503 Commits

Author SHA1 Message Date
adam-m
565e01a9cf adjust fuzzy query (no logic/result change) 2013-06-10 17:14:13 -04:00
adam-m
fbe2dd76eb Changed image-level ingest to data-source Content-level ingest.
Related changes, such as FileManager API adjustments and fixes in client code.
Simplifications in RecentActivity logic to get files per current data source (no need to use deprecated method)
2013-06-07 18:49:59 -04:00
Brian Carrier
c8f4bf4bee Merge branch 'master' of github.com:sleuthkit/autopsy 2013-06-06 10:54:59 -04:00
Brian Carrier
b29a2b5c88 Cleaned up Doxygen docs. Removed getDefault() from image modules 2013-06-06 10:54:11 -04:00
Sean-M
6e3d951e45 fixed ExtractUSB
Signed-off-by: Sean-M <Smoss117@gmail.com>
2013-06-05 13:41:47 -04:00
U-BASIS\smoss
89c30f9cf5 Merge https://www.github.com/sleuthkit/autopsy 2013-06-05 12:00:54 -04:00
adam-m
5eaa372122 remove excessive logging from URL analyzer 2013-06-05 11:41:13 -04:00
Sean-M
2ac6c66309 added usb extraction and changed regression.py.
Signed-off-by: Sean-M <Smoss117@gmail.com>
2013-06-05 11:05:23 -04:00
Brian Carrier
10764b7ea3 resolved merge conflicts 2013-05-30 15:39:03 -04:00
Brian Carrier
90a0acf1bf Updated IngestModule API to be abstract class instead of interface. Started to update docs. 2013-05-24 09:56:28 -04:00
adam-m
074178fb8e Merge branch 'master' into local-files 2013-05-23 16:24:37 -04:00
adam-m
62bb213b58 Move ExecUtil class to Core utils and simplify Timeline dependencies 2013-05-21 12:49:53 -04:00
adam-m
fa2bb0c2c9 further improvements (cleanup, speed) in running regripper and pasco 2013-05-21 12:44:52 -04:00
Sean moss
9e55b9bd50 Merge branch 'master' of https://github.com/Smoss/autopsy 2013-05-21 10:11:54 -04:00
Sean-M
6bf140ab76 Fixed BB source error. 2013-05-21 10:10:49 -04:00
adam-m
4021abec58 make state var volatile 2013-05-20 13:06:19 -04:00
adam-m
0c2483120a ExecUtil: add API to write stdout directly to file stream. Make TimeLine use that API. 2013-05-20 13:01:20 -04:00
adam-m
c40b7ef986 Rename JavaSystemCaller to ExecUtil. Make thread-safe / non-static 2013-05-20 12:49:29 -04:00
adam-m
af77304fb0 cleanup java system caller class (to be renamed and refactored) 2013-05-20 12:30:23 -04:00
adam-m
b7e104dd22 better process exec logging 2013-05-20 12:05:38 -04:00
adam-m
7ccbba8cd3 Merge branch 'master' of https://github.com/sleuthkit/autopsy into local-files
Conflicts:
	RecentActivity/src/org/sleuthkit/autopsy/recentactivity/JavaSystemCaller.java
2013-05-20 11:55:09 -04:00
Tim McIver
06cb9735fc Updated Timeline.java and JavaSystemCaller.java to use array version of
Runtime.exec() method as the most recent version of Java (1.7.0_21)
changed the behavior of the single-string version of Runtime.exec()
causing a problem with Timeline. Also updated code to so that the
mactime output is no longer redirected to a file via the '>' redirect
operator. The ouput is now being captured from JavaSystemCaller.execute()
and written to a file directly.
