127 Commits

Author SHA1 Message Date
Dick Fickling
265569b175 Add getStringTime() to ContentUtils class 2012-06-07 15:03:34 -04:00
Dick Fickling
b985d61457 Add hash to data result
do not calculate hash if value already stored in db
2012-06-01 10:36:28 -04:00
Dick Fickling
2bc25b7e4a Make test script more granular (each artifact type)
Hide LayoutFiles from tree
2012-06-01 08:47:23 -04:00
adam-m
aa91ca7133 Use join queries for hashset and keyword hits to adapt to using SET_NAME attributes in both 2012-05-31 22:49:52 -04:00
adam-m
84fc46c780 change deprecated attrs to TSK_SET_NAME 2012-05-31 21:58:53 -04:00
Dick Fickling
89dec97eca Regression test fix
remove time zone visitors
add (currently disabled) restriction on Dir tree to hide unalloc files
2012-05-31 10:53:37 -04:00
adam-m
fc16cbf14f Keyword search ingest changes for unalloc content 2012-05-30 11:00:40 -04:00
Dick Fickling
c105b68303 Make node hierarchy match DataModel hierarchy (classes are stubs for now) 2012-05-29 17:19:35 -04:00
Dick Fickling
ff4f10dd92 Fix ingest 2012-05-29 14:37:47 -04:00
Dick Fickling
dccbfb97cc Add LayoutFile, changes for new DataModel structure 2012-05-29 13:01:40 -04:00
Dick Fickling
b228a01262 additional Autopsy support for LayoutContent 2012-05-24 15:19:37 -04:00
Dick Fickling
21f32a5b66 Add support for LayoutContent to Autopsy 2012-05-24 15:18:36 -04:00
Dick Fickling
4b69bb59e0 Autopsy support for recent Sleuthkit timezone changes 2012-05-24 15:11:18 -04:00
Dick Fickling
5ec3d87c57 Fill attribute types the right way. 2012-05-22 15:05:34 -04:00
Dick Fickling
0d5ebc9f98 TSK-483: Show path in results tables
Currently showing full path just for keyword hits and hash hits, because
for most other artifacts the location of the original file isn't very
useful.
2012-05-22 09:19:08 -04:00
Dick Fickling
b6a2f3da7a TSK-480: make new lists triaged by default
TSK-489: Volume sectors are off by 1
2012-05-21 14:28:23 -04:00
adam-m
4de3ae81f2 Keyword search: use stringstreamer with no preserve at bug boundary option 2012-05-18 14:16:06 -04:00
adam-m
fee9f9d0b1 Keyword search large strings: improvements in navigation, added support for chunk hit preview in dir tree (still needs optimizations) 2012-05-15 21:16:59 -04:00
adam-m
b897ac4f42 Merge branch 'master' into new-features-20120503
Conflicts:
	KeywordSearch/src/org/sleuthkit/autopsy/keywordsearch/KeywordSearchIngestService.java
2012-05-15 10:37:26 -04:00
adam-m
c3a2f3a13c Preliminary version of large files string extraction support - no full hit navitation yet.
Also, some refactoring and cleanup of old keyword search code.
2012-05-14 17:37:27 -04:00
Dick Fickling
ea834f11a8 Separate hashset hits in directory tree, various fixes 2012-05-11 13:38:32 -04:00
Dick Fickling
930eaf06c7 TSK-487: Count for keyword list hits should be inclusive of all keywords
TSK-488: Extract shoudl default to case folder
2012-05-10 17:43:06 -04:00
adam-m
2dcc8121a0 -process files with mail extension normally with tika first
- fscontentstringstream tweak
2012-05-01 23:08:35 -04:00
adam-m
b7806a42ea fs content string stream minor correction 2012-05-01 17:29:32 -04:00
adam-m
b55d9ad301 Set stream.contentType field in index request to Solr, if content type has been set for the stream - useful for string extraction and help by pass tika.
String stream: if eof encountered, handle case when temp buffer has some strings.
2012-05-01 16:15:51 -04:00
adam-m
ac4cc7c624 better variable names, fix typo in ascii test, use UTF8 charset in stream, move string stream class 2012-05-01 13:43:38 -04:00
Dick Fickling
a6bf554a2e Limit Content Node creation to 10000 (will pop dialog to notify user) 2012-04-27 09:39:22 -04:00
adam-m
ab93a84ae5 Move class to core utils 2012-04-25 10:03:15 -04:00
adam-m
f0db778dfd Keyword search string extraction: use FsContentStringStream to convert to string on the fly using a fixed small buffer 2012-04-20 23:41:39 -04:00
adam-m
3a4d20d9af improve string extraction to act like strings command 2012-04-20 23:36:34 -04:00
Dick Fickling
33b867083b Log error messages at Level.WARNING. 2012-04-19 13:10:10 -04:00
Dick Fickling
e67f33f73b suppress build warnings 2012-04-19 10:17:59 -04:00
adam-m
378e083554 Node: use date format that's better for sorting, add seconds, reuse object 2012-04-13 11:24:51 -04:00
Dick Fickling
6b5a3bd7ae undo date/time changes for now 2012-04-12 14:49:04 -04:00
Dick Fickling
917691a81c use long rather than string to store epoch time 2012-04-12 14:26:00 -04:00
Dick Fickling
f6770da275 increase max artifacts for history/cookies 2012-04-12 10:27:15 -04:00
Dick Fickling
f960c9dc74 misc gui String changes 2012-04-10 14:04:17 -04:00
Dick Fickling
a41092173a Display USB devices in tree 2012-04-09 13:00:07 -04:00
Dick Fickling
944117bcdf Refresh tree when service complete event is fired 2012-04-06 09:34:20 -04:00
Dick Fickling
abc449f8bc Add support for 'path id' attribute 2012-04-06 09:33:49 -04:00
adam-m
b47208c3fa Remove duplicate class, identical exists in sleuthkit.datamodel 2012-04-04 09:35:32 -04:00
adam-m
79aa163ecc TSK-389 Change file read() API
- adapt to API change, optimize/reuse buffer when possible
2012-04-03 17:46:42 -04:00
Dick Fickling
5c85599c08 TSK-367: Refresh only specific nodes in Directory Tree 2012-03-30 12:55:56 -04:00
Dick Fickling
530da635dc Add right-click action to File and Directory nodes to open in parent dir 2012-03-30 12:55:07 -04:00
Dick Fickling
092d011727 new icons for directory tree 2012-03-27 17:51:45 -04:00
Dick Fickling
bd9ea895cb Hash fixes and further UI improvements 2012-03-27 12:36:07 -04:00
Dick Fickling
04c637311d icon changes 2012-03-27 10:33:09 -04:00
Dick Fickling
a703e5d3dd Icons and minor gui changes 2012-03-26 17:07:01 -04:00
Dick Fickling
30f3ccbd98 Separate Hashset hits from rest of extracted content 2012-03-26 12:41:50 -04:00
Dick Fickling
4266a8d19b Skip atime in recent files filter 2012-03-23 11:26:52 -04:00