mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-12 07:56:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

Run Keyword Search on Known Bad files

Browse Source
This commit is contained in:
Dick Fickling 2012-03-23 12:08:45 -04:00
parent f3cf69c10b
commit b6218c7e3c
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
HashDatabase/src/org/sleuthkit/autopsy/hashdatabase/HashDbIngestService.java
View File

@ -138,7 +138,7 @@ public class HashDbIngestService implements IngestServiceFsContent {
ProcessResult ret = ProcessResult.UNKNOWN; ProcessResult ret = ProcessResult.UNKNOWN;
process = true; process = true;
if(fsContent.getKnown().equals(TskData.FileKnown.BAD)) { if(fsContent.getKnown().equals(TskData.FileKnown.BAD)) {
ret = ProcessResult.COND_STOP; ret = ProcessResult.OK;
process = false; process = false;
} }
if (process) { if (process) {
@ -175,7 +175,7 @@ public class HashDbIngestService implements IngestServiceFsContent {
detailsSb.append("</table>"); detailsSb.append("</table>");
managerProxy.postMessage(IngestMessage.createDataMessage(++messageId, this, "Found " + status + " file: " + name, detailsSb.toString(), name, badFile)); managerProxy.postMessage(IngestMessage.createDataMessage(++messageId, this, "Found " + status + " file: " + name, detailsSb.toString(), name, badFile));
IngestManager.fireServiceDataEvent(new ServiceDataEvent(NAME, ARTIFACT_TYPE.TSK_HASHSET_HIT, Collections.singletonList(badFile))); IngestManager.fireServiceDataEvent(new ServiceDataEvent(NAME, ARTIFACT_TYPE.TSK_HASHSET_HIT, Collections.singletonList(badFile)));
ret = ProcessResult.COND_STOP; ret = ProcessResult.OK;
} else if (status.equals(TskData.FileKnown.KNOWN)) { } else if (status.equals(TskData.FileKnown.KNOWN)) {
ret = ProcessResult.COND_STOP; ret = ProcessResult.COND_STOP;
} }