Index
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
A
- abstractFile - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- abstractFile - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- addArtifact(AbstractFile, List<BlackboardAttribute>, String, String) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerZIPFile
- addArtifact(Content, List<BlackboardAttribute>, String) - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Adds an artifact to the blackboard with the specified attributes and conclusion.
- addArtifact(Content, List<BlackboardAttribute>, String, String) - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Adds an artifact to the blackboard with the specified attributes, conclusion, and justification.
- addArtifact(Content, List<BlackboardAttribute>, String, Score) - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Adds an artifact to the blackboard with the specified attributes, conclusion, and score and does not include a configuration and justification string.
- addArtifact(Content, List<BlackboardAttribute>, String, Score, String, String) - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Adds an analysis result artifact to the specified content file, removing any existing analysis results of the same type beforehand.
- addArtifact(Content, List<BlackboardAttribute>, String, Score, String, String) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerStrings
-
Adds a new artifact to the blackboard with the specified attributes and metadata.
- addAttributesToBlackBoard() - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Adds attributes from the attributes map to the blackboard.
- addDerivedFile(File) - Method in class me.mthw.forge.cracker.BruteCracker
-
Adds a derived file to the case database under the context of the encrypted file.
- addDerivedFile(File) - Method in class me.mthw.forge.cracker.ZIP.BruteCrackerZIP
-
Edits a derived file in the case database after it has been decrypted.
- addMainFlag(List<Content>, BlackboardAttribute.Type) - Static method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Adds a main flag to a list of content files based on the specified main attribute.
- addMainFlag(Content, BlackboardAttribute.Type) - Static method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Adds a main flag attribute to the general information artifact of the given content file.
- AES_128 - Enum constant in enum me.mthw.forge.cracker.ZIP.ZIPVerifier.AESVersion
- AES_192 - Enum constant in enum me.mthw.forge.cracker.ZIP.ZIPVerifier.AESVersion
- AES_256 - Enum constant in enum me.mthw.forge.cracker.ZIP.ZIPVerifier.AESVersion
- Analyzer - Class in me.mthw.forge.ingest.analyzer
-
Abstract class representing an Analyzer that processes files or volumes and interacts with the Blackboard to create and manage artifacts and attributes.
- Analyzer(BlackboardAttribute.Type, Blackboard, IngestJobContext) - Constructor for class me.mthw.forge.ingest.analyzer.Analyzer
-
Constructs an Analyzer object to process and analyze data during an ingest job.
- artifactType - Variable in class me.mthw.forge.ingest.analyzer.Analyzer
- Attribute - Class in me.mthw.forge
- Attribute(String, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE, String) - Constructor for class me.mthw.forge.Attribute
- Attribute(String, BlackboardAttribute.TSK_BLACKBOARD_ATTRIBUTE_VALUE_TYPE, String, BlackboardAttribute.Type) - Constructor for class me.mthw.forge.Attribute
- attributesMap - Variable in class me.mthw.forge.ingest.analyzer.Analyzer
B
- binaryStringToByteArray(String) - Static method in class me.mthw.forge.utils.Utils
-
Converts a binary string representation into a byte array.
- BITLOCKER_GUID - Static variable in class me.mthw.forge.ingest.ForgeDataSourceIngest
- BITLOCKER_TOGO_GUID - Static variable in class me.mthw.forge.ingest.ForgeDataSourceIngest
- BitlockerKey() - Constructor for class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerBitlocker.BitlockerKey
- BitlockerKeys() - Constructor for class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerBitlocker.BitlockerKeys
- blackboard - Variable in class me.mthw.forge.ingest.analyzer.Analyzer
- blackoardAttributeType - Variable in class me.mthw.forge.Attribute
- BruteCracker - Class in me.mthw.forge.cracker
-
The
BruteCrackerclass provides an abstract implementation for a brute-force password cracking mechanism. - BruteCracker(AbstractFile, AtomicBoolean, AtomicReference<String>, CrackerControl) - Constructor for class me.mthw.forge.cracker.BruteCracker
- BruteCrackerOffice - Class in me.mthw.forge.cracker
-
The
BruteCrackerOfficeclass extends theBruteCrackerclass and provides functionality for brute-forcing passwords for encrypted Office files. - BruteCrackerOffice(AbstractFile, AtomicBoolean, AtomicReference<String>, CrackerControl) - Constructor for class me.mthw.forge.cracker.BruteCrackerOffice
- BruteCrackerPDF - Class in me.mthw.forge.cracker
-
The `BruteCrackerPDF` class is a specialized implementation of the `BruteCracker` class designed to handle password cracking and decryption for PDF files.
