Re: [sleuthkit-developers] Creating My First Module
Brought to you by:
carrier
From: Justin G. <jus...@gm...> - 2014-07-23 17:07:49
|
Ah great, thank you all for the good info. On Jul 23, 2014 12:37 PM, "Brian Carrier" <ca...@sl...> wrote: > Yea, the docs probably need to be updated to state that Java 8 is now > required. We had to make this jump because of the way that they bundle > JavaFX in 7 versus 8. > > > > On Jul 23, 2014, at 12:26 PM, Luís Filipe Nassif <lfc...@gm...> > wrote: > > > I got this error too. It was solved changing the project JDK to JDK 1.8, > that is the autopsy 3.1-beta embedded (and compilation?) java version. > > > > > > 2014-07-23 11:25 GMT-03:00 Justin Grover <jus...@gm...>: > > Rajmund & SleuthKit Devs, > > > > This may be a bug... I tried creating a basic bare-bones ingest module > using the 3.1 documentation with Autopsy 3.1-beta installed. When running > my module from Netbeans, I get the following error: > > > > org.netbean.InvalidException: StandardModule:org.sleuthkit.autopsy.core > jarFile: C:\Program > Files\Autopsy-3.1.0_Beta\autopsy\modules\org-sleuthkit-autopsy-core.jar: > java.lang.UnsupportedClassVersionError: > org/sleuthkit/datamodel/TskCoreException : Unsupported major.minor version > 52.0 > > > > -Justin > > > > > > On Mon, Jul 14, 2014 at 5:14 PM, Justin Grover <jus...@gm...> > wrote: > > Thank you! > > > > > > On Mon, Jul 14, 2014 at 4:43 PM, Rajmund <ra...@4e...> wrote: > > Hi Justin, > > > > > > > > The documentation you are following is for the upcoming release (3.1) > and not the one you are using (3.0.10) > > > > > > > > Either wait until the next one is out or follow: > > > > > > > > http://www.sleuthkit.org/autopsy/docs/api-docs/3.0/mod_ingest_page.html > > > > > > > > I have found it very useful to start with an working example such as: > > > > > > > > > https://github.com/sleuthkit/autopsy/blob/master/ExifParser/src/org/sleuthkit/autopsy/exifparser/ExifParserFileIngestModule.java > > > > > > > > and modify some of the lines to do other things J > > > > > > > > Once you get to start looking at artifacts you may find the following > useful: > > > > > > > > > http://www.4ensics.co.uk/2014/05/autopsy-3-artifacts-attributes-quick-overview/ > > > > > > > > Regards > > > > > > > > Rajmund > > > > > > > > From: Justin Grover [mailto:jus...@gm...] > > Sent: 14 July 2014 19:50 > > To: sle...@li... > > Subject: [sleuthkit-developers] Creating My First Module > > > > > > > > Hi sleuthkit-devs, > > > > > > > > Trying to create my first basic Autopsy module and am failing miserably. > Can someone help me out? > > > > > > > > I've followed the documentation and have Netbeans, Java & Autopsy setup > properly on Windows 7. I'm now following the docs to create an ingest > module. I created a class, tried to extend it with > org.sleuthkit.autopsy.ingest.IngestModuleFactoryAdapter, but this class is > not found :(. > > > > > > > > I peeked in the Autopsy-Core library, and it looks like the class files > for IngestModuleFactory & IngestModuleFactoryAdapter are both missing. > Many other files that begin with "IngestModule" are there. > > > > > > > > I've been following these docs: > http://www.sleuthkit.org/autopsy/docs/api-docs/3.1/mod_ingest_page.html. > > > > > > > > Were these files moved? or forgotten about? I'm working with Autopsy > 3.0.10. > > > > > > > > Justin > > > > > > > > > > > ------------------------------------------------------------------------------ > > Want fast and easy access to all the code in your enterprise? Index and > > search up to 200,000 lines of code with a free copy of Black Duck > > Code Sight - the same software that powers the world's largest code > > search on Ohloh, the Black Duck Open Hub! Try it now. > > http://p.sf.net/sfu/bds > > _______________________________________________ > > sleuthkit-developers mailing list > > sle...@li... > > https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers > > > > > > > ------------------------------------------------------------------------------ > > Want fast and easy access to all the code in your enterprise? Index and > > search up to 200,000 lines of code with a free copy of Black Duck > > Code Sight - the same software that powers the world's largest code > > search on Ohloh, the Black Duck Open Hub! Try it now. > > http://p.sf.net/sfu/bds_______________________________________________ > > sleuthkit-developers mailing list > > sle...@li... > > https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers > > |