Mark McKinnon
4feb6e187c
Changed code to support encoded characters
...
Change code to support encoded characters from regripper and reading them from regripper output file.
2021-06-08 09:10:48 -04:00
Mark McKinnon
ae0d95b089
Update ExtractRegistry.java
...
Check length of Tokens after split, if they are not greater than 2 then skip trying to parse the token.
2021-05-30 10:12:21 -04:00
Richard Cordovano
ad439b6bd7
Merge pull request #6958 from gdicristofaro/7317-dataArtifacts
...
7317 data artifacts
2021-05-20 16:37:51 -04:00
Mark McKinnon
2f5790c2fe
Update ExtractRegistry.java
...
Install date from regripper is UTC time, when it is parsed it does not recognize a timezone so it defaults to current timezone of pc, or that appears to happen. When UTC timezone added to parse it stores the epoch time correctly.
2021-05-15 22:19:41 -04:00
Greg DiCristofaro
b9ab67c689
merge from develop
2021-05-13 07:59:32 -04:00
Greg DiCristofaro
c9dd573e61
fixes
2021-05-06 15:20:57 -04:00
Kelly Kelly
6b39909199
Added method header
2021-05-06 14:22:13 -04:00
Kelly Kelly
a46bbb81a3
Fixed RA NPE
2021-05-06 14:19:26 -04:00
Greg DiCristofaro
6cad9fe539
extract fixes
2021-05-06 12:49:00 -04:00
Greg DiCristofaro
fe30187808
Merge branch 'develop' of github.com:sleuthkit/autopsy into 7317-dataArtifacts
2021-05-04 10:15:58 -04:00
Mark McKinnon
243ffb8745
Update ExtractRegistry.java
...
Add update of domain for user
2021-04-29 09:43:08 -04:00
Greg DiCristofaro
1d2b460b8c
removing newArtifact and newBlackboardArtifact from autopsy
2021-04-28 11:16:32 -04:00
Mark McKinnon
173495627e
Remove ParseDomainHost
...
Remove the parse registry hive.
Remove Parse Domain method
2021-04-28 10:11:10 -04:00
Richard Cordovano
700df92ae6
Merge pull request #6923 from markmckinnon/7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
...
7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
2021-04-15 14:46:40 -04:00
Mark McKinnon
1f8a48055f
Update ExtractRegistry.java
...
Add domain to beginning of the file name to make it unique to avoid other processes not being able to write to the file.
2021-04-15 10:42:44 -04:00
Richard Cordovano
c2c0253e41
Merge pull request #6886 from kellykelly3/7480-fix-timeline-filters
...
7480 - Changed RA to use TSK_DELETED_PROG artifact for unistalled programs
2021-04-14 16:28:36 -04:00
Richard Cordovano
6fb8069cbb
Merge pull request #6915 from markmckinnon/7525-Searching-For-registry-key-returns-error-if-no-found
...
7525-Searching-For-registry-key-returns-error-if-no-found
2021-04-14 14:32:24 -04:00
Mark McKinnon
216985fe4e
Update ExtractRegistry.java
...
Add check for zero length file and ignore it if it is.
2021-04-13 20:59:31 -04:00
Mark McKinnon
30edb0a53d
Handle key not found exception and realm scope
...
Handle key not found exception
Fix check for realm scope when creating user.
2021-04-13 16:42:15 -04:00
Kelly Kelly
9866a75d75
Merge branch 'develop' into 7480-fix-timeline-filters
2021-04-13 14:17:53 -04:00
Greg DiCristofaro
eea0ddb810
updates to RA temp path
2021-04-12 10:04:35 -04:00
Mark McKinnon
bf8bd5012d
Update ExtractRegistry.java
...
add check for domain is empty
2021-04-09 10:24:02 -04:00
Mark McKinnon
84a190fd32
Update ExtractRegistry.java
...
Add break to jump out when we found what we want.
2021-04-08 14:42:46 -04:00
Mark McKinnon
31ac5fb061
Merge remote-tracking branch 'upstream/develop' into 7453-populate-osaccount-realm-name
2021-04-07 15:47:09 -04:00
Kelly Kelly
1640fbf793
Changed RA to use TSK_DELETED_PROG artifact for unistalled programs
2021-04-07 15:07:20 -04:00
Mark McKinnon
2111e343d4
Add Registry Class and Revert Realmname back in OsAccounts
...
