Autopsy  4.12.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Metadata.java
Go to the documentation of this file.
1 /*
2  * Autopsy Forensic Browser
3  *
4  * Copyright 2013-2018 Basis Technology Corp.
5  * Contact: carrier <at> sleuthkit <dot> org
6  *
7  * Licensed under the Apache License, Version 2.0 (the "License");
8  * you may not use this file except in compliance with the License.
9  * You may obtain a copy of the License at
10  *
11  * http://www.apache.org/licenses/LICENSE-2.0
12  *
13  * Unless required by applicable law or agreed to in writing, software
14  * distributed under the License is distributed on an "AS IS" BASIS,
15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16  * See the License for the specific language governing permissions and
17  * limitations under the License.
18  */
19 package org.sleuthkit.autopsy.contentviewers;
20 
21 import java.awt.Component;
22 import java.util.List;
23 import java.util.logging.Level;
24 import org.apache.commons.lang3.StringUtils;
25 import org.openide.nodes.Node;
26 import org.openide.util.NbBundle;
27 import org.openide.util.NbBundle.Messages;
28 import org.openide.util.lookup.ServiceProvider;
32 import org.sleuthkit.datamodel.AbstractFile;
33 import org.sleuthkit.datamodel.BlackboardArtifact;
34 import org.sleuthkit.datamodel.BlackboardArtifact.ARTIFACT_TYPE;
35 import org.sleuthkit.datamodel.BlackboardAttribute;
36 import org.sleuthkit.datamodel.BlackboardAttribute.ATTRIBUTE_TYPE;
37 import org.sleuthkit.datamodel.DataSource;
38 import org.sleuthkit.datamodel.Image;
39 import org.sleuthkit.datamodel.FsContent;
40 import org.sleuthkit.datamodel.TskCoreException;
41 import org.sleuthkit.datamodel.TskData.TSK_DB_FILES_TYPE_ENUM;
42 
48 @ServiceProvider(service = DataContentViewer.class, position = 6)
49 @SuppressWarnings("PMD.SingularField") // UI widgets cause lots of false positives
50 public class Metadata extends javax.swing.JPanel implements DataContentViewer {
51 
52  private static final Logger LOGGER = Logger.getLogger(Metadata.class.getName());
53 
57  public Metadata() {
58  initComponents();
59  customizeComponents();
60  }
61 
67  @SuppressWarnings("unchecked")
68  // <editor-fold defaultstate="collapsed" desc="Generated Code">//GEN-BEGIN:initComponents
69  private void initComponents() {
70 
71  jPopupMenu1 = new javax.swing.JPopupMenu();
72  jScrollPane2 = new javax.swing.JScrollPane();
73  jTextPane1 = new javax.swing.JTextPane();
74 
75  setPreferredSize(new java.awt.Dimension(100, 52));
76 
77  jScrollPane2.setHorizontalScrollBarPolicy(javax.swing.ScrollPaneConstants.HORIZONTAL_SCROLLBAR_ALWAYS);
78  jScrollPane2.setVerticalScrollBarPolicy(javax.swing.ScrollPaneConstants.VERTICAL_SCROLLBAR_ALWAYS);
79  jScrollPane2.setPreferredSize(new java.awt.Dimension(610, 52));
80 
81  jTextPane1.setEditable(false);
82  jTextPane1.setPreferredSize(new java.awt.Dimension(600, 52));
83  jScrollPane2.setViewportView(jTextPane1);
84 
85  javax.swing.GroupLayout layout = new javax.swing.GroupLayout(this);
86  this.setLayout(layout);
87  layout.setHorizontalGroup(
88  layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)
89  .addComponent(jScrollPane2, javax.swing.GroupLayout.DEFAULT_SIZE, javax.swing.GroupLayout.DEFAULT_SIZE, Short.MAX_VALUE)
90  );
91  layout.setVerticalGroup(
92  layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)
93  .addComponent(jScrollPane2, javax.swing.GroupLayout.DEFAULT_SIZE, javax.swing.GroupLayout.DEFAULT_SIZE, Short.MAX_VALUE)
94  );
95  }// </editor-fold>//GEN-END:initComponents
96  // Variables declaration - do not modify//GEN-BEGIN:variables
97  private javax.swing.JPopupMenu jPopupMenu1;
98  private javax.swing.JScrollPane jScrollPane2;
99  private javax.swing.JTextPane jTextPane1;
100  // End of variables declaration//GEN-END:variables
101 
102  private void customizeComponents() {
103  /*
104  * jTextPane1.setComponentPopupMenu(rightClickMenu); ActionListener
105  * actList = new ActionListener(){ @Override public void
106  * actionPerformed(ActionEvent e){ JMenuItem jmi = (JMenuItem)
107  * e.getSource(); if(jmi.equals(copyMenuItem)) outputViewPane.copy();
108  * else if(jmi.equals(selectAllMenuItem)) outputViewPane.selectAll(); }
109  * }; copyMenuItem.addActionListener(actList);
110  * selectAllMenuItem.addActionListener(actList);
111  */
112 
114  }
115 
116  private void setText(String str) {
117  jTextPane1.setText("<html><body>" + str + "</body></html>"); //NON-NLS
118  }
119 
120  private void startTable(StringBuilder sb) {
121  sb.append("<table>"); //NON-NLS
122  }
123 
124  private void endTable(StringBuilder sb) {
