Commit Graph
1371 Commits
Author SHA1 Message Date
Richard Cordovano ad439b6bd7 Merge pull request #6958 from gdicristofaro/7317-dataArtifacts
7317 data artifacts
2021-05-20 16:37:51 -04:00
Greg DiCristofaro 21c5f02fe8 Merge branch 'develop' of github.com:sleuthkit/autopsy into 7592-analysisResultsScore 2021-05-20 12:43:29 -04:00
Mark McKinnon 2f5790c2fe Update ExtractRegistry.java
Install date from regripper is UTC time, when it is parsed it does not recognize a timezone so it defaults to current timezone of pc, or that appears to happen.  When  UTC timezone added to parse it stores the epoch time correctly.
2021-05-15 22:19:41 -04:00
Richard Cordovano 345f4bddcc Merge pull request #6968 from sleuthkit/release-4.19.0
Release 4.19.0
2021-05-14 09:45:44 -04:00
Greg DiCristofaro 83e0bcb1e8 analysis result scores 2021-05-13 15:20:49 -04:00
Greg DiCristofaro b9ab67c689 merge from develop 2021-05-13 07:59:32 -04:00
Greg DiCristofaro d58eff130a newDataArtifact changes 2021-05-11 13:41:38 -04:00
Greg DiCristofaro c9dd573e61 fixes 2021-05-06 15:20:57 -04:00
Kelly Kelly 6b39909199 Added method header 2021-05-06 14:22:13 -04:00
Kelly Kelly a46bbb81a3 Fixed RA NPE 2021-05-06 14:19:26 -04:00
Greg DiCristofaro 6cad9fe539 extract fixes 2021-05-06 12:49:00 -04:00
Greg DiCristofaro acb7ab0383 merge 7576 2021-05-06 12:41:08 -04:00
Greg DiCristofaro dbc0fba5bc fix 2021-05-04 12:30:51 -04:00
Greg DiCristofaro c41f2a2255 use OsAccount id 2021-05-04 12:17:34 -04:00
Greg DiCristofaro fe30187808 Merge branch 'develop' of github.com:sleuthkit/autopsy into 7317-dataArtifacts 2021-05-04 10:15:58 -04:00
Richard Cordovano e6c87a1bea Merge pull request #6945 from markmckinnon/7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process-new
7528 error in processing registry file possibly still open in another process new
2021-04-30 11:36:44 -04:00
Richard Cordovano a27d0d8c27 Merge pull request #6942 from markmckinnon/7450-Missing-database-table-error-during-prefetch-file-parsing
7450-Missing-database-table-error-during-prefetch-file-parsing
2021-04-29 12:40:02 -04:00
Mark McKinnon 243ffb8745 Update ExtractRegistry.java
Add update of domain for user
2021-04-29 09:43:08 -04:00
Greg DiCristofaro 1d2b460b8c removing newArtifact and newBlackboardArtifact from autopsy 2021-04-28 11:16:32 -04:00
Mark McKinnon 173495627e Remove ParseDomainHost
Remove the parse registry hive.
Remove Parse Domain method
2021-04-28 10:11:10 -04:00
Mark McKinnon 52ca63e4e0 Update ExtractPrefetch.java
Change error logging to warning
Add file name that warning is occurring on
Add detail message to warning
2021-04-28 08:54:05 -04:00
Richard Cordovano ad82d35aca Merge pull request #6935 from sleuthkit/release-4.19.0
Merge Release 4.19.0 branch into develop
2021-04-22 11:59:39 -04:00
Mark McKinnon a4f95355ac Update Chromium.java
Rename method per comment
2021-04-21 15:05:04 -04:00
Mark McKinnon 9cf6046e3e Update Chromium.java
Update comment
2021-04-21 10:17:30 -04:00
Mark McKinnon 8b5263e18c Update Chromium.java
Add comments if data is encrypted
Add Encrypted detection artifact if detected.
2021-04-20 16:02:01 -04:00
Richard Cordovano 740390a102 Merge pull request #6929 from markmckinnon/7537-IllegalArgumentException-in-Chromium-RA-module
7537-IllegalArgumentException-in-Chromium-RA-module
2021-04-20 11:57:27 -04:00
Mark McKinnon 11471f57af Update ChromeCacheExtractor.java
Change check
2021-04-20 10:36:03 -04:00
Mark McKinnon ff65739dbb Update ChromeCacheExtractor.java
Check for buffer capacity of zero (0) and return if it is, nothing to look at.
