94 Commits

Author SHA1 Message Date
Jeff Wallace
ab88536b5e Merge https://github.com/sleuthkit/autopsy into recentActivityFixes 2013-10-17 14:24:18 -04:00
Jeff Wallace
e393c31789 Fixed errors during parsing of regripper output. 2013-10-17 14:05:21 -04:00
Jeff Wallace
ba3d35fa09 Updated error checking 2013-10-03 12:23:11 -04:00
Jeff Wallace
f63a3eab7f Added error messages when registry extraction / parsing fails 2013-10-02 15:46:37 -04:00
Brian Carrier
d4840fcf0a Improved artifact viewer and such to make regripper output easier to read in the raw output form. 2013-07-16 14:13:16 -04:00
Brian Carrier
f1aa4441fe Better deal with write failures in RecentActivity. Use more specialized temp/output folders 2013-07-16 11:41:11 -04:00
Brian Carrier
87f68da53c Run regripper full on registry hives and post to blackboard. Removed old rr code in third party since it is not used 2013-07-16 10:50:29 -04:00
Smoss
672e8af76e Made reccomended changes to ExtractUSB and ExtractRegistry.
Signed-off-by: Smoss <Smoss117@gmail.com>
2013-06-26 17:44:31 -04:00
Smoss
c83f4c744c Updated USBExtraction 2013-06-11 19:04:24 -04:00
Smoss
5ea8ed18cd Made changes to ExtractUSB method and class names and behavior. 2013-06-11 15:24:46 -04:00
Sean-M
4f7911fc9e Merge commit
Signed-off-by: Sean-M <Smoss117@gmail.com>
2013-06-11 15:00:13 -04:00
adam-m
565e01a9cf adjust fuzzy query (no logic/result change) 2013-06-10 17:14:13 -04:00
adam-m
fbe2dd76eb Changed image-level ingest to data-source Content-level ingest.
Related changes, such as FileManager API adjustments and fixes in client code.
Simplifications in RecentActivity logic to get files per current data source (no need to use deprecated method)
2013-06-07 18:49:59 -04:00
Sean-M
6e3d951e45 fixed ExtractUSB
Signed-off-by: Sean-M <Smoss117@gmail.com>
2013-06-05 13:41:47 -04:00
Sean-M
2ac6c66309 added usb extraction and changed regression.py.
Signed-off-by: Sean-M <Smoss117@gmail.com>
2013-06-05 11:05:23 -04:00
Brian Carrier
10764b7ea3 resolved merge conflicts 2013-05-30 15:39:03 -04:00
Brian Carrier
90a0acf1bf Updated IngestModule API to be abstract class instead of interface. Started to update docs. 2013-05-24 09:56:28 -04:00
adam-m
62bb213b58 Move ExecUtil class to Core utils and simplify Timeline dependencies 2013-05-21 12:49:53 -04:00
adam-m
fa2bb0c2c9 further improvements (cleanup, speed) in running regripper and pasco 2013-05-21 12:44:52 -04:00
adam-m
c40b7ef986 Rename JavaSystemCaller to ExecUtil. Make thread-safe / non-static 2013-05-20 12:49:29 -04:00
adam-m
9c136f8e6f rename ingest context to pipeline context 2013-02-25 10:48:25 -05:00
adam-m
a15a035565 add ingest context to ingest module process() method - API change.
Adjust all ingest modules.
Update ingest manager to create and pass in context.
2013-02-21 00:16:38 -05:00
adam-m
f2ed498ae5 enable regripper to run on linux, if user has deps installed 2012-12-07 13:08:35 -05:00
Tim McIver
f43d072bcf Updated FileManager API methods to take an Image as argument so that only
files for that image is returned. These changes in support of AUT-613.
2012-11-29 16:37:37 -05:00
Tim McIver
3824f90a0e Refactored ExtractRegistry.getregistryfiles() to use several
FileManager.findFiles calls in order to remove the raw SQL used to retrieve
registry files. Also renamed method to getRegistryFiles().
