Autopsy
4.16.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Inherits org.sleuthkit.autopsy.ingest.DataSourceIngestModule.
Public Member Functions | |
ProcessResult | process (Content dataSource, DataSourceIngestModuleProgress statusHelper) |
void | startUp (IngestJobContext context) throws IngestModuleException |
Private Member Functions | |
void | addILeappReportToReports (Path iLeappOutputDir, Case currentCase) |
ProcessBuilder | buildiLeappCommand (Path moduleOutputPath, String sourceFilePath, String iLeappFileSystemType) |
List< AbstractFile > | findiLeappFilesToProcess (Content dataSource) |
Static Private Member Functions | |
static ProcessBuilder | buildProcessWithRunAsInvoker (String...commandLine) |
static File | locateExecutable (String executableName) throws FileNotFoundException |
Private Attributes | |
IngestJobContext | context |
File | iLeappExecutable |
ILeappFileProcessor | iLeappFileProcessor |
Static Private Attributes | |
static final String | ILEAPP = "iLeapp" |
static final String | ILEAPP_EXECUTABLE = "ileapp.exe" |
static final Logger | logger = Logger.getLogger(ILeappAnalyzerIngestModule.class.getName()) |
static final String | MODULE_NAME = ILeappAnalyzerModuleFactory.getModuleName() |
Data source ingest module that runs iLeapp against logical iOS files.
Definition at line 58 of file ILeappAnalyzerIngestModule.java.
|
private |
Find the index.html file in the iLeapp output directory so it can be added to reports
Definition at line 245 of file ILeappAnalyzerIngestModule.java.
References org.sleuthkit.autopsy.casemodule.Case.addReport(), and org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.MODULE_NAME.
Referenced by org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.process().
|
private |
Definition at line 208 of file ILeappAnalyzerIngestModule.java.
References org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.buildProcessWithRunAsInvoker().
Referenced by org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.process().
|
staticprivate |
Definition at line 221 of file ILeappAnalyzerIngestModule.java.
Referenced by org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.buildiLeappCommand().
|
private |
Find the files that will be processed by the iLeapp program
dataSource |
Definition at line 183 of file ILeappAnalyzerIngestModule.java.
References org.sleuthkit.autopsy.casemodule.services.FileManager.findFiles().
Referenced by org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.process().
|
staticprivate |
Definition at line 231 of file ILeappAnalyzerIngestModule.java.
Referenced by org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.startUp().
ProcessResult org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.process | ( | Content | dataSource, |
DataSourceIngestModuleProgress | progressBar | ||
) |
Processes a data source. Called once between calls to startUp() and shutDown().
dataSource | The data source to process. |
progressBar | A progress bar to be used to report progress. |
Implements org.sleuthkit.autopsy.ingest.DataSourceIngestModule.
Definition at line 113 of file ILeappAnalyzerIngestModule.java.
References org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.addILeappReportToReports(), org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.buildiLeappCommand(), org.sleuthkit.autopsy.ingest.IngestMessage.createMessage(), org.sleuthkit.autopsy.ingest.IngestMessage.MessageType.DATA, org.sleuthkit.autopsy.ingest.IngestJobContext.dataSourceIngestIsCancelled(), org.sleuthkit.autopsy.ingest.IngestModule.ProcessResult.ERROR, org.sleuthkit.autopsy.coreutils.ExecUtil.execute(), org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.findiLeappFilesToProcess(), org.sleuthkit.autopsy.casemodule.Case.getCurrentCase(), org.sleuthkit.autopsy.ingest.IngestJobContext.getDataSource(), org.sleuthkit.autopsy.ingest.IngestServices.getInstance(), org.sleuthkit.autopsy.casemodule.Case.getModuleDirectory(), org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.ILEAPP, org.sleuthkit.autopsy.ingest.IngestModule.ProcessResult.OK, org.sleuthkit.autopsy.ingest.IngestServices.postMessage(), org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappFileProcessor.processFiles(), org.sleuthkit.autopsy.ingest.DataSourceIngestModuleProgress.progress(), and org.sleuthkit.autopsy.ingest.DataSourceIngestModuleProgress.switchToDeterminate().
void org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.startUp | ( | IngestJobContext | context | ) | throws IngestModuleException |
Invoked by Autopsy to allow an ingest module instance to set up any internal data structures and acquire any private resources it will need during an ingest job. If the module depends on loading any resources, it should do so in this method so that it can throw an exception in the case of an error and alert the user. Exceptions that are thrown from process() and shutDown() are logged, but do not stop processing of the data source.
context | Provides data and services specific to the ingest job and the ingest pipeline of which the module is a part. |
Implements org.sleuthkit.autopsy.ingest.IngestModule.
Definition at line 81 of file ILeappAnalyzerIngestModule.java.
References org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.context, org.sleuthkit.autopsy.coreutils.PlatformUtil.isWindowsOS(), and org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.locateExecutable().
|
private |
Definition at line 68 of file ILeappAnalyzerIngestModule.java.
Referenced by org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.startUp().
|
staticprivate |
Definition at line 63 of file ILeappAnalyzerIngestModule.java.
Referenced by org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.process().
|
staticprivate |
Definition at line 64 of file ILeappAnalyzerIngestModule.java.
|
private |
Definition at line 66 of file ILeappAnalyzerIngestModule.java.
|
private |
Definition at line 70 of file ILeappAnalyzerIngestModule.java.
|
staticprivate |
Definition at line 60 of file ILeappAnalyzerIngestModule.java.
|
staticprivate |
Definition at line 61 of file ILeappAnalyzerIngestModule.java.
Referenced by org.sleuthkit.autopsy.modules.ileappanalyzer.ILeappAnalyzerIngestModule.addILeappReportToReports().
Copyright © 2012-2020 Basis Technology. Generated on: Tue Sep 22 2020
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.