Jeff Wallace
ab88536b5e
Merge https://github.com/sleuthkit/autopsy into recentActivityFixes
2013-10-17 14:24:18 -04:00
Jeff Wallace
e393c31789
Fixed errors during parsing of regripper output.
2013-10-17 14:05:21 -04:00
Jeff Wallace
ba3d35fa09
Updated error checking
2013-10-03 12:23:11 -04:00
Jeff Wallace
f63a3eab7f
Added error messages when registry extraction / parsing fails
2013-10-02 15:46:37 -04:00
Brian Carrier
d4840fcf0a
Improved artifact viewer and such to make regripper output easier to read in the raw output form.
2013-07-16 14:13:16 -04:00
Brian Carrier
f1aa4441fe
Better deal with write failures in RecentActivity. Use more specialized temp/output folders
2013-07-16 11:41:11 -04:00
Brian Carrier
87f68da53c
Run regripper full on registry hives and post to blackboard. Removed old rr code in third party since it is not used
2013-07-16 10:50:29 -04:00
Smoss
672e8af76e
Made reccomended changes to ExtractUSB and ExtractRegistry.
...
Signed-off-by: Smoss <Smoss117@gmail.com>
2013-06-26 17:44:31 -04:00
Smoss
c83f4c744c
Updated USBExtraction
2013-06-11 19:04:24 -04:00
Smoss
5ea8ed18cd
Made changes to ExtractUSB method and class names and behavior.
2013-06-11 15:24:46 -04:00
Sean-M
4f7911fc9e
Merge commit
...
Signed-off-by: Sean-M <Smoss117@gmail.com>
2013-06-11 15:00:13 -04:00
adam-m
565e01a9cf
adjust fuzzy query (no logic/result change)
2013-06-10 17:14:13 -04:00
adam-m
fbe2dd76eb
Changed image-level ingest to data-source Content-level ingest.
...
Related changes, such as FileManager API adjustments and fixes in client code.
Simplifications in RecentActivity logic to get files per current data source (no need to use deprecated method)
2013-06-07 18:49:59 -04:00
Sean-M
6e3d951e45
fixed ExtractUSB
...
Signed-off-by: Sean-M <Smoss117@gmail.com>
2013-06-05 13:41:47 -04:00
Sean-M
2ac6c66309
added usb extraction and changed regression.py.
...
Signed-off-by: Sean-M <Smoss117@gmail.com>
2013-06-05 11:05:23 -04:00
Brian Carrier
10764b7ea3
resolved merge conflicts
2013-05-30 15:39:03 -04:00
Brian Carrier
90a0acf1bf
Updated IngestModule API to be abstract class instead of interface. Started to update docs.
2013-05-24 09:56:28 -04:00
adam-m
62bb213b58
Move ExecUtil class to Core utils and simplify Timeline dependencies
2013-05-21 12:49:53 -04:00
adam-m
fa2bb0c2c9
further improvements (cleanup, speed) in running regripper and pasco
2013-05-21 12:44:52 -04:00
adam-m
c40b7ef986
Rename JavaSystemCaller to ExecUtil. Make thread-safe / non-static
2013-05-20 12:49:29 -04:00
adam-m
9c136f8e6f
rename ingest context to pipeline context
2013-02-25 10:48:25 -05:00
adam-m
a15a035565
add ingest context to ingest module process() method - API change.
...
Adjust all ingest modules.
Update ingest manager to create and pass in context.
2013-02-21 00:16:38 -05:00
adam-m
f2ed498ae5
enable regripper to run on linux, if user has deps installed
2012-12-07 13:08:35 -05:00
Tim McIver
f43d072bcf
Updated FileManager API methods to take an Image as argument so that only
...
files for that image is returned. These changes in support of AUT-613.
2012-11-29 16:37:37 -05:00
Tim McIver
3824f90a0e
Refactored ExtractRegistry.getregistryfiles() to use several
...