2012-11-27 17:34:38 -05:00
Tim McIver
e8e9bd3558 Created Services class in Core module and added a member variable of this
type to Case with getter method. Created FileManager class and added member
of this type to Services class with getter method. Added method to
FileManager for obtaining files and refactored some code in RecentActivity
module to use thi new API where applicable. These changes partially satisfy
the requirements of AUT-613.
2012-11-27 11:31:06 -05:00
Devin148
6611b55adc Update copyrights 2012-11-12 13:55:49 -05:00
adam-m
7399139733 Merge branch 'master' of https://github.com/Devin148/autopsy 2012-11-07 16:10:23 -05:00
Devin148
8dee9c9202 Change logging to be more descriptive 2012-11-07 13:54:52 -05:00
Devin148
ee411ac567 Log major errors in recent activity as severe 2012-11-07 09:25:45 -05:00
0xNF
2625fb7c28 Changed flow of module init in RAImageIngestModule
Removed UnsupportedOperationExceptions from submodule complete() methods
2012-10-31 12:59:59 -04:00
Devin148
3c7785d60f Check XML for child nodes before utilizing them 2012-10-22 15:30:33 -04:00
Devin148
ecd0c71a96 Remove JDom dependency 2012-10-22 10:03:44 -04:00
adam-m
a26f446217 better logging in registry when date not parsable 2012-09-24 13:55:35 -04:00
adam-m
d811b4e01a module loader: implemented auto discovery and XML config persistence.
Hide recent activity sub-modules from being auto-loaded.
Add ingest module ivy support in build, add 3rd party reflection module.
2012-09-20 18:32:47 -04:00
adam-m
ecb2ccdc64 Merge branch 'master' of https://github.com/sleuthkit/autopsy 2012-09-18 15:14:29 -04:00
adam-m
44c0464a31 Merge branch 'master' of https://github.com/0xNF/autopsy 2012-09-18 15:14:08 -04:00
adam-m
acebcb1064 Add version and args API to ingest modules 2012-09-18 14:20:25 -04:00
0xNF
0a6643ee7c Fixed random code duplications. 2012-09-18 14:17:00 -04:00
0xNF
51b2b31584 Merge http://www.github.com/0xNF/autopsy
Conflicts:
	RecentActivity/src/org/sleuthkit/autopsy/recentactivity/ExtractRegistry.java
2012-09-18 14:14:53 -04:00
0xNF
245fb13aa1 Marked locations of deprecated constructors. 2012-09-18 13:51:03 -04:00
0xNF
ba0bab1117 Marked locations of deprecated constructors. 2012-09-18 13:37:54 -04:00
adam-m
9b2f582934 Switch remaining logging from java.util.logging.Logger to coreutils.Logger 2012-09-14 18:16:01 -04:00
adam-m
3e3cb3ed69 implement init() in extract registry mod. 2012-08-31 00:12:23 -04:00
adam-m
e4eb4b8e3f Fix order of initializaion of services/manager in modules to ensure a single instance of manager. 2012-08-31 00:05:59 -04:00
adam-m
4d73386d96 Ingest API changes: add IngestModuleInit context to init(), change IngestManagerProxy into IngestServices singleton 2012-08-30 12:47:15 -04:00
adam-m
c78462d6a4 Ingests API changes.
Rename "service" to "module"
2012-08-29 16:46:34 -04:00
Alex Ebadirad
012def9e4e Added info statements when processing files for recent activity Firefox.java, Chrome.java, and ExtractRegistry.java classes.
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-07-11 15:45:21 -07:00
Alex Ebadirad
e65269c856 Minor tweak to add prog_name to recent ms office documents 2012-07-09 10:02:48 -07:00
Alex Ebadirad
d18e3c663a Removal of warnings and modifications of RR plugins for word/word2010
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-07-09 10:00:33 -07:00