Skip to content
Snippets Groups Projects
Unverified Commit b42c1cf3 authored by Brian Carrier's avatar Brian Carrier Committed by GitHub
Browse files

Merge pull request #2864 from eugene7646/tsk_malware_artifact_2471

Added TSK_MALWARE to standard TSK artifacts (AUT-2471)
parents 74b9fd5a 1a03134a
No related branches found
No related tags found
No related merge requests found
...@@ -1396,6 +1396,11 @@ public static final class Type implements Serializable { ...@@ -1396,6 +1396,11 @@ public static final class Type implements Serializable {
* interesting. * interesting.
*/ */
public static final Type TSK_INTERESTING_ITEM = new BlackboardArtifact.Type(72, "TSK_INTERESTING_ITEM", bundle.getString("BlackboardArtifact.tskInterestingItem.text"), Category.ANALYSIS_RESULT); public static final Type TSK_INTERESTING_ITEM = new BlackboardArtifact.Type(72, "TSK_INTERESTING_ITEM", bundle.getString("BlackboardArtifact.tskInterestingItem.text"), Category.ANALYSIS_RESULT);
/**
* Malware artifact.
*/
public static final Type TSK_MALWARE = new BlackboardArtifact.Type(73, "TSK_MALWARE", bundle.getString("BlackboardArtifact.tskMalware.text"), Category.ANALYSIS_RESULT);
/* /*
* IMPORTANT! * IMPORTANT!
* *
...@@ -1475,7 +1480,8 @@ public static final class Type implements Serializable { ...@@ -1475,7 +1480,8 @@ public static final class Type implements Serializable {
TSK_PREVIOUSLY_SEEN, TSK_PREVIOUSLY_SEEN,
TSK_PREVIOUSLY_UNSEEN, TSK_PREVIOUSLY_UNSEEN,
TSK_PREVIOUSLY_NOTABLE, TSK_PREVIOUSLY_NOTABLE,
TSK_INTERESTING_ITEM TSK_INTERESTING_ITEM,
TSK_MALWARE
).collect(Collectors.toMap(type -> type.getTypeID(), type -> type))); ).collect(Collectors.toMap(type -> type.getTypeID(), type -> type)));
private final String typeName; private final String typeName;
...@@ -2001,7 +2007,12 @@ public enum ARTIFACT_TYPE implements SleuthkitVisitableItem { ...@@ -2001,7 +2007,12 @@ public enum ARTIFACT_TYPE implements SleuthkitVisitableItem {
* interesting. * interesting.
*/ */
TSK_INTERESTING_ITEM(72, "TSK_INTERESTING_ITEM", //NON-NLS TSK_INTERESTING_ITEM(72, "TSK_INTERESTING_ITEM", //NON-NLS
bundle.getString("BlackboardArtifact.tskInterestingItem.text"), Category.ANALYSIS_RESULT); bundle.getString("BlackboardArtifact.tskInterestingItem.text"), Category.ANALYSIS_RESULT),
/**
* Malware artifact.
*/
TSK_MALWARE(73, "TSK_MALWARE", //NON-NLS
bundle.getString("BlackboardArtifact.tskMalware.text"), Category.ANALYSIS_RESULT);
/* /*
* IMPORTANT! * IMPORTANT!
* *
......
...@@ -68,6 +68,7 @@ BlackboardArtifact.tskPreviouslySeen.text=Previously Seen ...@@ -68,6 +68,7 @@ BlackboardArtifact.tskPreviouslySeen.text=Previously Seen
BlackboardArtifact.tskPreviouslyUnseen.text=Previously Unseen BlackboardArtifact.tskPreviouslyUnseen.text=Previously Unseen
BlackboardArtifact.tskPreviouslyNotable.text=Previously Notable BlackboardArtifact.tskPreviouslyNotable.text=Previously Notable
BlackboardArtifact.tskInterestingItem.text=Interesting Items BlackboardArtifact.tskInterestingItem.text=Interesting Items
BlackboardArtifact.tskMalware.text=Malware
BlackboardArtifact.tskYaraHit.text=YARA Hit BlackboardArtifact.tskYaraHit.text=YARA Hit
BlackboardArtifact.tskGPSArea.text=GPS Area BlackboardArtifact.tskGPSArea.text=GPS Area
BlackboardAttribute.tskAccountType.text=Account Type BlackboardAttribute.tskAccountType.text=Account Type
......
