IPED icon indicating copy to clipboard operation
IPED copied to clipboard

Read and index file owner SID and other owner info for each file

Open lfcnassif opened this issue 1 year ago • 0 comments

Sleuthkit-4.11 exposed that information almost 2 years ago to Java API: https://sleuthkit.org/sleuthkit/docs/jni-docs/4.12.0/classorg_1_1sleuthkit_1_1datamodel_1_1_abstract_file.html#a7d2c04637ca9ae1fdbe477656fd5d726

Having the owner SID, it should be easy to get other owner info from sleuthkitCase.getOsAccountManager(), like login and full name.

This is related to #1054, but independent.

Maybe it is also possible to read and index other file attributes, like permissions, group, etc, not sure.

lfcnassif avatar Jun 22 '23 18:06 lfcnassif