1280 Commits

Author SHA1 Message Date
apriestman
16727d6f02 Check for null files 2021-06-07 11:29:54 -04:00
Richard Cordovano
e906d53c87
Merge pull request #7014 from APriestman/7619_useParentId
7619 Try the most likely object IDs for zone file download before searchin…
2021-06-04 01:14:56 -04:00
apriestman
96f6b66d1e Try the most likely object IDs for zone file download before searching by name.
Use parent ID when available for findFiles().
2021-06-03 08:37:52 -04:00
Greg DiCristofaro
7f69ee0b62 using score constants 2021-06-02 13:45:50 -04:00
Richard Cordovano
5099121c93 Merge alpha release 4.19.0 branch into develop 2021-06-02 11:45:52 -04:00
Richard Cordovano
814f8b09d4
Merge pull request #7008 from markmckinnon/7649-ArrayIndexOutOfBoundsException-in-Recent-Activity
7649-ArrayIndexOutOfBoundsException-in-Recent-Activity
2021-06-01 14:50:37 -04:00
Mark McKinnon
ae0d95b089 Update ExtractRegistry.java
Check length of Tokens after split, if they are not greater than 2 then skip trying to parse the token.
2021-05-30 10:12:21 -04:00
Greg DiCristofaro
718738832e Merge branch 'develop' of github.com:sleuthkit/autopsy into 7592-analysisResultsScore 2021-05-25 15:50:18 -04:00
apriestman
04d295f65a Use allocated versions of cache files when available 2021-05-25 10:43:35 -04:00
Richard Cordovano
ad439b6bd7
Merge pull request #6958 from gdicristofaro/7317-dataArtifacts
7317 data artifacts
2021-05-20 16:37:51 -04:00
Greg DiCristofaro
21c5f02fe8 Merge branch 'develop' of github.com:sleuthkit/autopsy into 7592-analysisResultsScore 2021-05-20 12:43:29 -04:00
Mark McKinnon
2f5790c2fe Update ExtractRegistry.java
Install date from regripper is UTC time, when it is parsed it does not recognize a timezone so it defaults to current timezone of pc, or that appears to happen.  When  UTC timezone added to parse it stores the epoch time correctly.
2021-05-15 22:19:41 -04:00
Richard Cordovano
345f4bddcc
Merge pull request #6968 from sleuthkit/release-4.19.0
Release 4.19.0
2021-05-14 09:45:44 -04:00
Greg DiCristofaro
83e0bcb1e8 analysis result scores 2021-05-13 15:20:49 -04:00
Greg DiCristofaro
b9ab67c689 merge from develop 2021-05-13 07:59:32 -04:00
Greg DiCristofaro
d58eff130a newDataArtifact changes 2021-05-11 13:41:38 -04:00
Greg DiCristofaro
c9dd573e61 fixes 2021-05-06 15:20:57 -04:00
Kelly Kelly
6b39909199 Added method header 2021-05-06 14:22:13 -04:00
Kelly Kelly
a46bbb81a3 Fixed RA NPE 2021-05-06 14:19:26 -04:00
Greg DiCristofaro
6cad9fe539 extract fixes 2021-05-06 12:49:00 -04:00
Greg DiCristofaro
acb7ab0383 merge 7576 2021-05-06 12:41:08 -04:00
Greg DiCristofaro
dbc0fba5bc fix 2021-05-04 12:30:51 -04:00
Greg DiCristofaro
c41f2a2255 use OsAccount id 2021-05-04 12:17:34 -04:00
Greg DiCristofaro
fe30187808 Merge branch 'develop' of github.com:sleuthkit/autopsy into 7317-dataArtifacts 2021-05-04 10:15:58 -04:00
Richard Cordovano
e6c87a1bea
Merge pull request #6945 from markmckinnon/7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process-new
7528 error in processing registry file possibly still open in another process new
2021-04-30 11:36:44 -04:00
Richard Cordovano
a27d0d8c27
Merge pull request #6942 from markmckinnon/7450-Missing-database-table-error-during-prefetch-file-parsing
7450-Missing-database-table-error-during-prefetch-file-parsing
2021-04-29 12:40:02 -04:00
Mark McKinnon
243ffb8745 Update ExtractRegistry.java
Add update of domain for user
2021-04-29 09:43:08 -04:00
Greg DiCristofaro
1d2b460b8c removing newArtifact and newBlackboardArtifact from autopsy 2021-04-28 11:16:32 -04:00
Mark McKinnon
173495627e Remove ParseDomainHost
Remove the parse registry hive.