Move code from ExtractRegistry to its own class to get registry information.
Revert the change from OsAccounts back to orginal.
2021-04-06 14:36:16 -04:00
Greg DiCristofaro
22619ed2da
Merge branch 'develop' of github.com:sleuthkit/autopsy into 7447-apiChanges
2021-04-06 13:56:05 -04:00
Mark McKinnon
3d561de60c
Revert "Add Registry Class and Revert Realmname back in OsAccounts"
...
This reverts commit 9337f72d0e156e7153fc6a5ab92ff6c57008a5b4.
2021-04-06 13:45:23 -04:00
Mark McKinnon
9337f72d0e
Add Registry Class and Revert Realmname back in OsAccounts
...
Move code from ExtractRegistry to its own class to get registry information.
Revert the change from OsAccounts back to oirginal.
2021-04-06 13:45:02 -04:00
Richard Cordovano
82a24d47d7
Merge pull request #6847 from raman-bt/4251-osaccount-update-philosophy
...
4251: Reconcile different OsAccount update philosophies.
2021-04-06 12:23:53 -04:00
Mark McKinnon
722a2eef8b
Merge remote-tracking branch 'upstream/develop' into 7453-populate-osaccount-realm-name
2021-04-06 09:36:34 -04:00
Greg DiCristofaro
d5772c0725
api changes
2021-04-05 09:39:55 -04:00
Raman Arora
55424a82fe
Addressed more review comments
...
- renamed update account methods
- renamed AccountUpdateStatus and AccountUpdateResult
- Made OsAccountAttribute an inner class of OsAccount.
2021-04-05 08:39:49 -04:00
Raman Arora
ad2b69e5b7
Renamed AccountUpdateStatusEnum/AccountUpdateStatus to AccountUpdateStatus/AccountUpdateResult.
2021-04-03 01:40:24 -04:00
Kelly Kelly
d8b7b5c655
Fixed custom artifact RA issue
2021-04-02 14:37:36 -04:00
Raman Arora
7f0234dad6
Merge branch 'develop' of https://github.com/sleuthkit/autopsy into 4251-osaccount-update-philosophy
...
# Conflicts:
# RecentActivity/src/org/sleuthkit/autopsy/recentactivity/ExtractRegistry.java
2021-04-02 00:07:31 -04:00
Greg DiCristofaro
0a01daa394
fix for os account attribute api changes
2021-04-01 08:04:57 -04:00
Raman Arora
9cde7d329d
Uses the new apis to update accounts.
2021-04-01 05:31:07 -04:00
Raman Arora
d8d261fc4b
4251: Reconcile different OsAccount update philosophies.
2021-03-31 09:31:51 -04:00
Mark McKinnon
c9c1806e58
Merge remote-tracking branch 'upstream/develop' into 7453-populate-osaccount-realm-name
2021-03-30 10:57:52 -04:00
Mark McKinnon
ca425edf8f
Define osAccount inline
...
Define osAccount inline.
2021-03-30 10:52:39 -04:00
Mark McKinnon
69b3a4036a
Get Domain and Host before username parsing
...
Get Domain and Host information from the registry before username parsing.
2021-03-30 10:48:19 -04:00
William Schaefer
11ddee1c72
Change getAccounts calls to getOsAccounts so Autopsy builds
2021-03-29 17:30:09 -04:00
Richard Cordovano
7428b06bcc
Merge pull request #6835 from gdicristofaro/7461-osAccountManagerChanges
...
7461 os account manager changes
2021-03-29 14:30:00 -04:00
Richard Cordovano
20026ad472
Merge pull request #6785 from kellykelly3/7318-remove-tsk-os-account-from-ra
...
7318 Removed TSK_OS_ACCOUNT from RA
2021-03-29 13:13:14 -04:00
Greg DiCristofaro
c3c9e2ead4
os account manager consistency
2021-03-29 12:33:53 -04:00
Kelly Kelly
574a74da5e
Fixed merge conflict
2021-03-29 12:29:36 -04:00
Greg DiCristofaro
29c1a51ddb
change to getAddr
2021-03-26 14:56:42 -04:00
Kelly Kelly
4f294ac864
Merge branch 'develop' into 7316-update-ra-tocreate-dataArtifacts
2021-03-23 13:30:47 -04:00
Kelly Kelly
38659fd58b
Addressed code review changes
2021-03-23 13:30:15 -04:00