Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Read and index file owner SID and other owner info for each file #1728

Open
lfcnassif opened this issue Jun 22, 2023 · 0 comments · May be fixed by #1729
Open

Read and index file owner SID and other owner info for each file #1728

lfcnassif opened this issue Jun 22, 2023 · 0 comments · May be fixed by #1729
Assignees

Comments

@lfcnassif
Copy link
Member

lfcnassif commented Jun 22, 2023

Sleuthkit-4.11 exposed that information almost 2 years ago to Java API:
https://sleuthkit.org/sleuthkit/docs/jni-docs/4.12.0/classorg_1_1sleuthkit_1_1datamodel_1_1_abstract_file.html#a7d2c04637ca9ae1fdbe477656fd5d726

Having the owner SID, it should be easy to get other owner info from sleuthkitCase.getOsAccountManager(), like login and full name.

This is related to #1054, but independent.

Maybe it is also possible to read and index other file attributes, like permissions, group, etc, not sure.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants