mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-13 08:26:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'master' of https://github.com/sleuthkit/autopsy

Browse Source
This commit is contained in:
Tim McIver 2013-02-12 13:59:24 -05:00
commit ef14c0fa22
1 changed files with 140 additions and 99 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

197
Core/src/org/sleuthkit/autopsy/casemodule/Case.java
View File

@ -51,9 +51,9 @@ import org.sleuthkit.datamodel.*;
import org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess; import org.sleuthkit.datamodel.SleuthkitJNI.CaseDbHandle.AddImageProcess;
/** /**
* Stores all information for a given case. Only a single case can * Stores all information for a given case. Only a single case can currently be
* currently be open at a time. Use getCurrentCase() to retrieve the * open at a time. Use getCurrentCase() to retrieve the object for the current
* object for the current case. * case.
*/ */
public class Case { public class Case {
@ -62,22 +62,21 @@ public class Case {
/** /**
* Property name that indicates the name of the current case has changed. * Property name that indicates the name of the current case has changed.
* Fired with the case is renamed, and when the current case is * Fired with the case is renamed, and when the current case is
* opened/closed/changed. The value is a String: the name of the case. * opened/closed/changed. The value is a String: the name of the case. The
* The empty string ("") is used for no open case. * empty string ("") is used for no open case.
*/ */
public static final String CASE_NAME = "caseName"; public static final String CASE_NAME = "caseName";
/** /**
* Property name that indicates the number of the current case has changed. * Property name that indicates the number of the current case has changed.
* Fired with the case number is changed. * Fired with the case number is changed. The value is an int: the number of
* The value is an int: the number of the case. * the case. -1 is used for no case number set.
* -1 is used for no case number set.
*/ */
public static final String CASE_NUMBER = "caseNumber"; public static final String CASE_NUMBER = "caseNumber";
/** /**
* Property name that indicates the examiner of the current case has changed. * Property name that indicates the examiner of the current case has
* Fired with the case examiner is changed. * changed. Fired with the case examiner is changed. The value is a String:
* The value is a String: the name of the examiner. * the name of the examiner. The empty string ("") is used for no examiner
* The empty string ("") is used for no examiner set. * set.
*/ */
public static final String CASE_EXAMINER = "caseExaminer"; public static final String CASE_EXAMINER = "caseExaminer";
/** /**
@ -93,11 +92,10 @@ public class Case {
*/ */
public static final String CASE_DEL_IMAGE = "removeImages"; public static final String CASE_DEL_IMAGE = "removeImages";
/** /**
* Property name that indicates the currently open case has changed. * Property name that indicates the currently open case has changed. The new
* The new value is the instance of the opened Case, or null if there is no * value is the instance of the opened Case, or null if there is no open
* open case. * case. The old value is the instance of the closed Case, or null if there
* The old value is the instance of the closed Case, or null if there was no * was no open case.
* open case.
