apriestman
04d295f65a
Use allocated versions of cache files when available
2021-05-25 10:43:35 -04:00
Richard Cordovano
ad439b6bd7
Merge pull request #6958 from gdicristofaro/7317-dataArtifacts
...
7317 data artifacts
2021-05-20 16:37:51 -04:00
Mark McKinnon
2f5790c2fe
Update ExtractRegistry.java
...
Install date from regripper is UTC time, when it is parsed it does not recognize a timezone so it defaults to current timezone of pc, or that appears to happen. When UTC timezone added to parse it stores the epoch time correctly.
2021-05-15 22:19:41 -04:00
Richard Cordovano
345f4bddcc
Merge pull request #6968 from sleuthkit/release-4.19.0
...
Release 4.19.0
2021-05-14 09:45:44 -04:00
Greg DiCristofaro
b9ab67c689
merge from develop
2021-05-13 07:59:32 -04:00
Greg DiCristofaro
d58eff130a
newDataArtifact changes
2021-05-11 13:41:38 -04:00
Greg DiCristofaro
c9dd573e61
fixes
2021-05-06 15:20:57 -04:00
Kelly Kelly
6b39909199
Added method header
2021-05-06 14:22:13 -04:00
Kelly Kelly
a46bbb81a3
Fixed RA NPE
2021-05-06 14:19:26 -04:00
Greg DiCristofaro
6cad9fe539
extract fixes
2021-05-06 12:49:00 -04:00
Greg DiCristofaro
acb7ab0383
merge 7576
2021-05-06 12:41:08 -04:00
Greg DiCristofaro
dbc0fba5bc
fix
2021-05-04 12:30:51 -04:00
Greg DiCristofaro
c41f2a2255
use OsAccount id
2021-05-04 12:17:34 -04:00
Greg DiCristofaro
fe30187808
Merge branch 'develop' of github.com:sleuthkit/autopsy into 7317-dataArtifacts
2021-05-04 10:15:58 -04:00
Richard Cordovano
e6c87a1bea
Merge pull request #6945 from markmckinnon/7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process-new
...
7528 error in processing registry file possibly still open in another process new
2021-04-30 11:36:44 -04:00
Richard Cordovano
a27d0d8c27
Merge pull request #6942 from markmckinnon/7450-Missing-database-table-error-during-prefetch-file-parsing
...
7450-Missing-database-table-error-during-prefetch-file-parsing
2021-04-29 12:40:02 -04:00
Mark McKinnon
243ffb8745
Update ExtractRegistry.java
...
Add update of domain for user
2021-04-29 09:43:08 -04:00
Greg DiCristofaro
1d2b460b8c
removing newArtifact and newBlackboardArtifact from autopsy
2021-04-28 11:16:32 -04:00
Mark McKinnon
173495627e
Remove ParseDomainHost
...
Remove the parse registry hive.
Remove Parse Domain method
2021-04-28 10:11:10 -04:00
Mark McKinnon
52ca63e4e0
Update ExtractPrefetch.java
...
Change error logging to warning
Add file name that warning is occurring on
Add detail message to warning
2021-04-28 08:54:05 -04:00
Richard Cordovano
ad82d35aca
Merge pull request #6935 from sleuthkit/release-4.19.0
...
Merge Release 4.19.0 branch into develop
2021-04-22 11:59:39 -04:00
Mark McKinnon
a4f95355ac
Update Chromium.java
...
Rename method per comment
2021-04-21 15:05:04 -04:00
Mark McKinnon
9cf6046e3e
Update Chromium.java
...
Update comment
2021-04-21 10:17:30 -04:00
Mark McKinnon
8b5263e18c
Update Chromium.java
...
Add comments if data is encrypted
Add Encrypted detection artifact if detected.
2021-04-20 16:02:01 -04:00
Richard Cordovano
740390a102
Merge pull request #6929 from markmckinnon/7537-IllegalArgumentException-in-Chromium-RA-module
...
7537-IllegalArgumentException-in-Chromium-RA-module
2021-04-20 11:57:27 -04:00
Mark McKinnon
11471f57af
Update ChromeCacheExtractor.java
...
Change check
2021-04-20 10:36:03 -04:00
Mark McKinnon
ff65739dbb
Update ChromeCacheExtractor.java
...
Check for buffer capacity of zero (0) and return if it is, nothing to look at.
2021-04-19 15:25:59 -04:00
Mark McKinnon
63eb4647cc
Update Chromium.java
...
Add check for string encrypted.
2021-04-19 13:38:43 -04:00
Mark McKinnon
7a80c2fd65
Update ChromeCacheExtractor.java
...
Check if a zero byte file and do not process it, if it is.
2021-04-16 15:10:45 -04:00
Richard Cordovano
700df92ae6
Merge pull request #6923 from markmckinnon/7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
...
7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
2021-04-15 14:46:40 -04:00
Mark McKinnon
1f8a48055f
Update ExtractRegistry.java
...
Add domain to beginning of the file name to make it unique to avoid other processes not being able to write to the file.
2021-04-15 10:42:44 -04:00
Greg DiCristofaro
dcb42f385c
Merge branch 'develop' of github.com:sleuthkit/autopsy into 7434-netbeansBundles
2021-04-14 21:05:25 -04:00
Richard Cordovano
c2c0253e41
Merge pull request #6886 from kellykelly3/7480-fix-timeline-filters
...
7480 - Changed RA to use TSK_DELETED_PROG artifact for unistalled programs
2021-04-14 16:28:36 -04:00
Richard Cordovano
6fb8069cbb
Merge pull request #6915 from markmckinnon/7525-Searching-For-registry-key-returns-error-if-no-found
...
7525-Searching-For-registry-key-returns-error-if-no-found
2021-04-14 14:32:24 -04:00
Richard Cordovano
a2c74a49ad
Merge pull request #6913 from markmckinnon/7524-check-to-see-if-prefetch-thirdparty-database-exists
...
7524-check-to-see-if-prefetch-thirdparty-database-exists
2021-04-14 14:16:40 -04:00
Richard Cordovano
9062afa616
Merge pull request #6912 from markmckinnon/7523-Escape-prefetch-file-name-when-prefetch-file-is-an-alternate-data-stream
...
7523-Escape-prefetch-file-name-when-prefetch-file-is-an-alternate-data-stream
2021-04-14 13:15:04 -04:00
Mark McKinnon
216985fe4e
Update ExtractRegistry.java
...
Add check for zero length file and ignore it if it is.
2021-04-13 20:59:31 -04:00
Mark McKinnon
30edb0a53d
Handle key not found exception and realm scope
...
Handle key not found exception
Fix check for realm scope when creating user.
2021-04-13 16:42:15 -04:00
Greg DiCristofaro
12a03ff4cc
about window fix
2021-04-13 14:31:37 -04:00
Kelly Kelly
9866a75d75
Merge branch 'develop' into 7480-fix-timeline-filters
2021-04-13 14:17:53 -04:00
Mark McKinnon
64fc8bba12
Update ExtractPrefetch.java
...
Check if thirdparty database file exists before trying to process it.
2021-04-13 13:46:09 -04:00
Mark McKinnon
0bfebda36c
Update ExtractPrefetch.java
...
Sanitize name to avoid having write issues to file system when an ads file is encountered.
2021-04-13 13:16:47 -04:00
Greg DiCristofaro
425158b582
minor bug fixes
2021-04-12 11:40:21 -04:00
Greg DiCristofaro
28e8bed5f3
other ingest job id changes
2021-04-12 11:29:33 -04:00
Greg DiCristofaro
eea0ddb810
updates to RA temp path
2021-04-12 10:04:35 -04:00
Greg DiCristofaro
aac98856d3
Merge branch 'develop' of github.com:sleuthkit/autopsy into 7515-raPathChanges
2021-04-12 09:50:44 -04:00
Richard Cordovano
a37b7f17cf
Merge pull request #6898 from gdicristofaro/7516-categorizerNPE
...
7516 categorizer NPE
2021-04-12 09:41:33 -04:00
apriestman
3b0b1cb3c6
Restore lookup of associated prefetch file
2021-04-11 18:35:59 -04:00
Richard Cordovano
29b1e91060
Merge pull request #6887 from gdicristofaro/7500-prefetchChanges
...
7500-prefetchChanges
2021-04-09 16:10:18 -04:00
Greg DiCristofaro
95e569ce65
comment update
2021-04-09 15:21:23 -04:00