256 Commits

Author SHA1 Message Date
Mark McKinnon
4adfdd0ed3 Update ExtractRegistry.java
Update text to ignore for Trustrecords
2020-05-07 11:10:40 -04:00
Mark McKinnon
24cebd6673 Update ExtractRegistry.java
Add condition to check for based on new version of plugin.
2020-05-06 20:31:37 -04:00
Richard Cordovano
5e54b8fafc
Merge pull request #5769 from markmckinnon/6231-Add-TSK_COMMENT-attributes-to-TSK_RECENT_OBJECT-artifacts
6231-Add-TSK_COMMENT-attributes-to-TSK_RECENT_OBJECT-artifacts
2020-04-02 19:24:18 -04:00
Mark McKinnon
8db78c9cec Added comments and TSK_COMMENT attribute
Commented code in a few spots, Added TSK_COMMENT attribute for all the recently added MRU's
2020-04-02 10:41:57 -04:00
Richard Cordovano
8e052b0865
Merge pull request #5712 from dannysmyda/6081-Use-Helper-For-Artifact-Creation
6081 use helper for artifact creation
2020-04-01 16:10:59 -04:00
Mark McKinnon
1199dedd08 Update ExtractRegistry.java
Add check for has no values.
2020-03-31 10:27:36 -04:00
Mark McKinnon
5ba9e9958b Update ExtractRegistry.java
Change from 2 to 1 for end of substring
2020-03-27 13:42:32 -04:00
U-BASIS\dsmyda
44408269f6 Updated recent activity parsers to use web helpers 2020-03-06 17:47:25 -05:00
William Schaefer
0bc92dd080 Add back commits that were accidently removed in recent revert of other unwanted code 2020-03-02 15:50:26 -05:00
Richard Cordovano
df3b7f559a
Revert "6074-Standardize-file-paths-in-recent-documents-to-match-format-that-is-stored-in-autopsy-database" 2020-02-28 12:45:16 -05:00
Mark McKinnon
ff0be451bf Update ExtractRegistry.java
Remove null byte in filename before trying to normalize otherwise it will cause an exception
2020-02-25 21:49:27 -05:00
Mark McKinnon
a884fbb694 Normalize file paths before searching for them
Normalize file paths before searching for them. Check files exists and if they do create a associated artifact.
2020-02-25 14:15:00 -05:00
Mark McKinnon
ef9c2126a1 Merge remote-tracking branch 'upstream/develop' into 5989-add-additional-artifacts-to-the-context-content-viewer 2020-02-21 17:23:21 -05:00
Mark McKinnon
492382ea74 Normalize file path names.
normalize path names with unix/linux format instead of windows in Recent Documents by LNK and Recent Doc MRU's
2020-02-21 11:22:20 -05:00
Mark McKinnon
424c7df35d Merge remote-tracking branch 'upstream/develop' into 5989-add-additional-artifacts-to-the-context-content-viewer 2020-02-20 15:41:42 -05:00
Mark McKinnon
b2001eb84b Intial changes for Context and Associated Objects
RecentDoc Link files and Adobe MRU  associated objects and context viewer support for recent docs.
2020-02-20 15:40:20 -05:00
Richard Cordovano
e318a5e95c
Merge pull request #5651 from markmckinnon/5343-Create-artifacts-for-files-which-were-Recently-used-by-other-applications-of-interest
5343 create artifacts for files which were recently used by other applications of interest
2020-02-18 15:34:55 -05:00
Mark McKinnon
d7e7dfe511 Update ExtractRegistry.java
Address comments for RegFile and check for empty artifacts
2020-02-18 12:44:21 -05:00
Mark McKinnon
5f822c767b Update ExtractRegistry.java
Update for codacy, change error message, remove try and if blocks that were not needed.