*/ */
public static final String CASE_CURRENT_CASE = "currentCase"; public static final String CASE_CURRENT_CASE = "currentCase";
/** /**
@ -116,7 +114,6 @@ public class Case {
// Track the current case (only set with changeCase() method) // Track the current case (only set with changeCase() method)
private static Case currentCase = null; private static Case currentCase = null;
private Services services; private Services services;
private static final Logger logger = Logger.getLogger(Case.class.getName()); private static final Logger logger = Logger.getLogger(Case.class.getName());
/** /**
@ -148,6 +145,7 @@ public class Case {
/** /**
* Check if case is currently open * Check if case is currently open
*
* @return true if case is open * @return true if case is open
*/ */
public static boolean isCaseOpen() { public static boolean isCaseOpen() {
@ -155,8 +153,9 @@ public class Case {
} }
/** /**
* Updates the current case to the given case and fires off * Updates the current case to the given case and fires off the appropriate
* the appropriate property-change * property-change
*
* @param newCase the new current case * @param newCase the new current case
*/ */
private static void changeCase(Case newCase) { private static void changeCase(Case newCase) {
@ -174,8 +173,6 @@ public class Case {
pcs.firePropertyChange(CASE_NAME, oldCaseName, ""); pcs.firePropertyChange(CASE_NAME, oldCaseName, "");
if (newCase != null) { if (newCase != null) {
currentCase = newCase; currentCase = newCase;
@ -196,8 +193,8 @@ public class Case {
/** /**
* Creates a new case (create the XML config file and the directory) * Creates a new case (create the XML config file and the directory)
* *
* @param caseDir the base directory where the configuration file is saved * @param caseDir the base directory where the configuration file is saved
* @param caseName the name of case * @param caseName the name of case
* @param caseNumber the case number * @param caseNumber the case number
* @param examiner the examiner for this case * @param examiner the examiner for this case
*/ */
@ -227,7 +224,7 @@ public class Case {
/** /**
* Opens the existing case (open the XML config file) * Opens the existing case (open the XML config file)
* *
* @param configFilePath the path of the configuration file that's opened * @param configFilePath the path of the configuration file that's opened
* @throws CaseActionException * @throws CaseActionException
*/ */
static void open(String configFilePath) throws CaseActionException { static void open(String configFilePath) throws CaseActionException {
@ -270,8 +267,8 @@ public class Case {
Map<Long, String> imgPaths = new HashMap<Long, String>(); Map<Long, String> imgPaths = new HashMap<Long, String>();
try { try {
Map<Long, List<String>> imgPathsList = db.getImagePaths(); Map<Long, List<String>> imgPathsList = db.getImagePaths();
for(Map.Entry<Long, List<String>> entry : imgPathsList.entrySet()) { for (Map.Entry<Long, List<String>> entry : imgPathsList.entrySet()) {
if(entry.getValue().size() > 0) { if (entry.getValue().size() > 0) {
imgPaths.put(entry.getKey(), entry.getValue().get(0)); imgPaths.put(entry.getKey(), entry.getValue().get(0));
} }
} }
@ -289,8 +286,8 @@ public class Case {
for (Map.Entry<Long, String> entry : imgPaths.entrySet()) { for (Map.Entry<Long, String> entry : imgPaths.entrySet()) {
long obj_id = entry.getKey(); long obj_id = entry.getKey();
String path = entry.getValue(); String path = entry.getValue();
boolean fileExists = (pathExists(path) || boolean fileExists = (pathExists(path)
driveExists(path)); || driveExists(path));
if (!fileExists) { if (!fileExists) {
int ret = JOptionPane.showConfirmDialog(null, appName + " has detected that one of the images associated with \n" int ret = JOptionPane.showConfirmDialog(null, appName + " has detected that one of the images associated with \n"
+ "this case are missing. Would you like to search for them now?\n" + "this case are missing. Would you like to search for them now?\n"
@ -310,9 +307,9 @@ public class Case {
/** /**
* Adds the image to the current case after it has been added to the DB * Adds the image to the current case after it has been added to the DB
* *
* @param imgPaths the paths of the image that being added * @param imgPaths the paths of the image that being added
* @param imgId the ID of the image that being added * @param imgId the ID of the image that being added
* @param timeZone the timeZone of the image where it's added * @param timeZone the timeZone of the image where it's added
*/ */
Image addImage(String imgPath, long imgId, String timeZone) throws CaseActionException { Image addImage(String imgPath, long imgId, String timeZone) throws CaseActionException {
logger.log(Level.INFO, "Adding image to Case. imgPath: {0} ID: {1} TimeZone: {2}", new Object[]{imgPath, imgId, timeZone}); logger.log(Level.INFO, "Adding image to Case. imgPath: {0} ID: {1} TimeZone: {2}", new Object[]{imgPath, imgId, timeZone});
@ -337,6 +334,7 @@ public class Case {
/** /**
* Get the underlying SleuthkitCase instance from the Sleuth Kit bindings * Get the underlying SleuthkitCase instance from the Sleuth Kit bindings
* library. * library.