Remove Parse Domain method
2021-04-28 10:11:10 -04:00
Mark McKinnon
52ca63e4e0 Update ExtractPrefetch.java
Change error logging to warning
Add file name that warning is occurring on
Add detail message to warning
2021-04-28 08:54:05 -04:00
Richard Cordovano
ad82d35aca
Merge pull request #6935 from sleuthkit/release-4.19.0
Merge Release 4.19.0 branch into develop
2021-04-22 11:59:39 -04:00
Mark McKinnon
a4f95355ac Update Chromium.java
Rename method per comment
2021-04-21 15:05:04 -04:00
Mark McKinnon
9cf6046e3e Update Chromium.java
Update comment
2021-04-21 10:17:30 -04:00
Mark McKinnon
8b5263e18c Update Chromium.java
Add comments if data is encrypted
Add Encrypted detection artifact if detected.
2021-04-20 16:02:01 -04:00
Richard Cordovano
740390a102
Merge pull request #6929 from markmckinnon/7537-IllegalArgumentException-in-Chromium-RA-module
7537-IllegalArgumentException-in-Chromium-RA-module
2021-04-20 11:57:27 -04:00
Mark McKinnon
11471f57af Update ChromeCacheExtractor.java
Change check
2021-04-20 10:36:03 -04:00
Mark McKinnon
ff65739dbb Update ChromeCacheExtractor.java
Check for buffer capacity of zero (0) and return if it is, nothing to look at.
2021-04-19 15:25:59 -04:00
Mark McKinnon
63eb4647cc Update Chromium.java
Add check for string encrypted.
2021-04-19 13:38:43 -04:00
Mark McKinnon
7a80c2fd65 Update ChromeCacheExtractor.java
Check if a zero byte file and do not process it, if it is.
2021-04-16 15:10:45 -04:00
Richard Cordovano
700df92ae6
Merge pull request #6923 from markmckinnon/7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
2021-04-15 14:46:40 -04:00
Mark McKinnon
1f8a48055f Update ExtractRegistry.java
Add domain to beginning of the file name to make it unique to avoid other processes not being able to write to the file.
2021-04-15 10:42:44 -04:00
Greg DiCristofaro
dcb42f385c Merge branch 'develop' of github.com:sleuthkit/autopsy into 7434-netbeansBundles 2021-04-14 21:05:25 -04:00
Richard Cordovano
c2c0253e41
Merge pull request #6886 from kellykelly3/7480-fix-timeline-filters
7480 - Changed RA to use TSK_DELETED_PROG artifact for unistalled programs
2021-04-14 16:28:36 -04:00
Richard Cordovano
6fb8069cbb
Merge pull request #6915 from markmckinnon/7525-Searching-For-registry-key-returns-error-if-no-found
7525-Searching-For-registry-key-returns-error-if-no-found
2021-04-14 14:32:24 -04:00
Richard Cordovano
a2c74a49ad
Merge pull request #6913 from markmckinnon/7524-check-to-see-if-prefetch-thirdparty-database-exists
7524-check-to-see-if-prefetch-thirdparty-database-exists
2021-04-14 14:16:40 -04:00
Richard Cordovano
9062afa616
Merge pull request #6912 from markmckinnon/7523-Escape-prefetch-file-name-when-prefetch-file-is-an-alternate-data-stream
7523-Escape-prefetch-file-name-when-prefetch-file-is-an-alternate-data-stream
2021-04-14 13:15:04 -04:00
Mark McKinnon
216985fe4e Update ExtractRegistry.java
Add check for zero length file and ignore it if it is.
2021-04-13 20:59:31 -04:00
Mark McKinnon
30edb0a53d Handle key not found exception and realm scope
Handle key not found exception
Fix check for realm scope when creating user.
2021-04-13 16:42:15 -04:00
Greg DiCristofaro
12a03ff4cc about window fix 2021-04-13 14:31:37 -04:00
Kelly Kelly
9866a75d75 Merge branch 'develop' into 7480-fix-timeline-filters 2021-04-13 14:17:53 -04:00