Re: [sleuthkit-developers] Creating My First Module

[Rajmund <ra...@4e...>]

Hi Justin,

 

The documentation you are following is for the upcoming release (3.1) and not the one you are using (3.0.10)

 

Either wait until the next one is out or follow:

 

http://www.sleuthkit.org/autopsy/docs/api-docs/3.0/mod_ingest_page.html

 

I have found it very useful to start with an working example such as:

 

https://github.com/sleuthkit/autopsy/blob/master/ExifParser/src/org/sleuthkit/autopsy/exifparser/ExifParserFileIngestModule.java

 

and modify some of the lines to do other things :)

 

Once you get to start looking at artifacts you may find the following useful:

 

http://www.4ensics.co.uk/2014/05/autopsy-3-artifacts-attributes-quick-overview/

 

Regards

 

Rajmund

 

From: Justin Grover [mailto:jus...@gm...] 
Sent: 14 July 2014 19:50
To: sle...@li...
Subject: [sleuthkit-developers] Creating My First Module

 

Hi sleuthkit-devs,

 

Trying to create my first basic Autopsy module and am failing miserably. Can someone help me out?

 

I've followed the documentation and have Netbeans, Java & Autopsy setup properly on Windows 7. I'm now following the docs to create an ingest module. I created a class, tried to extend it with org.sleuthkit.autopsy.ingest.IngestModuleFactoryAdapter, but this class is not found :(.  

 

I peeked in the Autopsy-Core library, and it looks like the class files for IngestModuleFactory & IngestModuleFactoryAdapter are both missing.  Many other files that begin with "IngestModule" are there.

 

I've been following these docs: http://www.sleuthkit.org/autopsy/docs/api-docs/3.1/mod_ingest_page.html.

 

Were these files moved? or forgotten about?  I'm working with Autopsy 3.0.10.

 

Justin