1250 Commits

Author SHA1 Message Date
Richard Cordovano
ad82d35aca
Merge pull request #6935 from sleuthkit/release-4.19.0
Merge Release 4.19.0 branch into develop
2021-04-22 11:59:39 -04:00
Mark McKinnon
a4f95355ac Update Chromium.java
Rename method per comment
2021-04-21 15:05:04 -04:00
Mark McKinnon
9cf6046e3e Update Chromium.java
Update comment
2021-04-21 10:17:30 -04:00
Mark McKinnon
8b5263e18c Update Chromium.java
Add comments if data is encrypted
Add Encrypted detection artifact if detected.
2021-04-20 16:02:01 -04:00
Richard Cordovano
740390a102
Merge pull request #6929 from markmckinnon/7537-IllegalArgumentException-in-Chromium-RA-module
7537-IllegalArgumentException-in-Chromium-RA-module
2021-04-20 11:57:27 -04:00
Mark McKinnon
11471f57af Update ChromeCacheExtractor.java
Change check
2021-04-20 10:36:03 -04:00
Mark McKinnon
ff65739dbb Update ChromeCacheExtractor.java
Check for buffer capacity of zero (0) and return if it is, nothing to look at.
2021-04-19 15:25:59 -04:00
Mark McKinnon
63eb4647cc Update Chromium.java
Add check for string encrypted.
2021-04-19 13:38:43 -04:00
Mark McKinnon
7a80c2fd65 Update ChromeCacheExtractor.java
Check if a zero byte file and do not process it, if it is.
2021-04-16 15:10:45 -04:00
Richard Cordovano
700df92ae6
Merge pull request #6923 from markmckinnon/7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
2021-04-15 14:46:40 -04:00
Mark McKinnon
1f8a48055f Update ExtractRegistry.java
Add domain to beginning of the file name to make it unique to avoid other processes not being able to write to the file.
2021-04-15 10:42:44 -04:00
Greg DiCristofaro
dcb42f385c Merge branch 'develop' of github.com:sleuthkit/autopsy into 7434-netbeansBundles 2021-04-14 21:05:25 -04:00
Richard Cordovano
c2c0253e41
Merge pull request #6886 from kellykelly3/7480-fix-timeline-filters
7480 - Changed RA to use TSK_DELETED_PROG artifact for unistalled programs
2021-04-14 16:28:36 -04:00
Richard Cordovano
6fb8069cbb
Merge pull request #6915 from markmckinnon/7525-Searching-For-registry-key-returns-error-if-no-found
7525-Searching-For-registry-key-returns-error-if-no-found
2021-04-14 14:32:24 -04:00
Richard Cordovano
a2c74a49ad
Merge pull request #6913 from markmckinnon/7524-check-to-see-if-prefetch-thirdparty-database-exists
7524-check-to-see-if-prefetch-thirdparty-database-exists
2021-04-14 14:16:40 -04:00
Richard Cordovano
9062afa616
Merge pull request #6912 from markmckinnon/7523-Escape-prefetch-file-name-when-prefetch-file-is-an-alternate-data-stream
7523-Escape-prefetch-file-name-when-prefetch-file-is-an-alternate-data-stream
2021-04-14 13:15:04 -04:00
Mark McKinnon
216985fe4e Update ExtractRegistry.java
Add check for zero length file and ignore it if it is.
2021-04-13 20:59:31 -04:00
Mark McKinnon
30edb0a53d Handle key not found exception and realm scope
Handle key not found exception
Fix check for realm scope when creating user.
2021-04-13 16:42:15 -04:00
Greg DiCristofaro
12a03ff4cc about window fix 2021-04-13 14:31:37 -04:00
Kelly Kelly
9866a75d75 Merge branch 'develop' into 7480-fix-timeline-filters 2021-04-13 14:17:53 -04:00
Mark McKinnon
64fc8bba12 Update ExtractPrefetch.java
Check if thirdparty database file exists before trying to process it.
2021-04-13 13:46:09 -04:00
Mark McKinnon
0bfebda36c Update ExtractPrefetch.java
Sanitize name to avoid having write issues to file system when an ads file is encountered.
