(messageDomainType); extractors.add(messageDomainType);
browserExtractors.add(chrome); browserExtractors.add(chrome);
browserExtractors.add(firefox); browserExtractors.add(firefox);
browserExtractors.add(iexplore); browserExtractors.add(iexplore);
@ -141,8 +142,8 @@ public final class RAImageIngestModule implements DataSourceIngestModule {
try { try {
extracter.process(dataSource, context, progressBar, accountCache); extracter.process(dataSource, context, progressBar, accountCache);
if(extracter instanceof ExtractRegistry) { if (extracter instanceof ExtractRegistry) {
accountCache.initialize(tskCase, ((DataSource)dataSource).getHost()); accountCache.initialize(tskCase, ((DataSource) dataSource).getHost());
} }
} catch (Exception ex) { } catch (Exception ex) {
logger.log(Level.SEVERE, "Exception occurred in " + extracter.getName(), ex); //NON-NLS logger.log(Level.SEVERE, "Exception occurred in " + extracter.getName(), ex); //NON-NLS
@ -221,23 +222,38 @@ public final class RAImageIngestModule implements DataSourceIngestModule {
return ProcessResult.OK; return ProcessResult.OK;
} }
/**
* Makes a path of the format
* [basePath]/[RECENT_ACTIVITY_FOLDER]/[module]_[timestamp] if it does not
* already exist and returns the created folder.
*
* @param basePath The base path (a case-related folder like temp or
* output).
* @param module The module name to include in the folder name.
* @return The path to the folder.
*/
private static String getAndMakeRAPath(String basePath, String module) {
String moduleFolder = String.format("%s_%s", module, TimeStampUtils.createTimeStamp());
Path tmpPath = Paths.get(basePath, RECENT_ACTIVITY_FOLDER, moduleFolder);
File dir = tmpPath.toFile();
if (dir.exists() == false) {
dir.mkdirs();
}
return tmpPath.toString();
}
/** /**
* Get the temp path for a specific sub-module in recent activity. Will * Get the temp path for a specific sub-module in recent activity. Will
* create the dir if it doesn't exist. * create the dir if it doesn't exist.
* *
* @param a_case Case that directory is for * @param a_case Case that directory is for
* @param mod Module name that will be used for a sub folder in the temp * @param mod Module name that will be used for a sub folder in the temp
* folder to prevent name collisions * folder to prevent name collisions
* *
* @return Path to directory * @return Path to directory
*/ */
static String getRATempPath(Case a_case, String mod) { static String getRATempPath(Case a_case, String mod) {
String tmpDir = a_case.getTempDirectory() + File.separator + "RecentActivity" + File.separator + mod; //NON-NLS return getAndMakeRAPath(a_case.getTempDirectory(), mod);
File dir = new File(tmpDir);
if (dir.exists() == false) {
dir.mkdirs();
}
return tmpDir;
} }
/** /**
@ -245,28 +261,24 @@ public final class RAImageIngestModule implements DataSourceIngestModule {
* create the dir if it doesn't exist. * create the dir if it doesn't exist.
* *
* @param a_case Case that directory is for * @param a_case Case that directory is for
* @param mod Module name that will be used for a sub folder in the temp * @param mod Module name that will be used for a sub folder in the temp
* folder to prevent name collisions * folder to prevent name collisions
* *
* @return Path to directory * @return Path to directory
*/ */
static String getRAOutputPath(Case a_case, String mod) { static String getRAOutputPath(Case a_case, String mod) {
String tmpDir = a_case.getModuleDirectory() + File.separator + "RecentActivity" + File.separator + mod; //NON-NLS return getAndMakeRAPath(a_case.getModuleDirectory(), mod);
File dir = new File(tmpDir);
if (dir.exists() == false) {
dir.mkdirs();
}
return tmpDir;
} }
/** /**
* Get relative path for module output folder. * Get relative path for module output folder.
* *
* @throws NoCurrentCaseException if there is no open case. * @throws NoCurrentCaseException if there is no open case.
* @return the relative path of the module output folder * @return the relative path of the module output folder
*/ */
static String getRelModuleOutputPath() throws NoCurrentCaseException { static String getRelModuleOutputPath(Case autCase, String mod) {
return Paths.get(Case.getCurrentCaseThrows().getModuleOutputDirectoryRelativePath(), return Paths.get(getAndMakeRAPath(autCase.getModuleOutputDirectoryRelativePath(), mod))
"RecentActivity").normalize().toString() ; //NON-NLS .normalize()
.toString();
} }
} }