...@@ -68,6 +68,7 @@ BlackboardArtifact.tskPreviouslySeen.text=Previously Seen ...@@ -68,6 +68,7 @@ BlackboardArtifact.tskPreviouslySeen.text=Previously Seen
BlackboardArtifact.tskPreviouslyUnseen.text=Previously Unseen BlackboardArtifact.tskPreviouslyUnseen.text=Previously Unseen
BlackboardArtifact.tskPreviouslyNotable.text=Previously Notable BlackboardArtifact.tskPreviouslyNotable.text=Previously Notable
BlackboardArtifact.tskInterestingItem.text=Interesting Items BlackboardArtifact.tskInterestingItem.text=Interesting Items
BlackboardArtifact.tskMalware.text=Malware
BlackboardArtifact.tskYaraHit.text=YARA Hit BlackboardArtifact.tskYaraHit.text=YARA Hit
BlackboardArtifact.tskGPSArea.text=GPS Area BlackboardArtifact.tskGPSArea.text=GPS Area
BlackboardAttribute.tskAccountType.text=Account Type BlackboardAttribute.tskAccountType.text=Account Type
...@@ -250,8 +251,10 @@ SleuthkitCase.addLocalFile.exception.msg1.text=Error adding local file\: {0}, pa ...@@ -250,8 +251,10 @@ SleuthkitCase.addLocalFile.exception.msg1.text=Error adding local file\: {0}, pa
SleuthkitCase.addLocalFile.exception.msg2.text=Error creating a local file, cannot get new id of the object, file name\: {0} SleuthkitCase.addLocalFile.exception.msg2.text=Error creating a local file, cannot get new id of the object, file name\: {0}
SleuthkitCase.addLocalFile.exception.msg3.text=Error creating a derived file, file name\: {0} SleuthkitCase.addLocalFile.exception.msg3.text=Error creating a derived file, file name\: {0}
SleuthkitCase.getLastObjectId.exception.msg.text=Error closing result set after getting last object id. SleuthkitCase.getLastObjectId.exception.msg.text=Error closing result set after getting last object id.
TskData.tskFsNameFlagEnum.unknown=Unknown
TskData.tskFsNameFlagEnum.allocated=Allocated TskData.tskFsNameFlagEnum.allocated=Allocated
TskData.tskFsNameFlagEnum.unallocated=Unallocated TskData.tskFsNameFlagEnum.unallocated=Unallocated
TskData.tskFsMetaFlagEnum.unknown=Unknown
TskData.tskFsMetaFlagEnum.allocated=Allocated TskData.tskFsMetaFlagEnum.allocated=Allocated
TskData.tskFsMetaFlagEnum.unallocated=Unallocated TskData.tskFsMetaFlagEnum.unallocated=Unallocated
TskData.tskFsMetaFlagEnum.used=Used TskData.tskFsMetaFlagEnum.used=Used
...@@ -282,6 +285,7 @@ TskData.fileKnown.known=known ...@@ -282,6 +285,7 @@ TskData.fileKnown.known=known
TskData.fileKnown.knownBad=notable TskData.fileKnown.knownBad=notable
TskData.fileKnown.exception.msg1.text=No FileKnown of value\: {0} TskData.fileKnown.exception.msg1.text=No FileKnown of value\: {0}
TskData.encodingType.exception.msg1.text=No EncodingType of value\: {0} TskData.encodingType.exception.msg1.text=No EncodingType of value\: {0}
TskData.collectedStatus.exception.msg1.text=No CollectedStatus of value\: {0}
TskData.keywordSearchQueryType.exception.msg1.text=No KeywordSearchQueryType of value\: {0} TskData.keywordSearchQueryType.exception.msg1.text=No KeywordSearchQueryType of value\: {0}
TskData.tskDbFilesTypeEnum.exception.msg1.text=No TSK_FILE_TYPE_ENUM of value\: {0} TskData.tskDbFilesTypeEnum.exception.msg1.text=No TSK_FILE_TYPE_ENUM of value\: {0}
TskData.objectTypeEnum.exception.msg1.text=No ObjectType of value\: {0} TskData.objectTypeEnum.exception.msg1.text=No ObjectType of value\: {0}
...@@ -394,6 +398,7 @@ OsAccountStatus.Unknown.text=Unknown ...@@ -394,6 +398,7 @@ OsAccountStatus.Unknown.text=Unknown
OsAccountStatus.Active.text=Active OsAccountStatus.Active.text=Active
OsAccountStatus.Disabled.text=Disabled OsAccountStatus.Disabled.text=Disabled
OsAccountStatus.Deleted.text=Deleted OsAccountStatus.Deleted.text=Deleted
OsAccountStatus.NonExistent.text=Non Existent
OsAccountType.Unknown.text=Unknown OsAccountType.Unknown.text=Unknown
OsAccountType.Service.text=Service OsAccountType.Service.text=Service
OsAccountType.Interactive.text=Interactive OsAccountType.Interactive.text=Interactive
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment