Brian Carrier
87f68da53c
Run regripper full on registry hives and post to blackboard. Removed old rr code in third party since it is not used
2013-07-16 10:50:29 -04:00
Smoss
672e8af76e
Made reccomended changes to ExtractUSB and ExtractRegistry.
...
Signed-off-by: Smoss <Smoss117@gmail.com>
2013-06-26 17:44:31 -04:00
Smoss
e82b11f68a
Fixed ExtractUSB and changed instructions.
2013-06-24 12:39:14 -04:00
Smoss
46088288a9
Fixed regression.py and USB_DATA.
...
Signed-off-by: Smoss <Smoss117@gmail.com>
2013-06-24 12:20:31 -04:00
Smoss
9eac53937d
Added instructions for upgrading USB Database.
...
Signed-off-by: Smoss <Smoss117@gmail.com>
2013-06-24 10:40:07 -04:00
Smoss
c83f4c744c
Updated USBExtraction
2013-06-11 19:04:24 -04:00
Smoss
5ea8ed18cd
Made changes to ExtractUSB method and class names and behavior.
2013-06-11 15:24:46 -04:00
Sean-M
4f7911fc9e
Merge commit
...
Signed-off-by: Sean-M <Smoss117@gmail.com>
2013-06-11 15:00:13 -04:00
adam-m
565e01a9cf
adjust fuzzy query (no logic/result change)
2013-06-10 17:14:13 -04:00
adam-m
fbe2dd76eb
Changed image-level ingest to data-source Content-level ingest.
...
Related changes, such as FileManager API adjustments and fixes in client code.
Simplifications in RecentActivity logic to get files per current data source (no need to use deprecated method)
2013-06-07 18:49:59 -04:00
Brian Carrier
c8f4bf4bee
Merge branch 'master' of github.com:sleuthkit/autopsy
2013-06-06 10:54:59 -04:00
Brian Carrier
b29a2b5c88
Cleaned up Doxygen docs. Removed getDefault() from image modules
2013-06-06 10:54:11 -04:00
Sean-M
6e3d951e45
fixed ExtractUSB
...
Signed-off-by: Sean-M <Smoss117@gmail.com>
2013-06-05 13:41:47 -04:00
adam-m
ebf53d3711
update modules versions for the release
2013-06-05 12:49:07 -04:00
U-BASIS\smoss
89c30f9cf5
Merge https://www.github.com/sleuthkit/autopsy
2013-06-05 12:00:54 -04:00
adam-m
5eaa372122
remove excessive logging from URL analyzer
2013-06-05 11:41:13 -04:00
Sean-M
2ac6c66309
added usb extraction and changed regression.py.
...
Signed-off-by: Sean-M <Smoss117@gmail.com>
2013-06-05 11:05:23 -04:00
Brian Carrier
10764b7ea3
resolved merge conflicts
2013-05-30 15:39:03 -04:00
Brian Carrier
90a0acf1bf
Updated IngestModule API to be abstract class instead of interface. Started to update docs.
2013-05-24 09:56:28 -04:00
adam-m
074178fb8e
Merge branch 'master' into local-files
2013-05-23 16:24:37 -04:00
adam-m
62bb213b58
Move ExecUtil class to Core utils and simplify Timeline dependencies
2013-05-21 12:49:53 -04:00
adam-m
fa2bb0c2c9
further improvements (cleanup, speed) in running regripper and pasco
2013-05-21 12:44:52 -04:00
Sean moss
9e55b9bd50
Merge branch 'master' of https://github.com/Smoss/autopsy
2013-05-21 10:11:54 -04:00
Sean-M
6bf140ab76
Fixed BB source error.
2013-05-21 10:10:49 -04:00
adam-m
4021abec58
make state var volatile
2013-05-20 13:06:19 -04:00
adam-m
0c2483120a
ExecUtil: add API to write stdout directly to file stream. Make TimeLine use that API.
