diff --git a/iped-app/resources/config/conf/CategoriesConfig.json b/iped-app/resources/config/conf/CategoriesConfig.json index 962c9e640e..063bfbe445 100644 --- a/iped-app/resources/config/conf/CategoriesConfig.json +++ b/iped-app/resources/config/conf/CategoriesConfig.json @@ -35,6 +35,8 @@ ]} ]}, {"name": "Windows Artifacts", "categories":[ + {"name": "Automatic Destinations", "mimes": ["application/x-automaticdestinations","application/x-automaticdestinations-entry"]}, + {"name": "Custom Destinations", "mimes": ["application/x-customdestinations","application/x-customdestinations-entry"]}, {"name": "Event Files", "mimes": ["application/x-elf-file", "application/x-elf-log"]}, {"name": "Event Records", "mimes": ["application/x-elf-record"]}, {"name": "Event Transcript", "mimes": ["application/x-event-transcript", "application/x-event-transcript-history", "application/x-event-transcript-inventory-app", "application/x-event-transcript-app-interactivity", "application/x-event-transcript-devices", "application/x-event-transcript-census", "application/x-event-transcript-networking"]}, diff --git a/iped-app/resources/config/conf/CategoriesToExpand.txt b/iped-app/resources/config/conf/CategoriesToExpand.txt index e1958cc2a1..0ab30305e4 100644 --- a/iped-app/resources/config/conf/CategoriesToExpand.txt +++ b/iped-app/resources/config/conf/CategoriesToExpand.txt @@ -19,6 +19,8 @@ OLE files Georeferenced Files Peer-to-peer Chrome Cache +Automatic Destinations +Custom Destinations #Event Files # Generates registry reports: diff --git a/iped-app/resources/config/conf/CustomSignatures.xml b/iped-app/resources/config/conf/CustomSignatures.xml index 33a65aceff..0674c70018 100644 --- a/iped-app/resources/config/conf/CustomSignatures.xml +++ b/iped-app/resources/config/conf/CustomSignatures.xml @@ -1637,10 +1637,20 @@ - + + + + + + + + + + + \ No newline at end of file diff --git a/iped-app/resources/scripts/tasks/RefineCategoryTask.js b/iped-app/resources/scripts/tasks/RefineCategoryTask.js index 35d07da9fb..dd357b9ef4 100644 --- a/iped-app/resources/scripts/tasks/RefineCategoryTask.js +++ b/iped-app/resources/scripts/tasks/RefineCategoryTask.js @@ -1,4 +1,4 @@ -/* +/* * Script of Category Specialization based on item properties. * Uses javascript language to allow flexibility in definitions. */ @@ -180,6 +180,18 @@ function process(e){ if(length == 0) e.addCategory("Empty Files"); + + if (mime.equals("application/x-lnk")){ + if (path.endsWith(".customdestinations-ms>>"+e.getName())){ + e.setMediaTypeStr("application/x-customdestinations-entry"); + e.addCategory("Custom Destinations"); + } + if (path.endsWith(".automaticdestinations-ms>>"+e.getName())){ + e.setMediaTypeStr("application/x-automaticdestinations-entry"); + e.addCategory("Automatic Destinations"); + } + } + if(inRecycle(e)){ e.addCategory("Windows Recycle"); if(e.getName().indexOf("$I") == 0) @@ -456,6 +468,7 @@ function process(e){ e.addCategory("E-Mule"); } } + // Custom Regripper Reports