mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-06 21:00:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Autopsy support for VMDK

Browse Source
This commit is contained in:
Eugene Livis 2015-12-17 16:39:11 -05:00
parent d3effed39c
commit a0d396d07f
7 changed files with 18 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Core/src/org/sleuthkit/autopsy/casemodule/AddImageTask.java
View File

@ -30,11 +30,9 @@ import org.sleuthkit.autopsy.coreutils.Logger;
import org.sleuthkit.autopsy.coreutils.PlatformUtil;
import org.sleuthkit.datamodel.Content;
import org.sleuthkit.datamodel.Image;
import org.sleuthkit.datamodel.SleuthkitCase;
import org.sleuthkit.datamodel.SleuthkitJNI;
import org.sleuthkit.datamodel.TskCoreException;
import org.sleuthkit.datamodel.TskDataException;
import org.sleuthkit.datamodel.TskException;
/*
* A background task that adds the given image to database using the Sleuthkit

1
Core/src/org/sleuthkit/autopsy/casemodule/Bundle.properties
View File

@ -164,6 +164,7 @@ CasePropertiesForm.updateCaseName.confMsg.title=Create directory
CueBannerPanel.title.text=Open Recent Case
GeneralFilter.rawImageDesc.text=Raw Images (*.img, *.dd, *.001, *.aa, *.raw, *.bin)
GeneralFilter.encaseImageDesc.text=Encase Images (*.e01)
GeneralFilter.virtualMachineImageDesc.text=Virtual Machines (*.vmdk)
ImageDSProcessor.dsType.text=Image File
ImageDSProcessor.allDesc.text=All Supported Types
ImageFilePanel.moduleErr=Module Error

4
Core/src/org/sleuthkit/autopsy/casemodule/GeneralFilter.java
View File

@ -38,6 +38,10 @@ public class GeneralFilter extends FileFilter {
public static final String ENCASE_IMAGE_DESC = NbBundle.getMessage(GeneralFilter.class,
"GeneralFilter.encaseImageDesc.text");
public static final List<String> VIRTUAL_MACHINE_EXTS = Arrays.asList(new String[]{".vmdk"}); //NON-NLS
public static final String VIRTUAL_MACHINE_DESC = NbBundle.getMessage(GeneralFilter.class,
"GeneralFilter.virtualMachineImageDesc.text");
private List<String> extensions;
private String desc;

3
Core/src/org/sleuthkit/autopsy/casemodule/ImageDSProcessor.java
View File

@ -66,12 +66,14 @@ public class ImageDSProcessor implements DataSourceProcessor {
static final GeneralFilter rawFilter = new GeneralFilter(GeneralFilter.RAW_IMAGE_EXTS, GeneralFilter.RAW_IMAGE_DESC);
static final GeneralFilter encaseFilter = new GeneralFilter(GeneralFilter.ENCASE_IMAGE_EXTS, GeneralFilter.ENCASE_IMAGE_DESC);
static final GeneralFilter virtualMachineFilter = new GeneralFilter(GeneralFilter.VIRTUAL_MACHINE_EXTS, GeneralFilter.VIRTUAL_MACHINE_DESC);
static final List<String> allExt = new ArrayList<>();
static {
allExt.addAll(GeneralFilter.RAW_IMAGE_EXTS);
allExt.addAll(GeneralFilter.ENCASE_IMAGE_EXTS);
allExt.addAll(GeneralFilter.VIRTUAL_MACHINE_EXTS);
}
static final String allDesc = NbBundle.getMessage(ImageDSProcessor.class, "ImageDSProcessor.allDesc.text");
static final GeneralFilter allFilter = new GeneralFilter(allExt, allDesc);
@ -82,6 +84,7 @@ public class ImageDSProcessor implements DataSourceProcessor {
filtersList.add(allFilter);
filtersList.add(rawFilter);
filtersList.add(encaseFilter);
filtersList.add(virtualMachineFilter);
}
/*

7
Core/src/org/sleuthkit/autopsy/core/Installer.java
View File

@ -86,6 +86,13 @@ public class Installer extends ModuleInstall {
logger.log(Level.SEVERE, "Error loading EWF library, ", e); //NON-NLS
}
try {
System.loadLibrary("libvmdk"); //NON-NLS
logger.log(Level.INFO, "VMDK library loaded"); //NON-NLS
} catch (UnsatisfiedLinkError e) {
logger.log(Level.SEVERE, "Error loading VMDK library, ", e); //NON-NLS
}
/* PostgreSQL */
try {
System.loadLibrary("msvcr120"); //NON-NLS

2
build-windows.xml
View File

@ -44,6 +44,7 @@
<target name="copyWinTskLibs64ToBaseDir" if="win64.TskLib.exists">
<fileset dir="${win64.TskLib.path}" id="win64dlls">
<include name="libewf.dll" />
<include name="libvmdk.dll"/>
<include name="zlib.dll"/>
</fileset>
@ -70,6 +71,7 @@
<target name="copyWinTskLibs32ToBaseDir" if="win32.TskLib.exists">
<fileset dir="${win32.TskLib.path}" id="win32dlls">
<include name="zlib.dll" />
<include name="libvmdk.dll"/>
<include name="libewf.dll"/>
</fileset>

1
build.xml
View File

@ -113,6 +113,7 @@
<fileset dir="${zip-tmp}/${app.name}/autopsy/modules/lib">
<include name="libtsk_jni.dll" />
<include name="libewf.dll" />
<include name="libvmdk.dll"/>
<include name="zlib.dll" />
<include name="libintl-8.dll"/>
<include name="ssleay32.dll"/>