125  sb.append("</table>"); //NON-NLS
126  }
127 
128  private void addRow(StringBuilder sb, String key, String value) {
129  sb.append("<tr><td valign=\"top\">"); //NON-NLS
130  sb.append(key);
131  sb.append("</td><td>"); //NON-NLS
132  sb.append(value);
133  sb.append("</td></tr>"); //NON-NLS
134  }
135 
136  @Messages({
137  "Metadata.tableRowTitle.mimeType=MIME Type",
138  "Metadata.nodeText.truncated=(results truncated)",
139  "Metadata.tableRowTitle.sha1=SHA1",
140  "Metadata.tableRowTitle.sha256=SHA256",
141  "Metadata.tableRowTitle.imageType=Type",
142  "Metadata.tableRowTitle.sectorSize=Sector Size",
143  "Metadata.tableRowTitle.timezone=Time Zone",
144  "Metadata.tableRowTitle.deviceId=Device ID",
145  "Metadata.tableRowTitle.acquisitionDetails=Acquisition Details",
146  "Metadata.tableRowTitle.downloadSource=Downloaded From",
147  "Metadata.nodeText.unknown=Unknown",
148  "Metadata.nodeText.none=None"})
149  @Override
150  public void setNode(Node node) {
151  AbstractFile file = node.getLookup().lookup(AbstractFile.class);
152  Image image = node.getLookup().lookup(Image.class);
153  DataSource dataSource = node.getLookup().lookup(DataSource.class);
154  if (file == null && image == null) {
155  setText(NbBundle.getMessage(this.getClass(), "Metadata.nodeText.nonFilePassedIn"));
156  return;
157  }
158 
159  StringBuilder sb = new StringBuilder();
160  startTable(sb);
161 
162  if (file != null) {
163  try {
164  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.name"), file.getUniquePath());
165  } catch (TskCoreException ex) {
166  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.name"), file.getParentPath() + "/" + file.getName());
167  }
168 
169  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.type"), file.getType().getName());
170  addRow(sb, Bundle.Metadata_tableRowTitle_mimeType(), file.getMIMEType());
171  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.size"), Long.toString(file.getSize()));
172  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.fileNameAlloc"), file.getDirFlagAsString());
173  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.metadataAlloc"), file.getMetaFlagsAsString());
174  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.modified"), ContentUtils.getStringTime(file.getMtime(), file));
175  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.accessed"), ContentUtils.getStringTime(file.getAtime(), file));
176  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.created"), ContentUtils.getStringTime(file.getCrtime(), file));
177  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.changed"), ContentUtils.getStringTime(file.getCtime(), file));
178 
179 
180  String md5 = file.getMd5Hash();
181  if (md5 == null) {
182  md5 = NbBundle.getMessage(this.getClass(), "Metadata.tableRowContent.md5notCalc");
183  }
184  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.md5"), md5);
185  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.hashLookupResults"), file.getKnown().toString());
186  addAcquisitionDetails(sb, dataSource);
187 
188  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.internalid"), Long.toString(file.getId()));
189  if (file.getType().compareTo(TSK_DB_FILES_TYPE_ENUM.LOCAL) == 0) {
190  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.localPath"), file.getLocalAbsPath());
191  }
192 
193  try {
194  List<BlackboardArtifact> sourceArtifacts = file.getArtifacts(ARTIFACT_TYPE.TSK_DOWNLOAD_SOURCE);
195  if (!sourceArtifacts.isEmpty()) {
196  BlackboardArtifact artifact = sourceArtifacts.get(0);
197  BlackboardAttribute urlAttr = artifact.getAttribute(new BlackboardAttribute.Type(ATTRIBUTE_TYPE.TSK_URL));
198  if (urlAttr != null) {
199  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.downloadSource"), urlAttr.getValueString());
200  }
201  }
202  } catch (TskCoreException ex) {
203  sb.append(NbBundle.getMessage(this.getClass(), "Metadata.nodeText.exceptionNotice.text")).append(ex.getLocalizedMessage());
204  }
205 
206  endTable(sb);
207 
208  /*
209  * If we have a file system file, grab the more detailed metadata text
210  * too
211  */
212  try {
213  if (file instanceof FsContent) {
214  FsContent fsFile = (FsContent) file;
215 
216  sb.append("<hr /><pre>\n"); //NON-NLS
217  sb.append(NbBundle.getMessage(this.getClass(), "Metadata.nodeText.text"));
218  sb.append(" <br /><br />"); // NON-NLS
219  for (String str : fsFile.getMetaDataText()) {
220  sb.append(str).append("<br />"); //NON-NLS
221 
222  /*
223  * Very long results can cause the UI to hang before displaying,
224  * so truncate the results if necessary.
