org.sleuthkit.autopsy.coreutils.JLnkParser Class Reference

Public Member Functions
	JLnkParser (InputStream is, int length)
JLNK	parse () throws JLnkParserException

Private Member Functions
String	get0xC (ByteBuffer bb)
String	getStringAt (ByteBuffer bb, int offset, boolean unicode)
String	parseCommonPathSuffix (int offset, boolean unicode)
String	parseDeviceName (int offset, boolean unicode)
List< String >	parseLinkTargetIdList (List< byte[]> idList)
String	parseLocalBasePath (int offset, boolean unicode)
String	parseNetName (int offset, boolean unicode)
List< String >	parsePathElements (List< byte[]> idList)
String	parseString (int offset, boolean unicode, int maxlen)
String	readStringData (ByteBuffer bb)

Private Attributes
byte[]	content

Static Private Attributes
static final Logger	logger = Logger.getLogger(JLnkParser.class.getName())

Detailed Description

Parse lnk files using documentation from: http://msdn.microsoft.com/en-us/library/dd871305(v=prot.13).aspx http://msdn.microsoft.com/en-us/library/windows/desktop/cc144090(v=vs.85).aspx#unknown_74413 http://blog.0x01000000.org/2010/08/10/lnk-parsing-youre-doing-it-wrong-i/

Definition at line 38 of file JLnkParser.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.coreutils.JLnkParser.JLnkParser	(	InputStream	is,
		int	length
	)

Definition at line 43 of file JLnkParser.java.

References org.sleuthkit.autopsy.coreutils.Logger.getLogger().

Member Function Documentation

String org.sleuthkit.autopsy.coreutils.JLnkParser.get0xC ( ByteBuffer  bb )

private

Definition at line 324 of file JLnkParser.java.

References org.sleuthkit.autopsy.coreutils.JLnkParser.getStringAt().

Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parsePathElements().

String org.sleuthkit.autopsy.coreutils.JLnkParser.getStringAt ( ByteBuffer  bb, int  offset, boolean  unicode  )

private

Definition at line 328 of file JLnkParser.java.

References org.sleuthkit.autopsy.coreutils.Logger.getLogger().

Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.get0xC(), and org.sleuthkit.autopsy.coreutils.JLnkParser.parsePathElements().

JLNK org.sleuthkit.autopsy.coreutils.JLnkParser.parse

(

)

throws JLnkParserException

Definition at line 52 of file JLnkParser.java.

References org.sleuthkit.autopsy.coreutils.LnkEnums.NetworkProviderType.NetworkProviderType(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseCommonPathSuffix(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseDeviceName(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseLinkTargetIdList(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseLocalBasePath(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseNetName(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseString(), org.sleuthkit.autopsy.coreutils.JLnkParser.readStringData(), and org.sleuthkit.autopsy.coreutils.LnkEnums.DriveType.valueOf().

String org.sleuthkit.autopsy.coreutils.JLnkParser.parseCommonPathSuffix ( int  offset, boolean  unicode  )

private

Definition at line 254 of file JLnkParser.java.

References org.sleuthkit.autopsy.coreutils.JLnkParser.parseString().

Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().

String org.sleuthkit.autopsy.coreutils.JLnkParser.parseDeviceName ( int  offset, boolean  unicode  )

private

Definition at line 268 of file JLnkParser.java.

References org.sleuthkit.autopsy.coreutils.JLnkParser.parseString().

Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().

List<String> org.sleuthkit.autopsy.coreutils.JLnkParser.parseLinkTargetIdList ( List< byte[]>  idList )

private

Definition at line 272 of file JLnkParser.java.

References org.sleuthkit.autopsy.coreutils.JLnkParser.parsePathElements(), and org.sleuthkit.autopsy.coreutils.LnkEnums.CommonCLSIDS.valueOf().

Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().

String org.sleuthkit.autopsy.coreutils.JLnkParser.parseLocalBasePath ( int  offset, boolean  unicode  )

private

Definition at line 259 of file JLnkParser.java.

References org.sleuthkit.autopsy.coreutils.JLnkParser.parseString().

Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().

String org.sleuthkit.autopsy.coreutils.JLnkParser.parseNetName ( int  offset, boolean  unicode  )

private

Definition at line 264 of file JLnkParser.java.

References org.sleuthkit.autopsy.coreutils.JLnkParser.parseString().

Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().

List<String> org.sleuthkit.autopsy.coreutils.JLnkParser.parsePathElements ( List< byte[]>  idList )

private

Definition at line 295 of file JLnkParser.java.

References org.sleuthkit.autopsy.coreutils.JLnkParser.get0xC(), and org.sleuthkit.autopsy.coreutils.JLnkParser.getStringAt().

Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parseLinkTargetIdList().

String org.sleuthkit.autopsy.coreutils.JLnkParser.parseString ( int  offset, boolean  unicode, int  maxlen  )

private

Definition at line 231 of file JLnkParser.java.

Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseCommonPathSuffix(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseDeviceName(), org.sleuthkit.autopsy.coreutils.JLnkParser.parseLocalBasePath(), and org.sleuthkit.autopsy.coreutils.JLnkParser.parseNetName().

String org.sleuthkit.autopsy.coreutils.JLnkParser.readStringData ( ByteBuffer  bb )

private

Definition at line 216 of file JLnkParser.java.

Referenced by org.sleuthkit.autopsy.coreutils.JLnkParser.parse().

Member Data Documentation

byte [] org.sleuthkit.autopsy.coreutils.JLnkParser.content

private

Definition at line 40 of file JLnkParser.java.

final Logger org.sleuthkit.autopsy.coreutils.JLnkParser.logger = Logger.getLogger(JLnkParser.class.getName())

staticprivate

Definition at line 41 of file JLnkParser.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/Core/src/org/sleuthkit/autopsy/coreutils/JLnkParser.java