*
* @return * @return
*/ */
public SleuthkitCase getSleuthkitCase() { public SleuthkitCase getSleuthkitCase() {
@ -360,6 +358,7 @@ public class Case {
/** /**
* Delete this case. This methods delete all folders and files of this case. * Delete this case. This methods delete all folders and files of this case.
*
* @param caseDir case dir to delete * @param caseDir case dir to delete
* @throws CaseActionException exception throw if case could not be deleted * @throws CaseActionException exception throw if case could not be deleted
*/ */
@ -385,10 +384,10 @@ public class Case {
/** /**
* Updates the case name. * Updates the case name.
* *
* @param oldCaseName the old case name that wants to be updated * @param oldCaseName the old case name that wants to be updated
* @param oldPath the old path that wants to be updated * @param oldPath the old path that wants to be updated
* @param newCaseName the new case name * @param newCaseName the new case name
* @param newPath the new path * @param newPath the new path
*/ */
void updateCaseName(String oldCaseName, String oldPath, String newCaseName, String newPath) throws CaseActionException { void updateCaseName(String oldCaseName, String oldPath, String newCaseName, String newPath) throws CaseActionException {
try { try {
@ -407,8 +406,8 @@ public class Case {
/** /**
* Updates the case examiner * Updates the case examiner
* *
* @param oldExaminer the old examiner * @param oldExaminer the old examiner
* @param newExaminer the new examiner * @param newExaminer the new examiner
*/ */
void updateExaminer(String oldExaminer, String newExaminer) throws CaseActionException { void updateExaminer(String oldExaminer, String newExaminer) throws CaseActionException {
try { try {
@ -450,16 +449,16 @@ public class Case {
/** /**
* Uses the given path to store it as the configuration file path * Uses the given path to store it as the configuration file path
* *
* @param givenPath the given config file path * @param givenPath the given config file path
*/ */
private void setConfigFilePath(String givenPath) { private void setConfigFilePath(String givenPath) {
configFilePath = givenPath; configFilePath = givenPath;
} }
/** /**
* Get the config file path in the given path * Get the config file path in the given path
* *
* @return configFilePath the path of the configuration file * @return configFilePath the path of the configuration file
*/ */
String getConfigFilePath() { String getConfigFilePath() {
return configFilePath; return configFilePath;
@ -467,6 +466,7 @@ public class Case {
/** /**
* Returns the current version of Autopsy * Returns the current version of Autopsy
*
* @return autopsyVer * @return autopsyVer
*/ */
public static String getAutopsyVersion() { public static String getAutopsyVersion() {
@ -475,6 +475,7 @@ public class Case {
/** /**
* Gets the application name * Gets the application name
*
* @return appName * @return appName
*/ */
public static String getAppName() { public static String getAppName() {
@ -483,6 +484,7 @@ public class Case {
/** /**
* Gets the case name * Gets the case name
*
* @return name * @return name
*/ */
public String getName() { public String getName() {
@ -491,6 +493,7 @@ public class Case {
/** /**
* Gets the case number * Gets the case number
*
* @return number * @return number
*/ */
public String getNumber() { public String getNumber() {
@ -499,6 +502,7 @@ public class Case {
/** /**
* Gets the Examiner name * Gets the Examiner name
*
* @return examiner * @return examiner
*/ */
public String getExaminer() { public String getExaminer() {
@ -507,6 +511,7 @@ public class Case {
/** /**
* Gets the case directory path * Gets the case directory path
*
* @return caseDirectoryPath * @return caseDirectoryPath
*/ */
public String getCaseDirectory() { public String getCaseDirectory() {
@ -519,6 +524,7 @@ public class Case {
/** /**
* Gets the full path to the temp directory of this case * Gets the full path to the temp directory of this case
*
* @return tempDirectoryPath * @return tempDirectoryPath
*/ */
public String getTempDirectory() { public String getTempDirectory() {
@ -531,6 +537,7 @@ public class Case {
/** /**
* Gets the full path to the cache directory of this case * Gets the full path to the cache directory of this case
*
* @return cacheDirectoryPath * @return cacheDirectoryPath
*/ */
public String getCacheDirectory() { public String getCacheDirectory() {
@ -543,6 +550,7 @@ public class Case {
/** /**
* get the created date of this case * get the created date of this case
*
* @return case creation date * @return case creation date
*/ */
public String getCreatedDate() { public String getCreatedDate() {
@ -553,28 +561,30 @@ public class Case {
} }
} }
/** /**
* Get absolute module output directory path where modules should save their permanent data * Get absolute module output directory path where modules should save their
* The directory is a subdirectory of this case dir. * permanent data The directory is a subdirectory of this case dir.