225  */
226  if(sb.length() > 50000){
227  sb.append(NbBundle.getMessage(this.getClass(), "Metadata.nodeText.truncated"));
228  break;
229  }
230  }
231  sb.append("</pre>\n"); //NON-NLS
232  }
233  } catch (TskCoreException ex) {
234  sb.append(NbBundle.getMessage(this.getClass(), "Metadata.nodeText.exceptionNotice.text")).append(ex.getLocalizedMessage());
235  }
236  } else {
237  try {
238  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.name"), image.getUniquePath());
239  } catch (TskCoreException ex) {
240  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.name"), image.getName());
241  }
242  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.imageType"), image.getType().getName());
243  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.size"), Long.toString(image.getSize()));
244 
245  try {
246  String md5 = image.getMd5();
247  if (md5 == null || md5.isEmpty()) {
248  md5 = NbBundle.getMessage(this.getClass(), "Metadata.tableRowContent.md5notCalc");
249  }
250  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.md5"), md5);
251 
252  String sha1 = image.getSha1();
253  if (sha1 == null || sha1.isEmpty()) {
254  sha1 = NbBundle.getMessage(this.getClass(), "Metadata.tableRowContent.md5notCalc");
255  }
256  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.sha1"), sha1);
257 
258  String sha256 = image.getSha256();
259  if (sha256 == null || sha256.isEmpty()) {
260  sha256 = NbBundle.getMessage(this.getClass(), "Metadata.tableRowContent.md5notCalc");
261  }
262  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.sha256"), sha256);
263  } catch (TskCoreException ex) {
264  sb.append(NbBundle.getMessage(this.getClass(), "Metadata.nodeText.exceptionNotice.text")).append(ex.getLocalizedMessage());
265  }
266  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.sectorSize"), Long.toString(image.getSsize()));
267  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.timezone"), image.getTimeZone());
268  addAcquisitionDetails(sb, dataSource);
269  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.deviceId"), image.getDeviceId());
270  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.internalid"), Long.toString(image.getId()));
271 
272  // Add all the data source paths to the "Local Path" value cell.
273  String[] imagePaths = image.getPaths();
274  if (imagePaths.length > 0) {
275  StringBuilder pathValues = new StringBuilder("<div>");
276  pathValues.append(imagePaths[0]);
277  pathValues.append("</div>");
278  for (int i=1; i < imagePaths.length; i++) {
279  pathValues.append("<div>");
280  pathValues.append(imagePaths[i]);
281  pathValues.append("</div>");
282  }
283  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.localPath"), pathValues.toString());
284  } else {
285  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.localPath"),
286  NbBundle.getMessage(this.getClass(), "Metadata.nodeText.none"));
287  }
288  }
289 
290  setText(sb.toString());
291  jTextPane1.setCaretPosition(0);
292  this.setCursor(null);
293  }
294 
301  private void addAcquisitionDetails(StringBuilder sb, DataSource dataSource) {
302  if (dataSource != null) {
303  try {
304  String details = dataSource.getAcquisitionDetails();
305  if (StringUtils.isEmpty(details)) {
306  details = Bundle.Metadata_nodeText_unknown();
307  }
308  details = details.replaceAll("\n", "<br>");
309  addRow(sb, NbBundle.getMessage(this.getClass(), "Metadata.tableRowTitle.acquisitionDetails"), details);
310  } catch (TskCoreException ex) {
311  LOGGER.log(Level.SEVERE, "Error reading acquisition details from case database", ex); //NON-NLS
312  }
313  }
314  }
315 
316  @Override
317  public String getTitle() {
318  return NbBundle.getMessage(this.getClass(), "Metadata.title");
319  }
320 
321  @Override
322  public String getToolTip() {
323  return NbBundle.getMessage(this.getClass(), "Metadata.toolTip");
324  }
325 
326  @Override
327  public DataContentViewer createInstance() {
328  return new Metadata();
329  }
330 
331  @Override
332  public Component getComponent() {
333  return this;
334  }
335 
336  @Override
337  public void resetComponent() {
338  setText("");
339  }
340 
341  @Override
342  public boolean isSupported(Node node) {
343  Image image = node.getLookup().lookup(Image.class);
344  AbstractFile file = node.getLookup().lookup(AbstractFile.class);
345  return (file != null) || (image != null);
346  }
347 
348  @Override
349  public int isPreferred(Node node) {
350  return 1;
351  }
352 }
static String getStringTime(long epochSeconds, TimeZone tzone)
void addRow(StringBuilder sb, String key, String value)
Definition: Metadata.java:128
void addAcquisitionDetails(StringBuilder sb, DataSource dataSource)
Definition: Metadata.java:301
static void configureTextPaneAsHtml(JTextPane pane)
Definition: Utilities.java:32
synchronized static Logger getLogger(String name)
Definition: Logger.java:124

Copyright © 2012-2018 Basis Technology. Generated on: Wed Sep 18 2019
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.