357 Commits

Author SHA1 Message Date
Mark McKinnon
4feb6e187c Changed code to support encoded characters
Change code to support encoded characters from regripper and reading them from regripper output file.
2021-06-08 09:10:48 -04:00
Mark McKinnon
ae0d95b089 Update ExtractRegistry.java
Check length of Tokens after split, if they are not greater than 2 then skip trying to parse the token.
2021-05-30 10:12:21 -04:00
Richard Cordovano
ad439b6bd7
Merge pull request #6958 from gdicristofaro/7317-dataArtifacts
7317 data artifacts
2021-05-20 16:37:51 -04:00
Mark McKinnon
2f5790c2fe Update ExtractRegistry.java
Install date from regripper is UTC time, when it is parsed it does not recognize a timezone so it defaults to current timezone of pc, or that appears to happen.  When  UTC timezone added to parse it stores the epoch time correctly.
2021-05-15 22:19:41 -04:00
Greg DiCristofaro
b9ab67c689 merge from develop 2021-05-13 07:59:32 -04:00
Greg DiCristofaro
c9dd573e61 fixes 2021-05-06 15:20:57 -04:00
Kelly Kelly
6b39909199 Added method header 2021-05-06 14:22:13 -04:00
Kelly Kelly
a46bbb81a3 Fixed RA NPE 2021-05-06 14:19:26 -04:00
Greg DiCristofaro
6cad9fe539 extract fixes 2021-05-06 12:49:00 -04:00
Greg DiCristofaro
fe30187808 Merge branch 'develop' of github.com:sleuthkit/autopsy into 7317-dataArtifacts 2021-05-04 10:15:58 -04:00
Mark McKinnon
243ffb8745 Update ExtractRegistry.java
Add update of domain for user
2021-04-29 09:43:08 -04:00
Greg DiCristofaro
1d2b460b8c removing newArtifact and newBlackboardArtifact from autopsy 2021-04-28 11:16:32 -04:00
Mark McKinnon
173495627e Remove ParseDomainHost
Remove the parse registry hive.
Remove Parse Domain method
2021-04-28 10:11:10 -04:00
Richard Cordovano
700df92ae6
Merge pull request #6923 from markmckinnon/7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
2021-04-15 14:46:40 -04:00
Mark McKinnon
1f8a48055f Update ExtractRegistry.java
Add domain to beginning of the file name to make it unique to avoid other processes not being able to write to the file.
2021-04-15 10:42:44 -04:00
Richard Cordovano
c2c0253e41
Merge pull request #6886 from kellykelly3/7480-fix-timeline-filters
7480 - Changed RA to use TSK_DELETED_PROG artifact for unistalled programs
2021-04-14 16:28:36 -04:00
Richard Cordovano
6fb8069cbb
Merge pull request #6915 from markmckinnon/7525-Searching-For-registry-key-returns-error-if-no-found
7525-Searching-For-registry-key-returns-error-if-no-found
2021-04-14 14:32:24 -04:00
Mark McKinnon
216985fe4e Update ExtractRegistry.java
Add check for zero length file and ignore it if it is.
2021-04-13 20:59:31 -04:00
Mark McKinnon
30edb0a53d Handle key not found exception and realm scope
Handle key not found exception
Fix check for realm scope when creating user.
2021-04-13 16:42:15 -04:00
Kelly Kelly
9866a75d75 Merge branch 'develop' into 7480-fix-timeline-filters 2021-04-13 14:17:53 -04:00
Greg DiCristofaro
eea0ddb810 updates to RA temp path 2021-04-12 10:04:35 -04:00
Mark McKinnon
bf8bd5012d Update ExtractRegistry.java
add check for domain is empty
2021-04-09 10:24:02 -04:00
Mark McKinnon
84a190fd32 Update ExtractRegistry.java
Add break to jump out when we found what we want.
2021-04-08 14:42:46 -04:00
Mark McKinnon
31ac5fb061 Merge remote-tracking branch 'upstream/develop' into 7453-populate-osaccount-realm-name 2021-04-07 15:47:09 -04:00
Kelly Kelly
1640fbf793 Changed RA to use TSK_DELETED_PROG artifact for unistalled programs 2021-04-07 15:07:20 -04:00
Mark McKinnon
2111e343d4 Add Registry Class and Revert Realmname back in OsAccounts
Move code from ExtractRegistry to its own class to get registry information.