*
* @return absolute path to the module output dir * @return absolute path to the module output dir
*/ */
public String getModulesOutputDirectoryPath() { public String getModulesOutputDirAbsPath() {
return this.getCaseDirectory() + File.separator + getModulesOutputDirectory(); return this.getCaseDirectory() + File.separator + getModulesOutputDirRelPath();
} }
/** /**
* Get relative (with respect to case dir) * Get relative (with respect to case dir) module output directory path
* module output directory path where modules should save their permanent data * where modules should save their permanent data The directory is a
* The directory is a subdirectory of this case dir. * subdirectory of this case dir.
*
* @return relative path to the module output dir * @return relative path to the module output dir
*/ */
public String getModulesOutputDirectory() { public static String getModulesOutputDirRelPath() {
return "ModuleOutput"; return "ModuleOutput";
} }
/** /**
* get the PropertyChangeSupport of this class * get the PropertyChangeSupport of this class
*
* @return PropertyChangeSupport * @return PropertyChangeSupport
*/ */
public static PropertyChangeSupport getPropertyChangeSupport() { public static PropertyChangeSupport getPropertyChangeSupport() {
@ -587,6 +597,7 @@ public class Case {
/** /**
* get all the image id in this case * get all the image id in this case
*
* @return imageIDs * @return imageIDs
*/ */
public Long[] getImageIDs() { public Long[] getImageIDs() {
@ -600,6 +611,7 @@ public class Case {
/** /**
* Count the root objects. * Count the root objects.
*
* @return The number of total root objects in this case. * @return The number of total root objects in this case.
*/ */
public int getRootObjectsCount() { public int getRootObjectsCount() {
@ -608,6 +620,7 @@ public class Case {
/** /**
* Get the data model Content objects in the root of this case's hierarchy. * Get the data model Content objects in the root of this case's hierarchy.
*
* @return a list of the root objects * @return a list of the root objects
*/ */
public List<Content> getRootObjects() { public List<Content> getRootObjects() {
@ -621,11 +634,11 @@ public class Case {
/** /**
* Gets the time zone(s) of the image(s) in this case. * Gets the time zone(s) of the image(s) in this case.
* *
* @return time zones the set of time zones * @return time zones the set of time zones
*/ */
public Set<TimeZone> getTimeZone() { public Set<TimeZone> getTimeZone() {
Set<TimeZone> timezones = new HashSet<TimeZone>(); Set<TimeZone> timezones = new HashSet<TimeZone>();
for(Content c : getRootObjects()) { for (Content c : getRootObjects()) {
try { try {
timezones.add(TimeZone.getTimeZone(c.getImage().getTimeZone())); timezones.add(TimeZone.getTimeZone(c.getImage().getTimeZone()));
} catch (TskException ex) { } catch (TskException ex) {
@ -645,29 +658,30 @@ public class Case {
/** /**
* Check if image from the given image path exists. * Check if image from the given image path exists.