2013-05-20 13:01:20 -04:00
adam-m
c40b7ef986
Rename JavaSystemCaller to ExecUtil. Make thread-safe / non-static
2013-05-20 12:49:29 -04:00
adam-m
af77304fb0
cleanup java system caller class (to be renamed and refactored)
2013-05-20 12:30:23 -04:00
adam-m
b7e104dd22
better process exec logging
2013-05-20 12:05:38 -04:00
adam-m
7ccbba8cd3
Merge branch 'master' of https://github.com/sleuthkit/autopsy into local-files
...
Conflicts:
RecentActivity/src/org/sleuthkit/autopsy/recentactivity/JavaSystemCaller.java
2013-05-20 11:55:09 -04:00
Tim McIver
06cb9735fc
Updated Timeline.java and JavaSystemCaller.java to use array version of
...
Runtime.exec() method as the most recent version of Java (1.7.0_21)
changed the behavior of the single-string version of Runtime.exec()
causing a problem with Timeline. Also updated code to so that the
mactime output is no longer redirected to a file via the '>' redirect
operator. The ouput is now being captured from JavaSystemCaller.execute()
and written to a file directly.
2013-05-20 11:42:39 -04:00
adam-m
ae13717287
garbage collect process and streams after executing command
2013-05-10 13:09:13 -04:00
adam-m
1c39037da2
cleanup stdout/stderr collection threads after forked process returns
2013-05-10 12:45:02 -04:00
adam-m
cea08ec24e
search query analyzer: send new data event once at end of ingest, not for every result (minimize tree refresh)
2013-03-23 19:13:50 -04:00
adam-m
ee8ef11882
update modules versions for the release
2013-03-20 15:13:07 -04:00
Tim McIver
e3581df5d9
Reinstated copyright that was mistakenly deleted from Chrome.java.
2013-03-11 13:07:17 -04:00
Tim McIver
41e98c4171
Removed contact info for Autopsy developer no longer working on the project.
2013-03-11 11:08:04 -04:00
Tim McIver
4eb5a6ba2d
Removed log message when more than one Chrome history file is found as this
...
is an expected case (on mulit-user systems). Also updated copyright years.
2013-03-11 11:00:16 -04:00
Tim McIver
6af0b6d1b8
Changed 2 warning level log messages to info level.
2013-03-08 15:02:23 -05:00
Tim McIver
e19f6b20df
Updated method getHistory() in RecentActivity/Chrome.java so that the
...
allocation status of the found history files is checked and only the
allocated files are used. Log a warning if more than one allocated history
file is found.
2013-03-08 12:57:17 -05:00
adam-m
9c136f8e6f
rename ingest context to pipeline context
2013-02-25 10:48:25 -05:00
adam-m
a15a035565
add ingest context to ingest module process() method - API change.
...
Adjust all ingest modules.
Update ingest manager to create and pass in context.
2013-02-21 00:16:38 -05:00
adam-m
8d287ddc26
delete genfiles props
2013-02-14 16:00:43 -05:00
adam-m
8c64fe1a8b
catch exception from lnk parser
2013-02-14 13:31:34 -05:00
adam-m
91de7a6a1c
ra minro cleanup, don't throw unchecked exceptions, do not process 0 sized files in chrome
2013-02-14 13:04:32 -05:00
adam-m
763e6aa593
skip processing 0 size history files - fixed
2013-02-14 12:21:17 -05:00
adam-m
6816a1eaf1
update modules versions
2013-02-12 17:24:45 -05:00
adam-m
da3928f42a
restore the pause when forking process, add log msg if interrupted
2013-02-12 10:59:21 -05:00
adam-m
bc534eb19b
remove waitfor (redundant)
2013-02-11 15:37:15 -05:00
adam-m
380c82cf37
concurrency fix: make sure forked process finished before reading output from it
2013-02-11 15:19:57 -05:00