- BruteCrackerPDF(AbstractFile, BlackboardArtifact, Blackboard, AtomicBoolean, AtomicReference<String>, CrackerControl) - Constructor for class me.mthw.forge.cracker.BruteCrackerPDF
-
Contstructor extracts the necessary attributes from the artifact and checks if the file is supported.
- BruteCrackerZIP - Class in me.mthw.forge.cracker.ZIP
-
The BruteCrackerZIP class is responsible for performing brute-force password cracking on ZIP files.
- BruteCrackerZIP(AbstractFile, AbstractFile, Blackboard, BlackboardArtifact, AtomicBoolean, AtomicReference<String>, CrackerControl) - Constructor for class me.mthw.forge.cracker.ZIP.BruteCrackerZIP
- byteToShort(byte[]) - Static method in class me.mthw.forge.utils.Utils
C
- cancelled - Variable in class me.mthw.forge.cracker.BruteCracker
- cdOffset - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- cdRecords - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- clean() - Method in class me.mthw.forge.cracker.BruteCracker
-
Cleans up resources or performs necessary cleanup operations if neccessary.
- clean() - Method in class me.mthw.forge.cracker.ZIP.BruteCrackerZIP
-
Cleans up resources used by the BruteCrackerZIP instance.
- clean() - Method in class me.mthw.forge.cracker.ZIP.ZIPVerifier
-
Cleans up temporary files by deleting the directory specified by the tempPath variable.
- comment - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- common - Variable in class me.mthw.forge.CrackerOptions
- commonCount - Variable in class me.mthw.forge.CrackerOptions
- compressed - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- compressed - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- compressedSize - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- compressionMethod - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- compressionMethod - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- context - Variable in class me.mthw.forge.ingest.analyzer.Analyzer
- control - Variable in class me.mthw.forge.cracker.BruteCracker
- convertDosDate(short) - Static method in class me.mthw.forge.utils.Utils
- convertDosDate(String) - Static method in class me.mthw.forge.utils.Utils
- convertDosTime(short) - Static method in class me.mthw.forge.utils.Utils
- convertDosTime(String) - Static method in class me.mthw.forge.utils.Utils
- CrackerControl - Class in me.mthw.forge.cracker
-
The CrackerControl class is responsible for managing the brute-force cracking process for various file types.
- CrackerControl(AbstractFile, AbstractFile, Blackboard, CrackerOptions) - Constructor for class me.mthw.forge.cracker.CrackerControl
-
The CrackerControl class is responsible for managing and orchestrating the brute-force cracking process for various file types.
- CrackerOptions - Class in me.mthw.forge
- CrackerOptions() - Constructor for class me.mthw.forge.CrackerOptions
- crc32 - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- createArtifact() - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Creates an artifact as part of the analysis process.
- createArtifact() - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerOffice
-
Creates an artifact with predefined type and description for MS Office files.
- createArtifact() - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerPDF
-
Creates an artifact with the specified type and description.
- createArtifact() - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerStrings
-
Creates a new artifact with the specified type, display name, and category.
- createArtifact() - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerZIPArchive
-
Creates an artifact for a ZIP archive with a specified type and description.
- createArtifact() - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerZIPFile
- createArtifact() - Method in class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerBitlocker
-
Creates a blackboard artifact for a Bitlocker volume.
- createArtifact() - Method in class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerLUKS
-
Creates an artifact representing a LUKS (Linux Unified Key Setup) volume.
- createArtifact(String, String) - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Creates an artifact with the specified type name, display name, and assigns it to the default category of analysis results.
- createArtifact(String, String, BlackboardArtifact.Category) - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Creates or retrieves a blackboard artifact type with the specified type name, display name, and category.
- createAttributes() - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Abstract method to create and fill attributesMap for the analyzer.
- createAttributes() - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerOffice
-
Creates and populates the attributes map with specific attributes related to office file analysis.
- createAttributes() - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerPDF
-
Initializes and populates the attributesMap with various attributes related to PDF analysis.
- createAttributes() - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerStrings
-
Creates and populates the attributes map with predefined attributes.
- createAttributes() - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerZIPArchive
-
Initializes and populates the attributes map with metadata attributes related to ZIP archive analysis.
- createAttributes() - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerZIPFile
-
Initializes and populates the attributesMap with metadata attributes for ZIP files.
- createAttributes() - Method in class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerBitlocker
-
Initializes and populates the attributes map with predefined attributes related to BitLocker volume analysis.
- createAttributes() - Method in class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerLUKS
-
Initializes and populates the attributes map with LUKS volume-specific attributes.
- createBlackboardArtifacts(Blackboard) - Static method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Creates or retrieves a blackboard attribute type with the main type name, value type, and display name.
- createDataSourceIngestModule(IngestModuleIngestJobSettings) - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Creates a data source ingest module instance.
- createFileIngestModule(IngestModuleIngestJobSettings) - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Creates a new instance of a file ingest module.
- createInstance() - Method in class me.mthw.forge.content.ForgeContentViewer
D
- decryptFile - Variable in class me.mthw.forge.CrackerOptions
- decryptFile(String) - Method in class me.mthw.forge.cracker.BruteCracker
-
Attempts to decrypt a file using the provided password.
- decryptFile(String) - Method in class me.mthw.forge.cracker.BruteCrackerOffice
-
Decrypts a file using the provided password and saves the decrypted content to a specified path.
- decryptFile(String) - Method in class me.mthw.forge.cracker.BruteCrackerPDF
-
Decrypts a PDF file using the provided password and saves the decrypted file.
- decryptFile(String) - Method in class me.mthw.forge.cracker.ZIP.BruteCrackerZIP
-
Decrypts a file from a ZIP archive using the provided password.
- decryptPath - Variable in class me.mthw.forge.cracker.BruteCracker
- directory - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- diskNumberStart - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- displayName - Variable in class me.mthw.forge.Attribute
E
- editDerivedFile(ZipRootFile) - Method in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
-
Edits a derived file in the ZIP central directory record.
- enableRandomPassword(BigInteger, BigInteger, char[]) - Method in class me.mthw.forge.cracker.BruteCracker
-
Enables the generation of random passwords within a specified range and character set.
- encrypted - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- encrypted - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- encryptionMethod - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- encryptionMethod - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- eocdOffset - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- externalFileAttributes - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- extractStringFromFile(AbstractFile) - Static method in class me.mthw.forge.utils.Utils
-
Extracts text content from the given
AbstractFileand returns it as a list of strings, where each string represents a line from the extracted text. - extraField - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- extraFieldLength - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
F
- file - Variable in class me.mthw.forge.cracker.BruteCracker
- file - Variable in class me.mthw.forge.CrackerOptions
- FileAnalyzerOffice - Class in me.mthw.forge.ingest.analyzer.file
-
The FileAnalyzerOffice class is responsible for analyzing files to determine if they are encrypted Microsoft Office documents.
- FileAnalyzerOffice(BlackboardAttribute.Type, Blackboard, IngestJobContext) - Constructor for class me.mthw.forge.ingest.analyzer.file.FileAnalyzerOffice
- FileAnalyzerPDF - Class in me.mthw.forge.ingest.analyzer.file
-
The FileAnalyzerPDF class is responsible for analyzing PDF files to determine their encryption properties and extract relevant metadata.
- FileAnalyzerPDF(BlackboardAttribute.Type, Blackboard, IngestJobContext) - Constructor for class me.mthw.forge.ingest.analyzer.file.FileAnalyzerPDF
- FileAnalyzerStrings - Class in me.mthw.forge.ingest.analyzer.file
-
The FileAnalyzerStrings class is a specialized implementation of the Analyzer class designed to process files and extract BitLocker recovery keys.
- FileAnalyzerStrings(BlackboardAttribute.Type, Blackboard, IngestJobContext) - Constructor for class me.mthw.forge.ingest.analyzer.file.FileAnalyzerStrings
- FileAnalyzerZIPArchive - Class in me.mthw.forge.ingest.analyzer.file
-
The FileAnalyzerZIPArchive class is responsible for analyzing ZIP archive files within the context of a forensic investigation.
- FileAnalyzerZIPArchive(BlackboardAttribute.Type, Blackboard, IngestJobContext) - Constructor for class me.mthw.forge.ingest.analyzer.file.FileAnalyzerZIPArchive
- FileAnalyzerZIPFile - Class in me.mthw.forge.ingest.analyzer.file
-
The FileAnalyzerZIPFile class is a specialized implementation of the Analyzer class designed to process and analyze ZIP files.It is only used to create artifact and attributes.
