14 Commits

Author SHA1 Message Date
APriestman
fe62624541 Updated RecentActivity to use RegRipper 2.8.
Added additional RegRipper modules to support STIX data.
Stopped RecentActivity IE parser from generating empty user accounts.
2014-12-03 14:21:14 -05:00
APriestman
0fe22cc94c Added regripper modules needed for STIX 2014-11-24 14:26:35 -05:00
Eamonn Saunders
d276f54077 Added a new RegRipper plugin to determine processor architecture and modified ExtractRegistry.java to create a new TSK_OS_INFO artifact with a single TSK_PROCESSOR_ARCHITECTURE attribute. 2014-10-14 13:18:12 -04:00
Brian Carrier
dc8bd033a6 Updated autopsy-version of uninstall regripper plug-in to support 32 and 64-bit apps 2014-03-18 18:38:28 -04:00
Brian Carrier
2d80d2ee21 normalized timestamps in registry analysis, updated reports 2013-10-26 23:37:48 -04:00
Brian Carrier
6767cc42ab renamed autopsy rr plugin for ntuser to be more consistent 2013-10-26 21:19:19 -04:00
Alex Ebadirad
d18e3c663a Removal of warnings and modifications of RR plugins for word/word2010
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-07-09 10:00:33 -07:00
Alex Ebadirad
4878786d89 Updates to officedocs.pl 2012-06-27 16:53:26 -07:00
Alex Ebadirad
cb4fbd88ea Addition of MS document perl scripts to the project
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-06-27 10:35:07 -07:00
Alex Ebadirad
c551c61aff Addition of usb devices to blackboard with new attributes. Removing unnecessary files.
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-04-05 16:49:01 -07:00
Alex Ebadirad
060d5775af Universal date time, added base class for reportxls, added usb scripts, and added domain extraction utility and domains for all web artifacts.
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-04-04 14:56:35 -07:00
Alex Ebadirad
52fcef0014 Installed programs now available w/ version of windows
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-03-26 12:04:33 -07:00
Alex Ebadirad
e82ec772db Fixed recent documents displaying, added IE cookies and bookmarks, chrome bookmarks now work
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-03-23 15:13:39 -07:00
Dick Fickling
423fd43161 Move regripper to release folder 2012-03-16 15:17:56 -04:00