FileManager.findFiles calls in order to remove the raw SQL used to retrieve
registry files. Also renamed method to getRegistryFiles().
2012-11-27 17:34:38 -05:00
Tim McIver
e8e9bd3558
Created Services class in Core module and added a member variable of this
...
type to Case with getter method. Created FileManager class and added member
of this type to Services class with getter method. Added method to
FileManager for obtaining files and refactored some code in RecentActivity
module to use thi new API where applicable. These changes partially satisfy
the requirements of AUT-613.
2012-11-27 11:31:06 -05:00
Devin148
6611b55adc
Update copyrights
2012-11-12 13:55:49 -05:00
adam-m
7399139733
Merge branch 'master' of https://github.com/Devin148/autopsy
2012-11-07 16:10:23 -05:00
Devin148
8dee9c9202
Change logging to be more descriptive
2012-11-07 13:54:52 -05:00
Devin148
ee411ac567
Log major errors in recent activity as severe
2012-11-07 09:25:45 -05:00
0xNF
2625fb7c28
Changed flow of module init in RAImageIngestModule
...
Removed UnsupportedOperationExceptions from submodule complete() methods
2012-10-31 12:59:59 -04:00
Devin148
3c7785d60f
Check XML for child nodes before utilizing them
2012-10-22 15:30:33 -04:00
Devin148
ecd0c71a96
Remove JDom dependency
2012-10-22 10:03:44 -04:00
adam-m
a26f446217
better logging in registry when date not parsable
2012-09-24 13:55:35 -04:00
adam-m
d811b4e01a
module loader: implemented auto discovery and XML config persistence.
...
Hide recent activity sub-modules from being auto-loaded.
Add ingest module ivy support in build, add 3rd party reflection module.
2012-09-20 18:32:47 -04:00
adam-m
ecb2ccdc64
Merge branch 'master' of https://github.com/sleuthkit/autopsy
2012-09-18 15:14:29 -04:00
adam-m
44c0464a31
Merge branch 'master' of https://github.com/0xNF/autopsy
2012-09-18 15:14:08 -04:00
adam-m
acebcb1064
Add version and args API to ingest modules
2012-09-18 14:20:25 -04:00
0xNF
0a6643ee7c
Fixed random code duplications.
2012-09-18 14:17:00 -04:00
0xNF
51b2b31584
Merge http://www.github.com/0xNF/autopsy
...
Conflicts:
RecentActivity/src/org/sleuthkit/autopsy/recentactivity/ExtractRegistry.java
2012-09-18 14:14:53 -04:00
0xNF
245fb13aa1
Marked locations of deprecated constructors.
2012-09-18 13:51:03 -04:00
0xNF
ba0bab1117
Marked locations of deprecated constructors.
2012-09-18 13:37:54 -04:00
adam-m
9b2f582934
Switch remaining logging from java.util.logging.Logger to coreutils.Logger
2012-09-14 18:16:01 -04:00
adam-m
3e3cb3ed69
implement init() in extract registry mod.
2012-08-31 00:12:23 -04:00
adam-m
e4eb4b8e3f
Fix order of initializaion of services/manager in modules to ensure a single instance of manager.
2012-08-31 00:05:59 -04:00
adam-m
4d73386d96
Ingest API changes: add IngestModuleInit context to init(), change IngestManagerProxy into IngestServices singleton
2012-08-30 12:47:15 -04:00
adam-m
c78462d6a4
Ingests API changes.
...
Rename "service" to "module"
2012-08-29 16:46:34 -04:00
Alex Ebadirad
012def9e4e
Added info statements when processing files for recent activity Firefox.java, Chrome.java, and ExtractRegistry.java classes.
...
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-07-11 15:45:21 -07:00
Alex Ebadirad
e65269c856
Minor tweak to add prog_name to recent ms office documents
2012-07-09 10:02:48 -07:00
Alex Ebadirad
d18e3c663a
Removal of warnings and modifications of RR plugins for word/word2010
...
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-07-09 10:00:33 -07:00