3381 Commits

Author SHA1 Message Date
adam-m
3caf999da9 use a save method of getting count of files to be ingested, instead of deprecated iterating over the result set 2013-02-01 12:31:46 -05:00
adam-m
4a762b9bd2 initial 7zip ingest module skeleton with libs 2013-01-31 20:58:26 -05:00
adam-m
f4a33db0eb adjust ingest scheduler to only consider fs files when checking whether special ntfs files should be enqueued 2013-01-31 20:39:58 -05:00
Tim McIver
adada499f0 Modified code to detect if files have been added to the database since the
last time it ran and to regenerate timeline data when timeline is (re)started.
Note that addition of files to the database is noticed by timeline only upon
a restart (of timeline); timeline does not notice this while the timeline
window is open.
2013-01-31 17:43:42 -05:00
adam-m
40cb0fdcb2 update news and readme 2013-01-31 16:46:39 -05:00
adam-m
5b21911756 hex/string viewer handle case when file offset could not be read, which can happen e.g. for deleted content 2013-01-31 16:16:12 -05:00
Tim McIver
5810f0a36c Moved flushing/closing of BufferedWriter used in makeBodyFile() to outside
of the parsing loop. Added line to close Scanner in parseMacTime(). Removed
unneeded print statement.
2013-01-31 15:50:10 -05:00
adam-m
2cadfadfa9 add distinct icons for archive files 2013-01-31 15:20:43 -05:00
Tim McIver
973878493f Removed unneeded print statements. 2013-01-31 15:17:17 -05:00
Tim McIver
a1831c6706 Refactor of method Simile2.makeBodyFile(). 2013-01-31 15:06:21 -05:00
adam-m
9f63e1ee36 show file node with derived children in dir tree 2013-01-31 15:03:56 -05:00
adam-m
0760f598ec support for opening parents of derived files in datamodel / nodes 2013-01-31 13:25:06 -05:00
Tim McIver
1d1ded5d62 Modifications to implement behavior to alert user that timeline has gone
out of date due to image being added. Currently this works when timeline
window is open - need to handle case when an image has been added when
timeline window is closed. Also added another optimization where mactime
file is not reparsed if the in-memory data is still valid.
2013-01-31 11:24:10 -05:00
adam-m
6c28e7a2e3 file search: add support for derived files and remove deprecated query replacing with findFilesWhere 2013-01-31 10:54:11 -05:00
adam-m
de1e0421aa fix use findFilesWHere instead of runQuery in RecentFileFilterChildren 2013-01-31 10:51:06 -05:00
adam-m
3373d128ed add abstract node API for getting info about underlying content children (facilitates lazy loading) 2013-01-31 10:21:54 -05:00
adam-m
e8ceb9ff7d update file manager API for derived files 2013-01-31 10:21:18 -05:00
Brian Carrier
ed7184d5e0 Merge branch 'master' of https://github.com/sleuthkit/autopsy 2013-01-30 18:21:12 -05:00
Brian Carrier
184a46565c Fixed attribute use of USER_NAME instead of USERNAME per TSK change 2013-01-30 18:20:53 -05:00
adam-m
4d8a4d1651 Merge branch 'master' into zipmodule 2013-01-30 10:22:01 -05:00
adam-m
57ed2a8fe7 Clear pending notifications when case is closed 2013-01-30 10:21:36 -05:00
adam-m
d24ee5dc12 Merge branch 'master' into zipmodule 2013-01-29 22:14:44 -05:00
adam-m
ef0b5a3a58 Merge branch 'timeline' of https://github.com/sleuthkit/autopsy into timeline 2013-01-29 22:14:22 -05:00
adam-m
927cec9e60 Merge branch 'master' into timeline 2013-01-29 22:13:47 -05:00
adam-m
768642b7fe update TSK_USER_NAME artifact type 2013-01-29 22:13:18 -05:00
Tim McIver
30e0b98e4f Removed two previously created Timeline TopComponents that were not being
used.
2013-01-29 15:27:50 -05:00
Tim McIver
cfe306fb05 Changed timeline progress bar text. Removed unneeded println statement. 2013-01-29 15:17:00 -05:00
adam-m
7c1a2ad4c8 initial datamodel node support for derived file.
Add comments what to change after sleuthkit datamodel refactor.
2013-01-29 14:53:58 -05:00
adam-m
20ea5439e9 change due to datamodel change 2013-01-29 14:53:19 -05:00
adam-m
bcb1d1ac86 file manager API to create derived file 2013-01-29 14:52:32 -05:00
Brian Carrier
5887f2fbda Made ingest inbox messages more consistent 2013-01-29 14:49:02 -05:00
Brian Carrier
6e0c80eec2 Changed flow of hash module 2013-01-29 14:47:51 -05:00
Tim McIver
bd282dc220 Some code cleanup. 2013-01-29 14:11:36 -05:00
Tim McIver
bbff052645 Added try...finally around creation of progress bar to ensure that it is
stopped in the event of a non-checked exception.
2013-01-29 13:10:24 -05:00
Tim McIver
db666abd50 Added indeterminate progress bar to timeline module. 2013-01-29 10:58:02 -05:00
adam-m
9529ea5bca Merge branch 'zipmodule' of https://github.com/sleuthkit/autopsy into zipmodule 2013-01-28 17:48:05 -05:00
adam-m
d84df486ef fix display of virt dir node dir type 2013-01-28 17:46:58 -05:00
Tim McIver
a7980d58a4 Added code to check for the existence of a pre-computed mactime output file
and to use that instead of running mactime.exe again.
2013-01-28 17:37:50 -05:00
Tim McIver
73b9a77307 Changed Simile2 to use previously extracted DataResultPanel and
DataContentPanel.
2013-01-28 14:19:13 -05:00
Tim McIver
c67e2754b7 Created a couple of timeline TopComponents. These approaches do not yet work. 2013-01-28 13:18:59 -05:00
adam-m
f66f65f2c1 Merge branch 'master' into timeline 2013-01-27 10:34:43 -05:00
adam-m
07dc320056 Merge branch 'master' into zipmodule 2013-01-27 10:33:54 -05:00
adam-m
7968704896 check if can't get pid when getting memory 2013-01-27 09:52:05 -05:00
adam-m
ed67432b20 add method to query pid and virt mem used with sigar 2013-01-27 09:43:55 -05:00
adam-m
0723394270 Merge branch 'master' into zipmodule 2013-01-27 09:08:14 -05:00
adam-m
58b84dde91 Merge branch 'master' into timeline 2013-01-27 08:55:57 -05:00
adam-m
981c4a67fd fix warn 2013-01-27 01:06:06 -05:00
adam-m
d3cf4608d1 Add specific build files for corelibs for different OS 2013-01-27 00:53:56 -05:00
adam-m
a4a1c305aa Merge branch 'master' into zipmodule 2013-01-26 16:06:02 -05:00
adam-m
6c0c3554aa fix use correct version API 2013-01-26 16:05:38 -05:00