Revert the change from OsAccounts back to orginal.
2021-04-06 14:36:16 -04:00
Greg DiCristofaro
22619ed2da Merge branch 'develop' of github.com:sleuthkit/autopsy into 7447-apiChanges 2021-04-06 13:56:05 -04:00
Mark McKinnon
3d561de60c Revert "Add Registry Class and Revert Realmname back in OsAccounts"
This reverts commit 9337f72d0e156e7153fc6a5ab92ff6c57008a5b4.
2021-04-06 13:45:23 -04:00
Mark McKinnon
9337f72d0e Add Registry Class and Revert Realmname back in OsAccounts
Move code from ExtractRegistry to its own class to get registry information.
Revert the change from OsAccounts back to oirginal.
2021-04-06 13:45:02 -04:00
Richard Cordovano
82a24d47d7
Merge pull request #6847 from raman-bt/4251-osaccount-update-philosophy
4251: Reconcile different OsAccount update philosophies.
2021-04-06 12:23:53 -04:00
Mark McKinnon
722a2eef8b Merge remote-tracking branch 'upstream/develop' into 7453-populate-osaccount-realm-name 2021-04-06 09:36:34 -04:00
Greg DiCristofaro
d5772c0725 api changes 2021-04-05 09:39:55 -04:00
Raman Arora
55424a82fe Addressed more review comments
- renamed update account methods
 - renamed AccountUpdateStatus and AccountUpdateResult
 - Made OsAccountAttribute an inner class of OsAccount.
2021-04-05 08:39:49 -04:00
Raman Arora
ad2b69e5b7 Renamed AccountUpdateStatusEnum/AccountUpdateStatus to AccountUpdateStatus/AccountUpdateResult. 2021-04-03 01:40:24 -04:00
Kelly Kelly
d8b7b5c655 Fixed custom artifact RA issue 2021-04-02 14:37:36 -04:00
Raman Arora
7f0234dad6 Merge branch 'develop' of https://github.com/sleuthkit/autopsy into 4251-osaccount-update-philosophy
# Conflicts:
#	RecentActivity/src/org/sleuthkit/autopsy/recentactivity/ExtractRegistry.java
2021-04-02 00:07:31 -04:00
Greg DiCristofaro
0a01daa394 fix for os account attribute api changes 2021-04-01 08:04:57 -04:00
Raman Arora
9cde7d329d Uses the new apis to update accounts. 2021-04-01 05:31:07 -04:00
Raman Arora
d8d261fc4b 4251: Reconcile different OsAccount update philosophies. 2021-03-31 09:31:51 -04:00
Mark McKinnon
c9c1806e58 Merge remote-tracking branch 'upstream/develop' into 7453-populate-osaccount-realm-name 2021-03-30 10:57:52 -04:00
Mark McKinnon
ca425edf8f Define osAccount inline
Define osAccount inline.
2021-03-30 10:52:39 -04:00
Mark McKinnon
69b3a4036a Get Domain and Host before username parsing
Get Domain and Host information from the registry before username parsing.
2021-03-30 10:48:19 -04:00
William Schaefer
11ddee1c72 Change getAccounts calls to getOsAccounts so Autopsy builds 2021-03-29 17:30:09 -04:00
Richard Cordovano
7428b06bcc
Merge pull request #6835 from gdicristofaro/7461-osAccountManagerChanges
7461 os account manager changes
2021-03-29 14:30:00 -04:00
Richard Cordovano
20026ad472
Merge pull request #6785 from kellykelly3/7318-remove-tsk-os-account-from-ra
7318 Removed TSK_OS_ACCOUNT from RA
2021-03-29 13:13:14 -04:00
Greg DiCristofaro
c3c9e2ead4 os account manager consistency 2021-03-29 12:33:53 -04:00
Kelly Kelly
574a74da5e Fixed merge conflict 2021-03-29 12:29:36 -04:00
Greg DiCristofaro
29c1a51ddb change to getAddr 2021-03-26 14:56:42 -04:00
Kelly Kelly
4f294ac864 Merge branch 'develop' into 7316-update-ra-tocreate-dataArtifacts 2021-03-23 13:30:47 -04:00
Kelly Kelly
38659fd58b Addressed code review changes 2021-03-23 13:30:15 -04:00