Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

VMDK and VHD virtual machine support + virtual machine extractor ingest module #1827

Closed
wants to merge 165 commits into from
Closed

VMDK and VHD virtual machine support + virtual machine extractor ingest module #1827

wants to merge 165 commits into from

Conversation

eugene7646
Copy link
Contributor

  • Allows user to add VMDK and VHD virtual machines as data sources via "add data source" wizard
  • Virtual machine extractor ingest module - locates virtual machine files inside a disk image and adds them as data sources

eugene7646 and others added 30 commits December 17, 2015 16:39
@eugene7646
Autopsy support for VMDK
a0d396d
@eugene7646
Merge branch 'develop' of https://github.com/sleuthkit/autopsy into vmdk
71a66eb
@eugene7646
Merge branch 'develop' of https://github.com/sleuthkit/autopsy into vmdk
ee4de66
@eugene7646
Integrated VHD support into Autopsy
36c246e
@rcordovano
First draft of VMExtractor module prototype
3f1f696
@rcordovano
Complete VMExtractor module prototype
4dbaca4
@eugene7646
Merge branch 'develop' of https://github.com/sleuthkit/autopsy into vhd
d95e98a
@eugene7646
Merge branch 'vm_extractor_module' of https://github.com/rcordovano/a…
df304ef 
…utopsy into vm_detection
@eugene7646
Added TODOs
82e0876
@eugene7646
Merge branch 'develop' of https://github.com/sleuthkit/autopsy into v…
32115bc 
…m_detection
@eugene7646
Added VirtualMachineFinderUtility class
c8e074a
@eugene7646
Exporting vmextractor package in netbeans API
978fbab
@eugene7646
Modified comments
ce43b52
Updated TypeFactory to test for new changes to the sleuthkit regardin…
be1b38d 
…g handling ArtifactTypeIds rather thatn ArtifactTypes.
@eugene7646
Outlining VMExtractorIngestModule module
148ec10
Changes to ExtractedContent to reflect updated sleuthkit
1be09d7
Merge remote-tracking branch 'upstream/develop' into custom_artifact_…
4d7c9a7 
…addition
@rcordovano
Merge pull request sleuthkit#1803 from BasisOlivers/custom_artifact_a…
3f66ff6 
…ddition

Custom artifact addition
Updated ModuleDataEvent to reflect the use of ArtifactTypeID, used ne…
edd8425 
…w methods in ModuleDataEvent anywhere relevant, i.e. wherever the ArifactType was used in other classes that used ModuleDataEvent.
@eugene7646
Added functionality to extract, store, and ingest VMs
acc216b
@eugene7646
Bug fixes
8dc3288
@eugene7646
Added processing of vhd files
b0a8a92
@eugene7646
Automated searching for all supported VM file types
d68eb4d
@rcordovano
Merge branch 'user_defined_blackboard_types' of https://github.com/sl…
de3b0d0 
…euthkit/autopsy into user_defined_blackboard_types
@eugene7646
Added code to update progress bar
3b8a430
Updated to reflect use of BlackboardArtifact.Type (unfinished)
2e32e5a
Fixed comment regarding getArtifactTypeId
6379d36
Fixed comment regarding getArtifactTypeId
441f5a3
@rcordovano
Merge pull request sleuthkit#1804 from BasisOlivers/custom_artifact_a…
b6fb5d6 
…ddition

Updated ModuleDataEvent
@eugene7646
Cleanup
1e395f0
Oliver Spohngellert and others added 28 commits January 26, 2016 08:54
Added updates to work with mimetype, datetime
31a5217
Merge branch 'aut-1866' into aut-1868
d171312
Merge remote-tracking branch 'upstream/develop' into IG-uncat-sort-cl…
e6150f0 
…eanup
@rcordovano
Docs fix for AddImageTask
50d08d3
@rcordovano
Update data source id docs
d3d0812
@rcordovano
Merge pull request sleuthkit#1834 from rcordovano/develop
7fc38f0 
Next steps for data source id feature
Bug fixes
533d979
Merge branch 'develop' into aut-1866
1a4d1f3
split NavPanel into GroupTree and HashHitGroupList classes
312cdee
Merge remote-tracking branch 'upstream/develop' into IG-split-nav-panel
bafbfad
cleanup and fixes
e326388 
add percent sign to hash densiy display
merge fxml files for tree and list
shorten name of hash hits list
@eugene7646
Merge branch 'develop' of https://github.com/sleuthkit/autopsy into v…
96aa402 
…m_detection
make NavPanel define a tab customized in GroupTree and HashHitGroupList
2d38426
Made final changes
5e67126
@rcordovano
Merge pull request sleuthkit#1830 from BasisOlivers/aut-1866
43ea900 
Updated to use new mime type field of abstract file
Fixed for merge with develop
9d7438c
factor out NavPanel as base class for GroupTree and HashHitGroupList
534e740
Merge remote-tracking branch 'upstream/develop' into IG-split-nav-panel
4b4cf96
Fixed sample module and made available to view
14e40c9
Made sample not visible, fixed creation of file type sig attribute
b76096f
@rcordovano
Merge pull request sleuthkit#1836 from BasisOlivers/aut-1868
c1ddbd8 
Fixed external results importer, showed in sample module
@rcordovano
Merge pull request sleuthkit#1833 from millmanorama/IG-sort-by-uncate…
3fef845 
…gorized-files

IG  sort groups with hash hits by uncategorized files
@eugene7646
Merge branch 'develop' of https://github.com/sleuthkit/autopsy into v…
4f343d2 
…m_detection
Added MIMEType to display
510a71b
@rcordovano
Merge pull request sleuthkit#1837 from BasisOlivers/bugFix
f267a6f 
Added MIMEType to display
Merge remote-tracking branch 'upstream/develop' into IG-split-nav-panel
db3fe22
@rcordovano
Merge pull request sleuthkit#1838 from millmanorama/IG-split-nav-panel
b724029 
Ig split nav panel
@eugene7646
Merge branch 'develop' of https://github.com/sleuthkit/autopsy into v…
013a859 
…m_detection
@rcordovano rcordovano closed this Jan 27, 2016
@JSchimmelpfennig JSchimmelpfennig mentioned this pull request Apr 15, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@eugene7646 @rcordovano @bcarrier