2021-04-19 15:25:59 -04:00
Mark McKinnon 63eb4647cc Update Chromium.java
Add check for string encrypted.
2021-04-19 13:38:43 -04:00
Mark McKinnon 7a80c2fd65 Update ChromeCacheExtractor.java
Check if a zero byte file and do not process it, if it is.
2021-04-16 15:10:45 -04:00
Richard Cordovano 700df92ae6 Merge pull request #6923 from markmckinnon/7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
7528-Error-in-Processing-Registry-File-possibly-still-open-in-another-process
2021-04-15 14:46:40 -04:00
Mark McKinnon 1f8a48055f Update ExtractRegistry.java
Add domain to beginning of the file name to make it unique to avoid other processes not being able to write to the file.
2021-04-15 10:42:44 -04:00
Greg DiCristofaro dcb42f385c Merge branch 'develop' of github.com:sleuthkit/autopsy into 7434-netbeansBundles 2021-04-14 21:05:25 -04:00
Richard Cordovano c2c0253e41 Merge pull request #6886 from kellykelly3/7480-fix-timeline-filters
7480 - Changed RA to use TSK_DELETED_PROG artifact for unistalled programs
2021-04-14 16:28:36 -04:00
Richard Cordovano 6fb8069cbb Merge pull request #6915 from markmckinnon/7525-Searching-For-registry-key-returns-error-if-no-found
7525-Searching-For-registry-key-returns-error-if-no-found
2021-04-14 14:32:24 -04:00
Richard Cordovano a2c74a49ad Merge pull request #6913 from markmckinnon/7524-check-to-see-if-prefetch-thirdparty-database-exists
7524-check-to-see-if-prefetch-thirdparty-database-exists
2021-04-14 14:16:40 -04:00
Richard Cordovano 9062afa616 Merge pull request #6912 from markmckinnon/7523-Escape-prefetch-file-name-when-prefetch-file-is-an-alternate-data-stream
7523-Escape-prefetch-file-name-when-prefetch-file-is-an-alternate-data-stream
2021-04-14 13:15:04 -04:00
Mark McKinnon 216985fe4e Update ExtractRegistry.java
Add check for zero length file and ignore it if it is.
2021-04-13 20:59:31 -04:00
Mark McKinnon 30edb0a53d Handle key not found exception and realm scope
Handle key not found exception
Fix check for realm scope when creating user.
2021-04-13 16:42:15 -04:00
Greg DiCristofaro 12a03ff4cc about window fix 2021-04-13 14:31:37 -04:00
Kelly Kelly 9866a75d75 Merge branch 'develop' into 7480-fix-timeline-filters 2021-04-13 14:17:53 -04:00
Mark McKinnon 64fc8bba12 Update ExtractPrefetch.java
Check if thirdparty database file exists before trying to process it.
2021-04-13 13:46:09 -04:00
Mark McKinnon 0bfebda36c Update ExtractPrefetch.java
Sanitize name to avoid having write issues to file system when an ads file is encountered.
2021-04-13 13:16:47 -04:00
Greg DiCristofaro 425158b582 minor bug fixes 2021-04-12 11:40:21 -04:00
Greg DiCristofaro 28e8bed5f3 other ingest job id changes 2021-04-12 11:29:33 -04:00
Greg DiCristofaro eea0ddb810 updates to RA temp path 2021-04-12 10:04:35 -04:00
Greg DiCristofaro aac98856d3 Merge branch 'develop' of github.com:sleuthkit/autopsy into 7515-raPathChanges 2021-04-12 09:50:44 -04:00
Richard Cordovano a37b7f17cf Merge pull request #6898 from gdicristofaro/7516-categorizerNPE
7516 categorizer NPE
2021-04-12 09:41:33 -04:00
apriestman 3b0b1cb3c6 Restore lookup of associated prefetch file 2021-04-11 18:35:59 -04:00
Richard Cordovano 29b1e91060 Merge pull request #6887 from gdicristofaro/7500-prefetchChanges
7500-prefetchChanges
2021-04-09 16:10:18 -04:00