* @param imgPath the image path *
* @return isExist whether the path exists * @param imgPath the image path
* @return isExist whether the path exists
*/ */
public static boolean pathExists(String imgPath) { public static boolean pathExists(String imgPath) {
return new File(imgPath).isFile(); return new File(imgPath).isFile();
} }
/** /**
* Does the given string refer to a physical drive? * Does the given string refer to a physical drive?
*/ */
private static final String pdisk = "\\\\.\\physicaldrive"; private static final String pdisk = "\\\\.\\physicaldrive";
private static final String dev = "/dev/"; private static final String dev = "/dev/";
static boolean isPhysicalDrive(String path) { static boolean isPhysicalDrive(String path) {
return path.toLowerCase().startsWith(pdisk) || return path.toLowerCase().startsWith(pdisk)
path.toLowerCase().startsWith(dev); || path.toLowerCase().startsWith(dev);
} }
/** /**
* Does the given string refer to a local drive / partition? * Does the given string refer to a local drive / partition?
*/ */
static boolean isPartition(String path) { static boolean isPartition(String path) {
return path.toLowerCase().startsWith("\\\\.\\") && return path.toLowerCase().startsWith("\\\\.\\")
path.toLowerCase().endsWith(":"); && path.toLowerCase().endsWith(":");
} }
/** /**
@ -683,15 +697,15 @@ public class Case {
File tmp = new File(path); File tmp = new File(path);
br = new BufferedInputStream(new FileInputStream(tmp)); br = new BufferedInputStream(new FileInputStream(tmp));
int b = br.read(); int b = br.read();
if(b!=-1) { if (b != -1) {
return true; return true;
} }
return false; return false;
} catch(Exception ex) { } catch (Exception ex) {
return false; return false;
} finally { } finally {
try { try {
if(br != null) { if (br != null) {
br.close(); br.close();
} }
} catch (IOException ex) { } catch (IOException ex) {
@ -701,8 +715,8 @@ public class Case {
/** /**
* Convert the Java timezone ID to the "formatted" string that can be * Convert the Java timezone ID to the "formatted" string that can be
* accepted by the C/C++ code. * accepted by the C/C++ code. Example: "America/New_York" converted to
* Example: "America/New_York" converted to "EST5EDT", etc * "EST5EDT", etc
* *
* @param timezoneID * @param timezoneID
* @return * @return
@ -735,8 +749,9 @@ public class Case {
/* The methods below are used to manage the case directories (creating, checking, deleting, etc) */ /* The methods below are used to manage the case directories (creating, checking, deleting, etc) */
/** /**
* to create the case directory * to create the case directory
* @param caseDir the case directory path *
* @param caseName the case name * @param caseDir the case directory path
* @param caseName the case name
* @throws CaseActionException throw if could not create the case dir * @throws CaseActionException throw if could not create the case dir
*/ */
static void createCaseDirectory(String caseDir, String caseName) throws CaseActionException { static void createCaseDirectory(String caseDir, String caseName) throws CaseActionException {
@ -745,17 +760,16 @@ public class Case {
File caseDirF = new File(caseDir); File caseDirF = new File(caseDir);
if (caseDirF.exists()) { if (caseDirF.exists()) {
if (caseDirF.isFile()) { if (caseDirF.isFile()) {
throw new CaseActionException ("Cannot create case dir, already exists and is not a directory: " + caseDir); throw new CaseActionException("Cannot create case dir, already exists and is not a directory: " + caseDir);
} } else if (!caseDirF.canRead() || !caseDirF.canWrite()) {
else if (! caseDirF.canRead() || ! caseDirF.canWrite()) { throw new CaseActionException("Cannot create case dir, already exists and cannot read/write: " + caseDir);
throw new CaseActionException ("Cannot create case dir, already exists and cannot read/write: " + caseDir);
} }
} }
try { try {
result = (caseDirF).mkdirs(); // create root case Directory result = (caseDirF).mkdirs(); // create root case Directory
if (result == false) { if (result == false) {