2013-05-20 11:42:39 -04:00
adam-m
ae13717287 garbage collect process and streams after executing command 2013-05-10 13:09:13 -04:00
adam-m
1c39037da2 cleanup stdout/stderr collection threads after forked process returns 2013-05-10 12:45:02 -04:00
adam-m
cea08ec24e search query analyzer: send new data event once at end of ingest, not for every result (minimize tree refresh) 2013-03-23 19:13:50 -04:00
Tim McIver
e3581df5d9 Reinstated copyright that was mistakenly deleted from Chrome.java. 2013-03-11 13:07:17 -04:00
Tim McIver
41e98c4171 Removed contact info for Autopsy developer no longer working on the project. 2013-03-11 11:08:04 -04:00
Tim McIver
4eb5a6ba2d Removed log message when more than one Chrome history file is found as this
is an expected case (on mulit-user systems). Also updated copyright years.
2013-03-11 11:00:16 -04:00
Tim McIver
6af0b6d1b8 Changed 2 warning level log messages to info level. 2013-03-08 15:02:23 -05:00
Tim McIver
e19f6b20df Updated method getHistory() in RecentActivity/Chrome.java so that the
allocation status of the found history files is checked and only the
allocated files are used. Log a warning if more than one allocated history
file is found.
2013-03-08 12:57:17 -05:00
adam-m
9c136f8e6f rename ingest context to pipeline context 2013-02-25 10:48:25 -05:00
adam-m
a15a035565 add ingest context to ingest module process() method - API change.
Adjust all ingest modules.
Update ingest manager to create and pass in context.
2013-02-21 00:16:38 -05:00
adam-m
8c64fe1a8b catch exception from lnk parser 2013-02-14 13:31:34 -05:00
adam-m
91de7a6a1c ra minro cleanup, don't throw unchecked exceptions, do not process 0 sized files in chrome 2013-02-14 13:04:32 -05:00
adam-m
763e6aa593 skip processing 0 size history files - fixed 2013-02-14 12:21:17 -05:00
adam-m
da3928f42a restore the pause when forking process, add log msg if interrupted 2013-02-12 10:59:21 -05:00
adam-m
bc534eb19b remove waitfor (redundant) 2013-02-11 15:37:15 -05:00
adam-m
380c82cf37 concurrency fix: make sure forked process finished before reading output from it 2013-02-11 15:19:57 -05:00
adam-m
768642b7fe update TSK_USER_NAME artifact type 2013-01-29 22:13:18 -05:00
Brian Carrier
5887f2fbda Made ingest inbox messages more consistent 2013-01-29 14:49:02 -05:00
adam-m
f9373d6e13 fix ra warning, better close 2013-01-08 14:04:17 -05:00
adam-m
6ee69fc881 RA: fix chrome null ptr exception when extracting bookmarks 2012-12-20 11:14:12 -05:00
adam-m
f2ed498ae5 enable regripper to run on linux, if user has deps installed 2012-12-07 13:08:35 -05:00
Brian Carrier
151234c1fe changed order of running recent activity modules to get results faster 2012-12-04 22:21:25 -05:00
Tim McIver
996d98af9e Merge branch 'master' of https://github.com/sleuthkit/autopsy
Conflicts:
	RecentActivity/src/org/sleuthkit/autopsy/recentactivity/Firefox.java
2012-12-03 17:38:25 -05:00
Tim McIver
a4c66f9cae Fixed bug in Firefox.getDownload causing no downloads to be found. 2012-11-30 17:38:07 -05:00
0xNF
9ab004802a Download Path column now correctly shows location of the the local file. 2012-11-30 12:18:45 -05:00
Tim McIver
39a8be2faa Merge branch 'master' of https://github.com/sleuthkit/autopsy 2012-11-29 17:50:39 -05:00
Tim McIver
f43d072bcf Updated FileManager API methods to take an Image as argument so that only
files for that image is returned. These changes in support of AUT-613.
2012-11-29 16:37:37 -05:00
Tim McIver
3824f90a0e Refactored ExtractRegistry.getregistryfiles() to use several
FileManager.findFiles calls in order to remove the raw SQL used to retrieve
registry files. Also renamed method to getRegistryFiles().
2012-11-27 17:34:38 -05:00