1 /*
2 *
3 * Autopsy Forensic Browser
4 *
5 * Copyright 2012-2018 Basis Technology Corp.
6 *
7 * Copyright 2012 42six Solutions.
8 * Contact: aebadirad <at> 42six <dot> com
9 * Project Contact/Architect: carrier <at> sleuthkit <dot> org
10 *
11 * Licensed under the Apache License, Version 2.0 (the "License");
12 * you may not use this file except in compliance with the License.
13 * You may obtain a copy of the License at
14 *
15 * http://www.apache.org/licenses/LICENSE-2.0
16 *
17 * Unless required by applicable law or agreed to in writing, software
18 * distributed under the License is distributed on an "AS IS" BASIS,
19 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
20 * See the License for the specific language governing permissions and
21 * limitations under the License.
22 */
23 package org.sleuthkit.autopsy.recentactivity;
24
26 import java.io.File;
27 import java.io.FileInputStream;
28 import java.io.IOException;
29 import java.nio.MappedByteBuffer;
30 import java.nio.channels.FileChannel;
31 import java.nio.charset.Charset;
32 import java.sql.ResultSet;
33 import java.text.SimpleDateFormat;
34 import java.util.Date;
35 import java.util.List;
36 import java.util.logging.Level;
38 import java.util.regex.Matcher;
39 import java.util.regex.Pattern;
46
51 class Util {
52
53 private static Logger logger = Logger.getLogger(Util.class.getName());
54
56 private static final long FILETIME_EPOCH_DIFF = 11644473600000L;
57
59 private static final long FILETIME_ONE_MILLISECOND = 10 * 1000;
60
61 private Util() {
62 }
63
64 public static boolean pathexists(String path) {
65 File file = new File(path);
66 boolean exists = file.exists();
67 return exists;
68 }
69
70 public static String utcConvert(String utc) {
71 SimpleDateFormat formatter = new SimpleDateFormat("MM-dd-yyyy HH:mm");
72 String tempconvert = formatter.format(new Date(Long.parseLong(utc)));
73 return tempconvert;
74 }
75
76 public static String readFile(String path) throws IOException {
77 FileInputStream stream = new FileInputStream(new File(path));
78 try {
79 FileChannel fc = stream.getChannel();
80 MappedByteBuffer bb = fc.map(FileChannel.MapMode.READ_ONLY, 0, fc.size());
81 /*
82 * Instead of using default, pass in a decoder.
83 */
84 return Charset.defaultCharset().decode(bb).toString();
85 } finally {
86 stream.close();
87 }
88 }
89
90 public static String getFileName(String value) {
91 String filename = "";
92 String filematch = "^([a-zA-Z]\\:)(\\\\[^\\\\/:*?<>\"|]*(?<!\\[ \\]))*(\\.[a-zA-Z]{2,6})$"; //NON-NLS
93
94 Pattern p = Pattern.compile(filematch, Pattern.CASE_INSENSITIVE | Pattern.DOTALL | Pattern.COMMENTS);
95 Matcher m = p.matcher(value);
96 if (m.find()) {
97 filename = m.group(1);
98
99 }
100 int lastPos = value.lastIndexOf('\\');
101 filename = (lastPos < 0) ? value : value.substring(lastPos + 1);
102 return filename.toString();
103 }
104
105 public static String getPath(String txt) {
106 String path = "";
107
108 //String drive ="([a-z]:\\\\(?:[-\\w\\.\\d]+\\\\)*(?:[-\\w\\.\\d]+)?)"; // Windows drive
109 String drive = "([a-z]:\\\\\\S.+)"; //NON-NLS
110 Pattern p = Pattern.compile(drive, Pattern.CASE_INSENSITIVE | Pattern.COMMENTS);
111 Matcher m = p.matcher(txt);
112 if (m.find()) {
113 path = m.group(1);
114
115 } else {
116
117 String network = "(\\\\(?:\\\\[^:\\s?*\"<>|]+)+)"; // Windows network NON-NLS
118
119 Pattern p2 = Pattern.compile(network, Pattern.CASE_INSENSITIVE | Pattern.DOTALL);
120 Matcher m2 = p2.matcher(txt);
121 if (m2.find()) {
122 path = m2.group(1);
123 }
124 }
125 return path;
126 }
127
128 public static long findID(Content dataSource, String path) {
129 String parent_path = path.replace('\\', '/'); // fix Chrome paths
130 if (parent_path.length() > 2 && parent_path.charAt(1) == ':') {
131 parent_path = parent_path.substring(2); // remove drive letter (e.g., 'C:')
132 }
133 int index = parent_path.lastIndexOf('/');
134 String name = parent_path.substring(++index);
135 parent_path = parent_path.substring(0, index);
136 List<AbstractFile> files = null;
137 try {
138 FileManager fileManager = Case.getCurrentCaseThrows().getServices().getFileManager();
139 files = fileManager.findFiles(dataSource, name, parent_path);
140 } catch (TskCoreException | NoCurrentCaseException ex) {
141 logger.log(Level.WARNING, "Error fetching 'index.data' files for Internet Explorer history."); //NON-NLS
142 }
143
144 if (files == null || files.isEmpty()) {
145 return -1;
146 }
147 return files.get(0).getId();
148 }
149
150 public static boolean checkColumn(String column, String tablename, String connection) {
151 String query = "PRAGMA table_info(" + tablename + ")"; //NON-NLS
152 boolean found = false;
153 ResultSet temprs;
154 SQLiteDBConnect tempdbconnect = null;
155 try {
156 tempdbconnect = new SQLiteDBConnect("org.sqlite.JDBC", "jdbc:sqlite:" + connection); //NON-NLS
157 temprs = tempdbconnect.executeQry(query);
158 while (temprs.next()) {
159 if (temprs.getString("name") == null ? column == null : temprs.getString("name").equals(column)) { //NON-NLS
160 found = true;
161 }
162 }
163 } catch (Exception ex) {
164 logger.log(Level.WARNING, "Error while trying to get columns from sqlite db." + connection, ex); //NON-NLS
165 }
166 finally{
167 if (tempdbconnect != null) {
168 tempdbconnect.closeConnection();
169 }
170 }
171 return found;
172 }
173
174 public static ResultSet runQuery(String query, String connection) {
175 ResultSet results = null;
176 try {
177 SQLiteDBConnect tempdbconnect = new SQLiteDBConnect("org.sqlite.JDBC", "jdbc:sqlite:" + connection); //NON-NLS
178 results = tempdbconnect.executeQry(query);
179 tempdbconnect.closeConnection();
180 } catch (Exception ex) {
181 logger.log(Level.WARNING, "Error while trying to run sql query: " + query + " : " + connection, ex); //NON-NLS
182 }
183 return results;
184 }
185
193 static long filetimeToMillis(final long filetime) {
194 return (filetime / FILETIME_ONE_MILLISECOND) - FILETIME_EPOCH_DIFF;
195 }
196
197 }