- FileAnalyzerZIPFile(BlackboardAttribute.Type, Blackboard, IngestJobContext) - Constructor for class me.mthw.forge.ingest.analyzer.file.FileAnalyzerZIPFile
- fileComment - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- fileCommentLength - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- fileName - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- fileNameLength - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- filePath - Variable in class me.mthw.forge.CrackerOptions
- filePath - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- FORGE_BITLOCKER_KEY_GUID - Variable in class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerBitlocker.BitlockerKey
- FORGE_BITLOCKER_KEY_PROTECTION_TYPE - Variable in class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerBitlocker.BitlockerKey
- ForgeContentViewer - Class in me.mthw.forge.content
- ForgeContentViewer() - Constructor for class me.mthw.forge.content.ForgeContentViewer
- ForgeDataSourceIngest - Class in me.mthw.forge.ingest
-
The ForgeDataSourceIngest class is an implementation of the DataSourceIngestModule interface, designed to process data sources during the ingest process.
- ForgeFileIngest - Class in me.mthw.forge.ingest
-
The ForgeFileIngest class implements the FileIngestModule interface and is responsible for analyzing files during the ingest process in the FORGE framework.
- ForgeIngestFactory - Class in me.mthw.forge.ingest
- ForgeIngestFactory() - Constructor for class me.mthw.forge.ingest.ForgeIngestFactory
- foundPassword - Variable in class me.mthw.forge.cracker.BruteCracker
G
- generalPurposeBitFlag - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- getAttributes(Analyzer, String) - Method in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
-
Retrieves a list of blackboard attributes for the ZIP central directory record.
- getAttributeType(String) - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Retrieves the
BlackboardAttribute.Typeassociated with the specified type name. - getComponent() - Method in class me.mthw.forge.content.ForgeContentViewer
- getDecryptFilePath() - Method in class me.mthw.forge.cracker.BruteCracker
-
Constructs the file path for the current file by combining the module path, the file's unique ID, and the file's name.
- getDefaultIngestJobSettings() - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Gets the default per ingest job settings for instances of the family of ingest modules the factory creates.
- getFilePath() - Method in class me.mthw.forge.cracker.ZIP.ZIPVerifier
-
Retrieves the file path associated with this instance.
- getGlobalSettingsPanel() - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Gets a user interface panel that allows a user to change settings that are used by all instances of the family of ingest modules the factory creates.
- getIngestJobSettingsPanel(IngestModuleIngestJobSettings) - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Gets a user interface panel that can be used to set per ingest job settings for instances of the family of ingest modules the factory creates.
- getMainAttributeType() - Method in class me.mthw.forge.ingest.ForgeDataSourceIngest
-
Retrieves the main attribute type associated with this data source.
- getModuleDescription() - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Gets a brief, user-friendly description of the family of ingest modules the factory creates.
- getModuleDisplayName() - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Gets the display name that identifies the family of ingest modules the factory creates.
- getModuleName() - Static method in class me.mthw.forge.ingest.ForgeIngestFactory
- getModuleVersionNumber() - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Gets the version number of the family of ingest modules the factory creates.
- getName() - Method in class me.mthw.forge.cracker.BruteCracker
-
Retrieves the name associated with the implementing class.
- getName() - Method in class me.mthw.forge.cracker.BruteCrackerOffice
-
Retrieves the name of the cracker.
- getName() - Method in class me.mthw.forge.cracker.BruteCrackerPDF
-
Retrieves the name of the cracker.
- getName() - Method in class me.mthw.forge.cracker.ZIP.BruteCrackerZIP
-
Retrieves the name of the cracker.
- getTitle() - Method in class me.mthw.forge.content.ForgeContentViewer
- getToolTip() - Method in class me.mthw.forge.content.ForgeContentViewer
- getTriedPasswordList() - Method in class me.mthw.forge.cracker.CrackerControl
-
Retrieves a list of passwords that have been tried, as stored in the artifact's "FORGE_TRIED_PASSWORD" attribute.
H
- hasGlobalSettingsPanel() - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Queries the factory to determine if it provides a user interface panel to allow a user to change settings that are used by all instances of the family of ingest modules the factory creates.
- hasIngestJobSettingsPanel() - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Queries the factory to determine if it provides user a interface panel to allow a user to make per ingest job settings for instances of the family of ingest modules the factory creates.
- hexStringToByteArray(String) - Static method in class me.mthw.forge.utils.Utils
-
Converts a hexadecimal string to a byte array.
I
- internalFileAttributes - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- isDataSourceIngestModuleFactory() - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Queries the factory to determine if it is capable of creating data source ingest modules.
- isFileIngestModuleFactory() - Method in class me.mthw.forge.ingest.ForgeIngestFactory
-
Queries the factory to determine if it is capable of creating file ingest modules.
- isPreferred(Node) - Method in class me.mthw.forge.content.ForgeContentViewer
-
Determines the preference level for handling a given node.
- isSupported(Node) - Method in class me.mthw.forge.content.ForgeContentViewer
-
Determines if the given node is supported by checking for the presence of a specific blackboard attribute ("FORGE") in the associated file's general information artifact.
K
- keyList - Variable in class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerBitlocker.BitlockerKeys
- keySize - Variable in enum me.mthw.forge.cracker.ZIP.ZIPVerifier.AESVersion
L
- lastModFileDate - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- lastModFileTime - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- localHeaderOffset - Variable in class me.mthw.forge.cracker.ZIP.ZIPVerifier
- logger - Variable in class me.mthw.forge.cracker.BruteCracker
- LUKS_HEADER - Static variable in class me.mthw.forge.ingest.ForgeDataSourceIngest
M
- mainAttribute - Variable in class me.mthw.forge.ingest.analyzer.Analyzer
- me.mthw.forge - package me.mthw.forge
- me.mthw.forge.content - package me.mthw.forge.content
- me.mthw.forge.cracker - package me.mthw.forge.cracker
- me.mthw.forge.cracker.ZIP - package me.mthw.forge.cracker.ZIP
- me.mthw.forge.ingest - package me.mthw.forge.ingest
- me.mthw.forge.ingest.analyzer - package me.mthw.forge.ingest.analyzer
- me.mthw.forge.ingest.analyzer.file - package me.mthw.forge.ingest.analyzer.file
- me.mthw.forge.ingest.analyzer.volume - package me.mthw.forge.ingest.analyzer.volume
- me.mthw.forge.ingest.ZIP - package me.mthw.forge.ingest.ZIP
- me.mthw.forge.utils - package me.mthw.forge.utils
- moduleName - Variable in class me.mthw.forge.ingest.analyzer.Analyzer
N
- name - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
P
- passwordList - Variable in class me.mthw.forge.cracker.BruteCracker
- path - Variable in class me.mthw.forge.cracker.ZIP.ZIPVerifier
- process(AbstractFile) - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Processes the given file and performs analysis on it.
- process(AbstractFile) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerOffice
-
Processes an AbstractFile to determine if it is an encrypted Office document using POI library.
- process(AbstractFile) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerPDF
-
Processes a given file to analyze its encryption properties and extract relevant metadata if the file is an encrypted PDF.
- process(AbstractFile) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerStrings
-
Processes the given file to extract and identify potential BitLocker recovery keys.
- process(AbstractFile) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerZIPArchive
-
Processes a given ZIP archive file and extracts relevant metadata and attributes.
- process(AbstractFile) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerZIPFile
- process(AbstractFile) - Method in class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerBitlocker
-
Processes the given abstract file.
- process(AbstractFile) - Method in class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerLUKS
-
Processes the given file.
- process(AbstractFile) - Method in class me.mthw.forge.ingest.ForgeFileIngest
-
Processes a given file to analyze its content based on its MIME type or file extension.
- process(Content, DataSourceIngestModuleProgress) - Method in class me.mthw.forge.ingest.ForgeDataSourceIngest
-
Processes the given data source during the ingest process.
- process(Volume) - Method in class me.mthw.forge.ingest.analyzer.Analyzer
-
Processes the given volume and performs analysis on it.
- process(Volume) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerOffice
-
Processes the given volume.
- process(Volume) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerPDF
-
Processes the given Volume object.
- process(Volume) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerStrings
-
Processes the given volume.
- process(Volume) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerZIPArchive
-
Processes the given volume.
- process(Volume) - Method in class me.mthw.forge.ingest.analyzer.file.FileAnalyzerZIPFile
- process(Volume) - Method in class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerBitlocker
-
Processes a given volume to extract BitLocker metadata and attributes.
- process(Volume) - Method in class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerLUKS
-
Processes a given volume to analyze and extract LUKS (Linux Unified Key Setup) metadata.
R
- randomPassword - Variable in class me.mthw.forge.cracker.BruteCracker
- randomPassword - Variable in class me.mthw.forge.CrackerOptions
- randomPasswordCharSet - Variable in class me.mthw.forge.cracker.BruteCracker
- randomPasswordCharSet - Variable in class me.mthw.forge.CrackerOptions
- randomPasswordEndIndex - Variable in class me.mthw.forge.cracker.BruteCracker
- randomPasswordMaxLength - Variable in class me.mthw.forge.CrackerOptions
- randomPasswordMinLength - Variable in class me.mthw.forge.CrackerOptions
- randomPasswordStartIndex - Variable in class me.mthw.forge.cracker.BruteCracker
- readInt(byte[], int) - Static method in class me.mthw.forge.utils.Utils
- readInt(ReadContentInputStream) - Static method in class me.mthw.forge.utils.Utils
- readIntBE(byte[], int) - Static method in class me.mthw.forge.utils.Utils
- readLong(byte[], int) - Static method in class me.mthw.forge.utils.Utils
- readLongBE(byte[], int) - Static method in class me.mthw.forge.utils.Utils
- readShort(byte[], int) - Static method in class me.mthw.forge.utils.Utils
- readShort(ReadContentInputStream) - Static method in class me.mthw.forge.utils.Utils
- readShortBE(byte[], int) - Static method in class me.mthw.forge.utils.Utils
- records - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- relativeOffsetOfLocalHeader - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- REPORT_FREQ - Variable in class me.mthw.forge.cracker.BruteCracker
- resetComponent() - Method in class me.mthw.forge.content.ForgeContentViewer
- rootFile - Variable in class me.mthw.forge.cracker.ZIP.ZIPVerifier
- rootFileTskID - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- run() - Method in class me.mthw.forge.cracker.BruteCracker
-
Executes the brute force password cracking process.
- run() - Method in class me.mthw.forge.cracker.CrackerControl
-
Executes the cracking process for a given file using a list of brute force crackers.
S
- setNode(Node) - Method in class me.mthw.forge.content.ForgeContentViewer
-
Sets the selected node and processes its associated artifacts to determine the appropriate content to display.
- setPasswordList(List<String>) - Method in class me.mthw.forge.cracker.BruteCracker
-
Sets the list of passwords to be used by the cracker.
- shutDown() - Method in class me.mthw.forge.ingest.ForgeFileIngest
- startUp(IngestJobContext) - Method in class me.mthw.forge.ingest.ForgeDataSourceIngest
- startUp(IngestJobContext) - Method in class me.mthw.forge.ingest.ForgeFileIngest
-
Initializes the FORGE File Ingest module.
- strings - Variable in class me.mthw.forge.CrackerOptions
- stringsType - Variable in class me.mthw.forge.CrackerOptions
T
- tag - Variable in class me.mthw.forge.CrackerOptions
- tempPath - Variable in class me.mthw.forge.cracker.ZIP.ZIPVerifier
- threadsCount - Variable in class me.mthw.forge.CrackerOptions
- toBinString(int) - Static method in class me.mthw.forge.utils.Utils
- toBinString(short) - Static method in class me.mthw.forge.utils.Utils
- toHexString(byte[]) - Static method in class me.mthw.forge.utils.Utils
- toHexString(int) - Static method in class me.mthw.forge.utils.Utils
- tskID - Variable in class me.mthw.forge.ingest.ZIP.ZipRootFile
- type - Variable in class me.mthw.forge.Attribute
- typeName - Variable in class me.mthw.forge.Attribute
U
- uncompressedSize - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- updateProgress(int) - Method in class me.mthw.forge.cracker.CrackerControl
-
Updates the overall progress of the password cracking process by adding the progress made by a single thread.
- Utils - Class in me.mthw.forge.utils
- Utils() - Constructor for class me.mthw.forge.utils.Utils
V
- valueOf(String) - Static method in enum me.mthw.forge.cracker.ZIP.ZIPVerifier.AESVersion
-
Returns the enum constant of this type with the specified name.
- values() - Static method in enum me.mthw.forge.cracker.ZIP.ZIPVerifier.AESVersion
-
Returns an array containing the constants of this enum type, in the order they are declared.
- verifyPassword(String) - Method in class me.mthw.forge.cracker.BruteCracker
-
Verifies if the provided password is correct.
- verifyPassword(String) - Method in class me.mthw.forge.cracker.BruteCrackerOffice
-
Verifies the provided password by delegating to the decryptor's verifyPassword method.
- verifyPassword(String) - Method in class me.mthw.forge.cracker.BruteCrackerPDF
-
Verifies the provided password against the PDF's encryption settings.
- verifyPassword(String) - Method in class me.mthw.forge.cracker.ZIP.BruteCrackerZIP
-
Verifies the provided password against the encryption method used in the ZIP file.
- verifyPassword(String) - Method in class me.mthw.forge.cracker.ZIP.ZIPVerifier
-
Verifies the provided password against the ZIP file's encryption.
- verifyPassword(String) - Method in class me.mthw.forge.cracker.ZIP.ZIPVerifierAES
-
Verifies the provided password against the stored password verification value.
- verifyPassword(String) - Method in class me.mthw.forge.cracker.ZIP.ZIPVerifierPK
-
Verifies the provided password by decrypting a header and checking its validity.
- verifyPasswordLib(String) - Method in class me.mthw.forge.cracker.ZIP.ZIPVerifier
-
Verifies the provided password for a ZIP file by attempting to extract a file from it using zip4j library.
- versionMadeBy - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- versionNeededToExtract - Variable in class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- VolumeAnalyzerBitlocker - Class in me.mthw.forge.ingest.analyzer.volume
-
The VolumeAnalyzerBitlocker class is a specialized implementation of the Analyzer class designed to process volumes and extract metadata related to BitLocker encryption.
- VolumeAnalyzerBitlocker(BlackboardAttribute.Type, Blackboard, IngestJobContext) - Constructor for class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerBitlocker
- VolumeAnalyzerBitlocker.BitlockerKey - Class in me.mthw.forge.ingest.analyzer.volume
-
Represents a BitLocker key with associated metadata for creating json blackboard attribute.
- VolumeAnalyzerBitlocker.BitlockerKeys - Class in me.mthw.forge.ingest.analyzer.volume
-
Represents a collection of Bitlocker keys for creating json blackboard attribute.
- VolumeAnalyzerLUKS - Class in me.mthw.forge.ingest.analyzer.volume
-
The VolumeAnalyzerLUKS class is responsible for analyzing and extracting metadata from LUKS (Linux Unified Key Setup) encrypted volumes.
- VolumeAnalyzerLUKS(BlackboardAttribute.Type, Blackboard, IngestJobContext) - Constructor for class me.mthw.forge.ingest.analyzer.volume.VolumeAnalyzerLUKS
Z
- ZipCentralDirectoryRecord - Class in me.mthw.forge.ingest.ZIP
-
Represents a record in the central directory of a ZIP file.
- ZipCentralDirectoryRecord() - Constructor for class me.mthw.forge.ingest.ZIP.ZipCentralDirectoryRecord
- ZipRootFile - Class in me.mthw.forge.ingest.ZIP
-
Represents the root file of a ZIP archive, containing metadata and records related to the ZIP file's structure and contents.
- ZipRootFile() - Constructor for class me.mthw.forge.ingest.ZIP.ZipRootFile
- ZIPVerifier - Class in me.mthw.forge.cracker.ZIP
-
The ZIPVerifier class provides an abstract base for verifying passwords for ZIP files.
- ZIPVerifier(BlackboardArtifact, Blackboard, AbstractFile) - Constructor for class me.mthw.forge.cracker.ZIP.ZIPVerifier
- ZIPVerifier.AESVersion - Enum in me.mthw.forge.cracker.ZIP
-
Enum representing the different versions of AES (Advanced Encryption Standard) based on their key sizes.
- ZIPVerifierAES - Class in me.mthw.forge.cracker.ZIP
-
The ZIPVerifierAES class extends the ZIPVerifier class to provide functionality for verifying passwords of AES-encrypted ZIP files.
- ZIPVerifierPK - Class in me.mthw.forge.cracker.ZIP
-
The `ZIPVerifierPK` class extends the `ZIPVerifier` class and provides functionality for verifying passwords for ZIP files encrypted using the PKZIP encryption method.
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form