adam-m
79aa163ecc
TSK-389 Change file read() API
...
- adapt to API change, optimize/reuse buffer when possible
2012-04-03 17:46:42 -04:00
adam-m
c92833bb47
Renable string extraction on up to 1MB strings
2012-04-02 14:41:26 -04:00
adam-m
e163c35b11
Keyword search remove performQueryPerTerm() from interface and simplify code
2012-04-02 14:24:29 -04:00
adam-m
74fdab0b08
TSK-424 Review Keyword Search Behavior
...
- fix non-regex queries inside outter quotes supplied by user (do not escape the quotes)
- do not force quotes for non-regex queryies and fix highlighting when query consists of multiple words
2012-03-30 13:55:41 -04:00
adam-m
a0d3364e3c
remove watch lists string reference
2012-03-30 10:36:54 -04:00
adam-m
ec5adde672
Catch all exceptions in CaseChangeListener, otherwise it would prohibit other handlers from running
2012-03-29 16:36:42 -04:00
Dick Fickling
d191b7de2a
Merge branch 'master' of github.com:sleuthkit/autopsy
2012-03-28 10:39:15 -04:00
Dick Fickling
4db6a757d0
TSK-428: Keyword search export GUI bug
2012-03-28 10:39:08 -04:00
adam-m
8910472207
Keyword search: do not send new data event if no artifacts created (e.g. when no Solr core)
2012-03-28 10:18:11 -04:00
adam-m
44b2b44f24
Handle text highlights errors more gracefully when solr core not available
2012-03-28 10:00:06 -04:00
adam-m
af66843579
Improve highlighting/preview query slightly by quoting the term, better matches while still using stored='false'
2012-03-27 18:15:45 -04:00
adam-m
4ae52f06db
Remove <> from keyword search messages for consistency
2012-03-27 17:14:28 -04:00
Dick Fickling
1b360046de
change back/forward buttons for content viewers
2012-03-27 16:49:36 -04:00
adam-m
91f628ed29
Convert exceptions from solr getCore() to checked exceptions from runtime ex and handle them properly.
...
Get rid of error dialog box when sometimes closing case will close core and try to get solr content.
2012-03-27 15:09:36 -04:00
Dick Fickling
46cd278c62
Add menu items to bundle properties
2012-03-27 13:28:10 -04:00
adam-m
0c5e1baa2e
Merge branch 'master' of https://github.com/sleuthkit/autopsy
2012-03-27 13:24:45 -04:00
adam-m
961c414db8
Add tooltip with service description to ingest panel
2012-03-27 13:22:22 -04:00
adam-m
81e680ccf4
Add service description to service API
2012-03-27 12:51:46 -04:00
Dick Fickling
38014209b9
Add right-click menu to keyword search bar
2012-03-27 10:34:26 -04:00
adam-m
b9aaf58c90
use stored=false for now for performance, test more (might break the preview)
2012-03-27 08:28:31 -04:00
adam-m
5510f51e33
Better regex for URLs
2012-03-27 00:16:41 -04:00
adam-m
69d55f7cc1
Keyword search ingest improvements: alternative performQueryPerTerm() and equivalent bb write methods - more optimal for grouping results per hit (in ingest) rather then per query.
...
Improves overall keyword search ingest performance.
Improve regex results highlight by using content_ws field.
2012-03-27 00:16:28 -04:00
Dick Fickling
3ce9917c2a
Improve cross platform performance and appearance
2012-03-26 14:08:54 -04:00
Dick Fickling
8130f948e8
Merge branch 'master' of github.com:sleuthkit/autopsy
2012-03-26 12:41:54 -04:00
adam-m
ae4731f3a6
handle no solr code exception in extracted content
2012-03-26 12:36:11 -04:00
adam-m
c488275bc4
Quietly handle exception when closing case and solr core and some viewer is attemtping to get content
2012-03-26 12:27:05 -04:00
adam-m
6e491f3149
change URL regex
2012-03-26 11:26:39 -04:00
adam-m
abff5dce99
Use proper regex for URLs
2012-03-26 11:04:24 -04:00
Dick Fickling
c0470f53e0
Merge branch 'master' of github.com:sleuthkit/autopsy
2012-03-26 09:35:21 -04:00
adam-m
66358a5c44
fix bug when keyword list export throws exception in some cases
2012-03-23 17:32:22 -04:00
Dick Fickling
b3dde28f76
Merge branch 'master' of github.com:sleuthkit/autopsy
2012-03-23 12:15:22 -04:00
Dick Fickling
eb45ab558b
Back and Forward buttons for content viewers
2012-03-23 12:15:00 -04:00
Dick Fickling
8b3c4243fe
Show Extracted Content view by default for Keyword Search Artifacts
2012-03-23 12:10:20 -04:00
adam-m
8f101145e2
keyword search - change attribute ordering, cleanup escaping (now done in BB), do not write selector attribute (should go to gen info)
2012-03-23 12:06:46 -04:00
Dick Fickling
dd6222da75
Merge branch 'master' of github.com:sleuthkit/autopsy
2012-03-23 10:57:56 -04:00
Dick Fickling
3f66dd3a0b
Gui Tweaks
2012-03-23 10:57:16 -04:00
adam-m
752c5e2910
Reduce size of string extract files
2012-03-23 10:39:34 -04:00
Dick Fickling
e51534e678
Merge branch 'master' of github.com:sleuthkit/autopsy
2012-03-21 16:07:48 -04:00
Dick Fickling
2f0c1664bc
Rearrange keyword search toolbar
2012-03-21 16:07:10 -04:00
adam-m
f6d1b8951f
Fix more compile warnings in keyword search
2012-03-19 21:29:18 -04:00
adam-m
c928788bb6
- Fix to show stats and file ingest dialog after ingest complete and also all background threads (keyword search) completed.
...
- fix to not run complete() portion of keyword search service in some cases, when service was not selected to run
2012-03-19 18:54:12 -04:00
adam-m
15409ce3a9
Improve keyword search blackboard data escaping
2012-03-19 13:35:05 -04:00
adam-m
0c6865cf92
bugfix when Case is closing and Solr core no longer available, and event arrives to update extracted content view
2012-03-16 16:24:04 -04:00
adam-m
e7f23c8412
- Improve term component query when aggregate files query is too long and SOlr throws parse exception: divide into multiple subqueries 100 terms each
...
- temporarily disable true URL regex - it needs the stored="true" in SOlr schema to work properly
2012-03-16 13:13:26 -04:00
adam-m
c8d18cf38c
Add thread safety to Solr Server class for running queries from multiple threads and closing / opening core in event handlers
2012-03-16 09:59:40 -04:00
adam-m
4bf669147f
Improve escaping of keyword search results for blackboard
2012-03-16 09:43:44 -04:00
adam-m
1506ecfcd0
Fix a keyword search bug when regex matches with some upper case chars would not be written to blackboard
2012-03-15 18:35:26 -04:00
adam-m
18b00fc294
Merge branch 'master' of https://github.com/sleuthkit/autopsy
2012-03-15 18:10:34 -04:00
adam-m
bb798dac66
TSK-398 Highlighter / preview for regexp search shows also subtokens
...
- made code changes, but currently inactive - needs Solr schema change to stored="true"
- minor additional improvements, escaping to allow queries with special chars
- added more accurate URL matching in keyword list
2012-03-15 18:06:53 -04:00
Dick Fickling
09e05961d7
TSK-410: Remove warnings
2012-03-14 17:18:15 -04:00