codex-admin/autopsy
1
0
Fork 0
mirror of https://github.com/elisspace/autopsy.git synced 2026-09-28 13:30:00 +00:00
Code Issues Releases Wiki Activity

Merge pull request #4222 from esaunders/develop

Browse Source 
Add special handling for image gallery tables.
This commit is contained in:
esaunders
2018-10-15 17:40:33 -04:00
committed by GitHub
parent ee1f9dd216 9882ada225
commit 1bf627ca4f
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/script/tskdbdiff.py
+12
View File
@@ -421,6 +421,9 @@ def normalize_db_entry(line, files_table, vs_parts_table, vs_info_table, fs_info
data_source_info_index = line.find('INSERT INTO "data_source_info"') > -1 or line.find('INSERT INTO data_source_info ') > -1
ingest_job_index = line.find('INSERT INTO "ingest_jobs"') > -1 or line.find('INSERT INTO ingest_jobs ') > -1
examiners_index = line.find('INSERT INTO "tsk_examiners"') > -1 or line.find('INSERT INTO tsk_examiners ') > -1
ig_groups_index = line.find('INSERT INTO "image_gallery_groups"') > -1 or line.find('INSERT INTO image_gallery_groups ') > -1
ig_groups_seen_index = line.find('INSERT INTO "image_gallery_groups_seen"') > -1 or line.find('INSERT INTO image_gallery_groups_seen ') > -1
parens = line[line.find('(') + 1 : line.rfind(')')]
fields_list = parens.replace(" ", "").split(',')
@@ -428,6 +431,15 @@ def normalize_db_entry(line, files_table, vs_parts_table, vs_info_table, fs_info
if files_index:
newLine = ('INSERT INTO "tsk_files" VALUES(' + ', '.join(fields_list[1:]) + ');')
return newLine
# remove group ID
elif ig_groups_index:
newLine = ('INSERT INTO "image_gallery_groups" VALUES(' + ', '.join(fields_list[1:]) + ');')
return newLine
#remove id field
elif ig_groups_index_seen:
# Only removing the id field for now. May need to care about group_id, examiner_id and seen fields in future.
newLine = ('INSERT INTO "image_gallery_groups_seen" VALUES(' + ', '.join(fields_list[1:]) + ');')
return newLine
# remove object ID
elif path_index:
obj_id = int(fields_list[0])