2021-04-13 13:16:47 -04:00
Greg DiCristofaro
425158b582 minor bug fixes 2021-04-12 11:40:21 -04:00
Greg DiCristofaro
28e8bed5f3 other ingest job id changes 2021-04-12 11:29:33 -04:00
Greg DiCristofaro
eea0ddb810 updates to RA temp path 2021-04-12 10:04:35 -04:00
Greg DiCristofaro
aac98856d3 Merge branch 'develop' of github.com:sleuthkit/autopsy into 7515-raPathChanges 2021-04-12 09:50:44 -04:00
Richard Cordovano
a37b7f17cf
Merge pull request #6898 from gdicristofaro/7516-categorizerNPE
7516 categorizer NPE
2021-04-12 09:41:33 -04:00
apriestman
3b0b1cb3c6 Restore lookup of associated prefetch file 2021-04-11 18:35:59 -04:00
Richard Cordovano
29b1e91060
Merge pull request #6887 from gdicristofaro/7500-prefetchChanges
7500-prefetchChanges
2021-04-09 16:10:18 -04:00
Greg DiCristofaro
95e569ce65 comment update 2021-04-09 15:21:23 -04:00
Greg DiCristofaro
09a1e9c60d comment explaining 2021-04-09 15:03:20 -04:00
Richard Cordovano
b05c82b37c
Merge pull request #6839 from markmckinnon/7453-populate-osaccount-realm-name
7453-populate-osaccount-realm-name
2021-04-09 13:17:03 -04:00
Greg DiCristofaro
c99491a8e7 categorizer initialize on demand 2021-04-09 11:45:30 -04:00
Mark McKinnon
bf8bd5012d Update ExtractRegistry.java
add check for domain is empty
2021-04-09 10:24:02 -04:00
Greg DiCristofaro
9b9607a492 temp path changes 2021-04-09 09:45:53 -04:00
Greg DiCristofaro
4228fe529c associated artifact updates 2021-04-08 19:02:34 -04:00
Greg DiCristofaro
ebdb4fb8f1 Merge branch 'develop' of github.com:sleuthkit/autopsy into 7500-prefetchChanges 2021-04-08 18:52:23 -04:00
apriestman
73d4d68922 Remove another break 2021-04-08 15:55:27 -04:00
Mark McKinnon
84a190fd32 Update ExtractRegistry.java
Add break to jump out when we found what we want.
2021-04-08 14:42:46 -04:00
Mark McKinnon
426f3ffe2a Merge remote-tracking branch 'upstream/develop' into 7453-populate-osaccount-realm-name 2021-04-08 14:20:26 -04:00
Greg DiCristofaro
76d8cc18be Merge branch 'develop' of github.com:sleuthkit/autopsy into 7500-prefetchChanges 2021-04-08 14:18:52 -04:00
Greg DiCristofaro
f95f56a208 no artifactExists check 2021-04-08 14:18:44 -04:00
Richard Cordovano
f3221803e1
Merge pull request #6858 from gdicristofaro/7469-priorityCategorizer
7469 priority categorizer
2021-04-08 13:01:37 -04:00
apriestman
6bca3aa456 Remove break statement 2021-04-08 07:36:42 -04:00
Greg DiCristofaro
147d08ca05 code cleanup 2021-04-07 20:34:46 -04:00
Greg DiCristofaro
8fe2a70b14 prefetch obj ids 2021-04-07 20:32:22 -04:00
Mark McKinnon
31ac5fb061 Merge remote-tracking branch 'upstream/develop' into 7453-populate-osaccount-realm-name 2021-04-07 15:47:09 -04:00
Kelly Kelly
1640fbf793 Changed RA to use TSK_DELETED_PROG artifact for unistalled programs 2021-04-07 15:07:20 -04:00
Mark McKinnon
2111e343d4 Add Registry Class and Revert Realmname back in OsAccounts
Move code from ExtractRegistry to its own class to get registry information.
Revert the change from OsAccounts back to orginal.
2021-04-06 14:36:16 -04:00
Greg DiCristofaro
22619ed2da Merge branch 'develop' of github.com:sleuthkit/autopsy into 7447-apiChanges 2021-04-06 13:56:05 -04:00