throw new CaseActionException ("Cannot create case dir: " + caseDir); throw new CaseActionException("Cannot create case dir: " + caseDir);
} }
// create the folders inside the case directory // create the folders inside the case directory
@ -767,6 +781,13 @@ public class Case {
if (result == false) { if (result == false) {
throw new CaseActionException("Could not create case directory: " + caseDir + " for case: " + caseName); throw new CaseActionException("Could not create case directory: " + caseDir + " for case: " + caseName);
} }
final String modulesOutDir = caseDir + File.separator + getModulesOutputDirRelPath();
result = new File(modulesOutDir).mkdir();
if (result == false) {
throw new CaseActionException("Could not create modules output directory: " + modulesOutDir + " for case: " + caseName);
}
} catch (Exception e) { } catch (Exception e) {
throw new CaseActionException("Could not create case directory: " + caseDir + " for case: " + caseName, e); throw new CaseActionException("Could not create case directory: " + caseDir + " for case: " + caseName, e);
} }
@ -774,8 +795,9 @@ public class Case {
/** /**
* delete the given case directory * delete the given case directory
* @param casePath the case path *
* @return boolean whether the case directory is successfully deleted or not * @param casePath the case path
* @return boolean whether the case directory is successfully deleted or not
*/ */
static boolean deleteCaseDirectory(File casePath) { static boolean deleteCaseDirectory(File casePath) {
logger.log(Level.INFO, "Deleting case directory: " + casePath.getAbsolutePath()); logger.log(Level.INFO, "Deleting case directory: " + casePath.getAbsolutePath());
@ -790,12 +812,11 @@ public class Case {
} }
/** /**
* Call if there are no images in the case. Displays * Call if there are no images in the case. Displays a dialog offering to
* a dialog offering to add one. * add one.
*/ */
private static void runAddImageAction() { private static void runAddImageAction() {
SwingUtilities.invokeLater(new Runnable() { SwingUtilities.invokeLater(new Runnable() {
@Override @Override
public void run() { public void run() {
final AddImageAction action = Lookup.getDefault().lookup(AddImageAction.class); final AddImageAction action = Lookup.getDefault().lookup(AddImageAction.class);
@ -806,6 +827,7 @@ public class Case {
/** /**
* Checks if a String is a valid case name * Checks if a String is a valid case name
*
* @param caseName the candidate String * @param caseName the candidate String
* @return true if the candidate String is a valid case name * @return true if the candidate String is a valid case name
*/ */
@ -831,12 +853,32 @@ public class Case {
} }
} }
/**
* Check for existence of certain case sub dirs and create them if needed.
* @param openedCase
*/
private static void checkSubFolders(Case openedCase) {
String modulesOutputDir = openedCase.getModulesOutputDirAbsPath();
File modulesOutputDirF = new File(modulesOutputDir);
if (!modulesOutputDirF.exists()) {
logger.log(Level.INFO, "Creating modules output dir for the case.");
}
try {
if (! modulesOutputDirF.mkdir() ) {
logger.log(Level.SEVERE, "Error creating modules output dir for the case, dir: " + modulesOutputDir);
}
} catch (SecurityException e) {
logger.log(Level.SEVERE, "Error creating modules output dir for the case, dir: " + modulesOutputDir, e);
}
}
//case change helper //case change helper
private static void doCaseChange(Case toChangeTo) { private static void doCaseChange(Case toChangeTo) {
if (toChangeTo != null) { // new case is open if (toChangeTo != null) { // new case is open
// clear the temp folder when the case is created / opened // clear the temp folder when the case is created / opened
Case.clearTempFolder(); Case.clearTempFolder();
checkSubFolders(toChangeTo);
// enable these menus // enable these menus
CallableSystemAction.get(AddImageAction.class).setEnabled(true); CallableSystemAction.get(AddImageAction.class).setEnabled(true);
@ -898,4 +940,3 @@ public class Case {
} }
} }
} }