345 Commits

Author SHA1 Message Date
adam-m
ff136f5c3b - added class ServiceDataEvent - services can notify listeners of new data while they are still processing, and send artifact type, and optionally IDs of all new artifacts (dir tree can refresh more efficiently)
- keyword search now sending the new event
2012-02-10 16:11:46 -05:00
adam-m
55735bafcb - add regex matches to blackboard, a separate artifact per each match. Do a check if the term actually hits in that file.
- use new function to add BB attributes in bulk
2012-02-10 15:37:10 -05:00
adam-m
baad89a464 Only encode snippet strings if needed for sql (more human readable)
Show complete message only after the final background worker completes
2012-02-09 18:21:04 -05:00
adam-m
6058927b60 keyword search ingest: add bb writing, error handling, handling various concurrency situations, overlapping workers due to tight intervals or large queries, escaping snippet strings for sql to accept
make popup dialog not flicker
add event mechanism for services themselves to notify viewer when data is ready in BB while they are still running
2012-02-09 17:15:47 -05:00
adam-m
e4d56a3b45 Keyword search ingest: keeping track of results, synchronization between different searchers and other improvements 2012-02-08 17:23:07 -05:00
adam-m
0cb2b47a72 change keyword search tabs top component registration to ensure singletons 2012-02-07 17:19:38 -05:00
adam-m
5cae7325dd initial parallel keyword search in the service. TODO: blackboard write, reporting only new hits 2012-02-07 17:05:05 -05:00
adam-m
dfb0536dc9 Multithreaded keyword search service that indexes and commits every interval seconds. 2012-02-07 15:48:50 -05:00
adam-m
3686752875 refactor snippet query, add context snippet preview property to literal query in the List search 2012-02-07 10:29:36 -05:00
adam-m
554ada9fe2 TSK-328 different keyword serach results from list
- treat non-regex list query as a non-terms component Solr query on content field
2012-02-07 10:04:32 -05:00
adam-m
7086ed3cf5 proper order of closing statement after runQuery() 2012-02-06 17:18:47 -05:00
adam-m
7bab52f6d4 close sql statement and result set when done, freeing sqlite internal db lock earlier 2012-02-06 16:05:48 -05:00
adam-m
4ca8224763 improve recent activity progress bar reporting 2012-02-06 16:05:36 -05:00
adam-m
3817504a49 close sql statement and result set when done, freeing sqlite internal db lock earlier 2012-02-06 16:05:05 -05:00
adam-m
a4e6b5ba82 fix: don't kill current workers when a new image popup is displayed. Rely on case event to close the case and stop workers. 2012-02-06 15:58:34 -05:00
adam-m
c89f0daa40 remove sleep(), not needed with synchronized case access 2012-02-06 11:17:05 -05:00
adam-m
62afecfe23 move interface between services and manager out to IngestManagerProxy 2012-02-03 17:26:06 -05:00
adam-m
2f59912b5c add userConfigure method to service ingest interface 2012-02-03 16:50:50 -05:00
Brian Carrier
08181c6b30 Merge branch 'master' of github.com:sleuthkit/autopsy 2012-02-03 10:06:49 -05:00
Brian Carrier
b85844774c minor text change and comments added to queue files 2012-02-03 10:06:35 -05:00
adam-m
dbdb412055 fix ingest wizard 2012-02-03 02:56:16 -05:00
adam-m
cde2d32951 reset explorer progress bar when done 2012-02-02 19:04:00 -05:00
adam-m
9ab908b9ea add logging to image enqueue 2012-02-02 18:54:55 -05:00
adam-m
535ce32c0d Merge branch 'master' of https://github.com/sleuthkit/autopsy 2012-02-02 17:57:14 -05:00
adam-m
148bfc808a Added string extraction based on file extension.
Proper enqueing events to gui thread.
2012-02-02 17:56:48 -05:00
Dick Fickling
3954e3aa16 Merge branch 'master' of github.com:sleuthkit/autopsy 2012-02-02 17:44:28 -05:00
Dick Fickling
4d96fe8861 Array Index exception catch 2012-02-02 17:44:13 -05:00
adam-m
8a32d5db44 remove excessive logging from keyword indexing 2012-02-02 17:24:50 -05:00
adam-m
d79df24877 Merge branch 'master' of https://github.com/sleuthkit/autopsy 2012-02-02 17:17:00 -05:00
adam-m
ee60eff342 restored file search explorer
remove 2 checkboxes from add image wizard completely
2012-02-02 17:16:24 -05:00
Dick Fickling
2e7216808d Merge branch 'master' of github.com:sleuthkit/autopsy 2012-02-02 17:10:44 -05:00
Dick Fickling
efb563d6a5 Add artifact to database when known bad file is found 2012-02-02 17:10:13 -05:00
Dick Fickling
cb12d78ac6 Allow user to double-click on ArtifactTypeNode to open 2012-02-02 17:09:56 -05:00
Dick Fickling
7b030bb499 Make "String View" default viewer 2012-02-02 17:09:37 -05:00
adam-m
3cc70998a1 changed wording in hash db messages 2012-02-02 17:04:18 -05:00
Brian Carrier
115b5b52d6 Merge pull request #8 from aebadirad42six/master
Small IE bug fix for exception of pascoresult
2012-02-02 14:04:05 -08:00
adam-m
255da913e9 initial keyword search ingest service with indexing only 2012-02-02 17:03:50 -05:00
Alex Ebadirad
80386bb3bd Fixed for real.
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-02-02 14:39:22 -07:00
adam-m
627e85dd9b Merge branch 'master' of https://github.com/sleuthkit/autopsy 2012-02-02 16:13:22 -05:00
adam-m
632b15c091 remove controls from ingest explorer tab
update gitignore with jdbc sql jar
2012-02-02 16:12:58 -05:00
Alex Ebadirad
c86e7901d7 Added quotes around pasco lib path
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-02-02 14:03:33 -07:00
Alex Ebadirad
7ed0f9dddd Small bug fix to IE, resulting in lingering pascoresult.txt file
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-02-02 13:22:57 -07:00
dickfickling
c8f77c83c4 Merge pull request #6 from aebadirad42six/master
Adding program name attribute to blackboard artifacts
2012-02-02 12:14:15 -08:00
Dick Fickling
eabbc819e8 Only run hash lookups if one or both databases are provided in settings 2012-02-02 15:10:36 -05:00
Alex Ebadirad
1a987048af Merges for IE fix and removing hardcoded values from blackboard attributes types, using enum instead
Signed-off-by: Alex Ebadirad <aebadirad@42six.com>
2012-02-02 12:58:38 -07:00
Dick Fickling
e589239e38 De-register file search top component 2012-02-02 14:54:13 -05:00
Dick Fickling
c3574202b6 off by 1 error 2012-02-02 14:47:49 -05:00
Dick Fickling
0a2942de02 Merge branch 'master' of github.com:sleuthkit/autopsy 2012-02-02 14:44:01 -05:00
Dick Fickling
d770c67183 Only post message when file is known bad 2012-02-02 14:43:34 -05:00
Dick Fickling
856a14d965 Set max width for columns in DataResultViewer 2012-02-02 14:43:08 -05:00