627 Commits

Author SHA1 Message Date
Raman
4e6e34f452 Merge branch 'develop' of https://github.com/sleuthkit/autopsy into 1180-create-cr-artifacts
# Conflicts:
#	RecentActivity/src/org/sleuthkit/autopsy/recentactivity/Firefox.java
2019-01-30 09:59:30 -05:00
Richard Cordovano
b03fc929c3
Merge pull request #4454 from raman-bt/1173-fix-firefox-parser
1173: Fix Firefox parser
2019-01-30 09:49:26 -05:00
Raman
fdb00bfc06 Merge branch 'develop' of https://github.com/sleuthkit/autopsy into 1180-create-cr-artifacts 2019-01-28 13:03:20 -05:00
Richard Cordovano
5bcf39138b
Merge pull request #4461 from wschaeferB/4606-AddUserLoginsToOsAccountArts
4606 add user logins to os account arts
2019-01-28 12:07:09 -05:00
Raman
dd56261cd8 Handle different schema versions of moz_formhistory table. 2019-01-28 09:16:20 -05:00
Raman
fb27a2964a Merge branch '1174-chrome-autofill' of https://github.com/raman-bt/autopsy into 1177-firefox-autofill 2019-01-25 15:33:45 -05:00
Raman
36fa1c72d8 Refactored schema versioning for better readability. 2019-01-25 15:33:01 -05:00
Raman
3da6f17809 Merge branch '1174-chrome-autofill' of https://github.com/raman-bt/autopsy into 1177-firefox-autofill 2019-01-25 14:47:32 -05:00
Raman
fee42178e3 Updated autofill parsing and extraction to handle older version of schema 2019-01-25 14:45:03 -05:00
Raman
c46f2daa8b Address Codacy comment. 2019-01-24 09:58:15 -05:00
Raman
1881f5d8be 1177: Parse Firefox FormHistory & Autofills 2019-01-23 12:09:49 -05:00
William Schaefer
e732bed1aa 4606 use existing SleuthkitCase reference in ExtractRegistry instead of new one 2019-01-17 13:14:57 -05:00
William Schaefer
fb31d39f13 4606 use existing SleuthkitCase reference in ExtractRegistry instead of new one 2019-01-17 13:14:45 -05:00
Raman
2d519841de 1174: parse and create artifacts from Chrome Autofill data 2019-01-17 10:08:54 -05:00
Raman
1e4cec434b 1175: Get chrome login data 2019-01-16 08:02:06 -05:00
William Schaefer
bb1b99172a 4606 change Parsing of sam file to get SID from newly added SID field in user account parsing 2019-01-15 14:33:06 -05:00
William Schaefer
ee1d64f25e 4606 in line getting of userIdWithoutRID 2019-01-14 15:09:13 -05:00
William Schaefer
5b3bff0aa6 4606 get correct complete SID for local accounts 2019-01-14 14:53:48 -05:00
William Schaefer
5063e17b0b 4590 fix misspelled operating system and wrong class for logger 2019-01-14 13:19:59 -05:00
William Schaefer
43d4d5970f Merge branch 'develop' of https://github.com/sleuthkit/autopsy into 4606-AddUserLoginsToOsAccountArts 2019-01-11 13:48:47 -05:00
William Schaefer
e04bff5c1e 4590 add comment for DataSourceAnalyzer class 2019-01-11 13:45:45 -05:00
William Schaefer
ef13b9a245 Merge branch 'develop' of https://github.com/sleuthkit/autopsy into 4590-DataSourceProfiler 2019-01-11 13:24:03 -05:00
William Schaefer
414b2f33da 4622 remove unused import in ExtractIE 2019-01-11 10:05:20 -05:00
William Schaefer
f2969bc962 4606 fix exception logging for newly added parsing 2019-01-10 16:56:11 -05:00
William Schaefer
f5e9e58cbb 4606 update comments optimize code for SAM parsing 2019-01-10 16:40:15 -05:00
William Schaefer
fb29cbee19 4622 remove unused imports from ExtractIE 2019-01-10 15:37:28 -05:00
Raman
4c401c5ca7 1173: Fix Firefox parser
- Fix Downloads query
 - Fix history query
2019-01-10 15:23:55 -05:00
William Schaefer
2f5ebfe4e7 4622 no longer create OS_ACCOUNT artifacts in ExtractIE 2019-01-10 14:32:06 -05:00
William Schaefer
b4844958d2 4622 keep track of existing TSK_OS_ACCOUNTS in order to dedupe 2019-01-10 13:34:04 -05:00
William Schaefer
25ee624f6e 4622 remove parsing of signons.sqlite from chrome parser 2019-01-10 10:54:15 -05:00
William Schaefer
82af93a785 4606 store dates for OS_ACCOUNT in date attributes 2019-01-09 17:33:30 -05:00
William Schaefer
5b765914ad 4606 add parsing of SAM regripper output 2019-01-09 13:52:08 -05:00
William Schaefer
5183e20404 4590 remove new attribute in favor of tsk_description 2019-01-08 15:49:00 -05:00
William Schaefer
8cd3040dbf 4590 fix errors when refactoring name of artifact 2019-01-08 14:57:38 -05:00
William Schaefer
b7be944a0b 4590 rename artifact and attribute for data source usage 2019-01-08 14:44:11 -05:00
William Schaefer
35b8fe44cc 4590 update comment for windows volume check 2019-01-08 13:42:22 -05:00
William Schaefer
7c9d4e1596 4590 change data source profile artifact/attribute relationship to 1 to 1 2019-01-08 13:41:03 -05:00
William Schaefer
cde86ea894 4590 hide Data Source Profile in tree 2019-01-08 12:35:26 -05:00
William Schaefer
64e1d6065d 4590 Add datasourceprofiler class to recent activity 2019-01-07 18:41:54 -05:00
Richard Cordovano
e075717684 Update Autopsy-Core NBM version numbers for 4.10.0 release 2018-12-18 16:23:45 -05:00
William Schaefer
37d048bc59 Merge branch 'develop' of https://github.com/sleuthkit/autopsy into 4305-NewCorrelationAttrs 2018-11-07 16:51:15 -05:00
William Schaefer
2e0a6bf82e 4305 resolve merge conflicts with develop 2018-11-06 12:35:06 -05:00
Ann Priestman
e5313083d8 Moved extractDomain from RecentActivity into NetworkUtils 2018-11-05 10:21:03 -05:00
Ann Priestman
1c925b65ec Remove RecentActivity from pubilc packages 2018-11-05 09:40:59 -05:00
Richard Cordovano
b3e3278eee
Merge pull request #4218 from dgrove727/4262_HandleDomainSpecialCharacters
4262 handle domain special characters
2018-11-02 14:09:35 -04:00
U-BASIS\dgrove
23c21b9f30 Reference 'extractDomain()' from ExtractIE class. 2018-11-01 16:48:33 -04:00
William Schaefer
1dda52aa03 4305 added correlation attribute for wifi networks 2018-10-24 14:45:43 -04:00
William Schaefer
2b06275ed6 4304 minor comment fixes for tsk_wifi_network artifact 2018-10-24 10:30:43 -04:00
William Schaefer
f61dc06a98 4304 remove sys outs used for debugging 2018-10-23 11:03:42 -04:00
William Schaefer
891ddada28 4304 rename tsk_ssid artifact to tsk_wifi_network 2018-10-22 16:13:53 -04:00