2020-02-18 11:27:34 -05:00
Mark McKinnon
0cae9216bf Update ExtractRegistry.java
Remove line and bracket
2020-02-18 10:02:45 -05:00
Richard Cordovano
b9a9f36fa9
Merge pull request #5644 from markmckinnon/5342-Create-artifacts-for-recently-used-Windows-Media-Player-files-from-regripper-output
5342-Create-artifacts-for-recently-used-Windows-Media-Player-files-from-regripper-output
2020-02-14 16:15:41 -05:00
Mark McKinnon
88e15e7780 Update ExtractRegistry and rollback autopsyrecentdocs.pl
Added Applets, mmc, winrar and officedocs2010 to recent documents.  Rolled back autopsyrecentdocs.pl to original version
2020-02-13 20:15:14 -05:00
Mark McKinnon
55f5ee2c78 Update ExtractRegistry.java
Address review comment
2020-02-13 10:21:01 -05:00
Mark McKinnon
475ef2c44e Update ExtractRegistry.java
Added trustrecords and arcHistory MRU records
2020-02-12 21:38:25 -05:00
Mark McKinnon
e91b165a05 Merge branch '5342-Create-artifacts-for-recently-used-Windows-Media-Player-files-from-regripper-output' into 5343-Create-artifacts-for-files-which-were-Recently-used-by-other-applications-of-interest 2020-02-11 13:28:38 -05:00
Mark McKinnon
54f70e91fb Added Autopsy Recent Docs Regripper back in
Added Autopsy Recent Docs Regripper back.
2020-02-11 13:28:28 -05:00
Mark McKinnon
9e56b863c9 Update ExtractRegistry.java
Add mpmru parsing, change where artifacts are added in adobemru so it does not get checked every time.
2020-02-11 09:32:37 -05:00
Richard Cordovano
8ba6f96c10
Merge pull request #5640 from markmckinnon/5341-create-artifacts-for-recently-used-adobe-acrobat-files-from-regripper-output
5341-create-artifacts-for-recently-used-adobe-acrobat-files-from-regripper-output
2020-02-11 09:20:31 -05:00
Mark McKinnon
b51c2b50a1 Update ExtractRegistry.java
Remove unused import
2020-02-10 17:52:25 -05:00
Mark McKinnon
2e560a88c6 Update ExtractRegistry.java
Change date from YYYY to yyyy, and add locale of US for codacy
2020-02-10 17:46:45 -05:00
Mark McKinnon
6d68578081 Update ExtractRegistry.java
More codcy fixes
2020-02-09 21:26:35 -05:00
Mark McKinnon
76d03c4d92 Update ExtractRegistry.java
Breakup createRecentlyUsedArtifact becuse of cyclomatic complexity and other codacy issues.
2020-02-09 21:01:35 -05:00
Mark McKinnon
40a51c7426 Update ExtractRegistry.java
removed un used import.
2020-02-07 15:55:47 -05:00
Mark McKinnon
be1a4b9c9d Update ExtractRegistry.java
Validation on records as date may not always be there, also remove double quotes.
2020-02-07 15:53:12 -05:00
Mark McKinnon
706d05eb10 Update ExtractRegistry.java
parse csv record that have double quotes around the file name
2020-02-07 08:41:00 -05:00
Mark McKinnon
690e121a0a Update ExtractRegistry.java
Add adobe recently used artifacts from regripper report.
2020-02-06 17:39:01 -05:00
Mark McKinnon
d387b5e109 Update ExtractRegistry.java
Added missing include flag and path for modules
2020-02-06 10:31:38 -05:00
Richard Cordovano
379cfb9401
Merge pull request #5258 from kellykelly3/1360-cleanup-ExtractRegistry
1360 - Bulk postArtifacts calls added to ExtractRegistry
2019-09-25 15:54:46 -04:00
Kelly Kelly
1de1b9f5d8 fixed exceptions 2019-09-25 14:43:50 -04:00
Kelly Kelly
38fe2ed783 Changed log levels back to SEVERE 2019-09-24 13:51:49 -04:00
Kelly Kelly
0f6527fcb4 Added bulk postArtifact calls 2019-09-24 13:40:37 -04:00
Kelly Kelly
5e63db5db2 Addressed exceptions in ExtractRegistry 2019-09-24 08:46:13 -04:00
Kelly Kelly
2392abcdfe merged in release and fixed codacy issues 2019-09-17 11:28:00 -04:00
Kelly Kelly
1b4a70bdec Fixed codacy issues 2019-09-12 11:26:20 -04:00
Kelly Kelly
95ea5adb0a fixed merge conflict 2019-09-10 15:34:24 -04:00
Kelly Kelly
37327f49c3 Modified code to add shellbag attributes in one call 2019-09-09 12:56:48 -04:00
Kelly Kelly
0a18e51a92 Added support to parseshell bags to ExtractRegistry 2019-09-06 16:01:04 -04:00
Kelly Kelly
22d47485c9 Changed TSK_FLAGS to TSK_FLAG 2019-09-04 10:35:45 -04:00
Kelly Kelly
c0affed073 Added the account user groups 2019-09-03 15:14:53 -04:00
Kelly Kelly
6beb640beb Removed double postArtifact calls 2019-08-28 14:38:49 -04:00