Autopsy
4.7.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Public Member Functions | |
JLnkParser (InputStream is, int length) | |
JLNK | parse () throws JLnkParserException |
Private Member Functions | |
String | get0xC (ByteBuffer bb) |
String | getStringAt (ByteBuffer bb, int offset, boolean unicode) |
String | parseCommonPathSuffix (int offset, boolean unicode) |
String | parseDeviceName (int offset, boolean unicode) |
List< String > | parseLinkTargetIdList (List< byte[]> idList) |
String | parseLocalBasePath (int offset, boolean unicode) |
String | parseNetName (int offset, boolean unicode) |
List< String > | parsePathElements (List< byte[]> idList) |
String | parseString (int offset, boolean unicode, int maxlen) |
String | readStringData (ByteBuffer bb) |
Private Attributes | |
byte[] | content |
Static Private Attributes | |
static final Logger | logger = Logger.getLogger(JLnkParser.class.getName()) |
Parse lnk files using documentation from: http://msdn.microsoft.com/en-us/library/dd871305(v=prot.13).aspx http://msdn.microsoft.com/en-us/library/windows/desktop/cc144090(v=vs.85).aspx#unknown_74413 http://blog.0x01000000.org/2010/08/10/lnk-parsing-youre-doing-it-wrong-i/
Definition at line 38 of file JLnkParser.java.
org.sleuthkit.autopsy.coreutils.JLnkParser.JLnkParser | ( | InputStream | is, |
int | length | ||
) |
Definition at line 43 of file JLnkParser.java.
References org.sleuthkit.autopsy.coreutils.Logger.getLogger().
|
private |
Definition at line 324 of file JLnkParser.java.
References org.sleuthkit.autopsy.coreutils.JLnkParser.getStringAt().
Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parsePathElements().
|
private |
Definition at line 328 of file JLnkParser.java.
References org.sleuthkit.autopsy.coreutils.Logger.getLogger().
Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.get0xC(), and org.sleuthkit.autopsy.coreutils.JLnkParser.parsePathElements().
JLNK org.sleuthkit.autopsy.coreutils.JLnkParser.parse | ( | ) | throws JLnkParserException |
Definition at line 52 of file JLnkParser.java.
References org.sleuthkit.autopsy.coreutils.LnkEnums.NetworkProviderType.NetworkProviderType(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseCommonPathSuffix(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseDeviceName(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseLinkTargetIdList(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseLocalBasePath(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseNetName(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseString(), org.sleuthkit.autopsy.coreutils.JLnkParser.readStringData(), and org.sleuthkit.autopsy.coreutils.LnkEnums.DriveType.valueOf().
|
private |
Definition at line 254 of file JLnkParser.java.
References org.sleuthkit.autopsy.coreutils.JLnkParser.parseString().
Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().
|
private |
Definition at line 268 of file JLnkParser.java.
References org.sleuthkit.autopsy.coreutils.JLnkParser.parseString().
Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().
|
private |
Definition at line 272 of file JLnkParser.java.
References org.sleuthkit.autopsy.coreutils.JLnkParser.parsePathElements(), and org.sleuthkit.autopsy.coreutils.LnkEnums.CommonCLSIDS.valueOf().
Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().
|
private |
Definition at line 259 of file JLnkParser.java.
References org.sleuthkit.autopsy.coreutils.JLnkParser.parseString().
Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().
|
private |
Definition at line 264 of file JLnkParser.java.
References org.sleuthkit.autopsy.coreutils.JLnkParser.parseString().
Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().
|
private |
Definition at line 295 of file JLnkParser.java.
References org.sleuthkit.autopsy.coreutils.JLnkParser.get0xC(), and org.sleuthkit.autopsy.coreutils.JLnkParser.getStringAt().
Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parseLinkTargetIdList().
|
private |
Definition at line 231 of file JLnkParser.java.
Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseCommonPathSuffix(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseDeviceName(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseLocalBasePath(), and org.sleuthkit.autopsy.coreutils.JLnkParser.parseNetName().
|
private |
Definition at line 216 of file JLnkParser.java.
Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().
|
private |
Definition at line 40 of file JLnkParser.java.
|
staticprivate |
Definition at line 41 of file JLnkParser.java.
Copyright © 2012-2016 Basis Technology. Generated on: Mon Jun 18 2018
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.