-
Notifications
You must be signed in to change notification settings - Fork 154
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #911 from JamesHabben/main
update teams
- Loading branch information
Showing
12 changed files
with
1,533 additions
and
211 deletions.
There are no files selected for viewing
Binary file added
BIN
+1.07 MB
admin/test/cases/data/teams/testdata.teams.teamsCalls.josh_ios15_ffs.zip
Binary file not shown.
Binary file added
BIN
+1.07 MB
admin/test/cases/data/teams/testdata.teams.teamsContacts.josh_ios15_ffs.zip
Binary file not shown.
Binary file added
BIN
+1.07 MB
admin/test/cases/data/teams/testdata.teams.teamsLocations.josh_ios15_ffs.zip
Binary file not shown.
Binary file added
BIN
+2.37 MB
admin/test/cases/data/teams/testdata.teams.teamsMessages.josh_ios15_ffs.zip
Binary file not shown.
Binary file added
BIN
+1.07 MB
admin/test/cases/data/teams/testdata.teams.teamsUser.josh_ios15_ffs.zip
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,72 @@ | ||
{ | ||
"josh_ios15_ffs": { | ||
"description": "", | ||
"maker": "", | ||
"make_data": { | ||
"input_data_path": "/Users/jameshabben/Documents/phone-images/Josh/iOS_15_Public_Image.tar.gz", | ||
"os": "macOS-15.0-x86_64-i386-64bit", | ||
"timestamp": "2024-11-04T13:38:37.697695", | ||
"last_commit": { | ||
"hash": "de6fdbe64b57ef6f08cdcc5947c2bd89a6eb677c", | ||
"author_name": "abrignoni", | ||
"author_email": "abrignoni@gmail.com", | ||
"date": "2023-10-10T21:56:23-04:00", | ||
"message": "Timezone offset main code" | ||
} | ||
}, | ||
"artifacts": { | ||
"teamsMessages": { | ||
"search_patterns": [ | ||
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/*/Skype*.sqlite*", | ||
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/Downloads/*/Images/*" | ||
], | ||
"file_count": 34, | ||
"expected_output": { | ||
"headers": [], | ||
"data": [] | ||
} | ||
}, | ||
"teamsContacts": { | ||
"search_patterns": [ | ||
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/*/Skype*.sqlite*" | ||
], | ||
"file_count": 1, | ||
"expected_output": { | ||
"headers": [], | ||
"data": [] | ||
} | ||
}, | ||
"teamsUser": { | ||
"search_patterns": [ | ||
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/*/Skype*.sqlite*" | ||
], | ||
"file_count": 1, | ||
"expected_output": { | ||
"headers": [], | ||
"data": [] | ||
} | ||
}, | ||
"teamsCalls": { | ||
"search_patterns": [ | ||
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/*/Skype*.sqlite*" | ||
], | ||
"file_count": 1, | ||
"expected_output": { | ||
"headers": [], | ||
"data": [] | ||
} | ||
}, | ||
"teamsLocations": { | ||
"search_patterns": [ | ||
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/*/Skype*.sqlite*" | ||
], | ||
"file_count": 1, | ||
"expected_output": { | ||
"headers": [], | ||
"data": [] | ||
} | ||
} | ||
}, | ||
"image_name": "josh_ios15_ffs" | ||
} | ||
} |
120 changes: 120 additions & 0 deletions
120
admin/test/results/teams/teams.teamsCalls.josh_ios15_ffs.20241104220314.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,120 @@ | ||
{ | ||
"metadata": { | ||
"module_name": "teams", | ||
"artifact_name": "Teams Call Logs", | ||
"function_name": "teamsCalls", | ||
"case_number": "josh_ios15_ffs", | ||
"number_of_columns": 14, | ||
"number_of_rows": 5, | ||
"total_data_size_bytes": 1076, | ||
"input_zip_path": "admin/test/cases/data/teams/testdata.teams.teamsCalls.josh_ios15_ffs.zip", | ||
"start_time": "2024-11-04T22:03:14.018178+00:00", | ||
"end_time": "2024-11-04T22:03:14.110998+00:00", | ||
"run_time_seconds": 0.014806032180786133, | ||
"last_commit": { | ||
"hash": "de6fdbe64b57ef6f08cdcc5947c2bd89a6eb677c", | ||
"author_name": "abrignoni", | ||
"author_email": "abrignoni@gmail.com", | ||
"date": "2023-10-10T21:56:23-04:00", | ||
"message": "Timezone offset main code" | ||
} | ||
}, | ||
"headers": [ | ||
"Compose Timestamp", | ||
"From", | ||
"Display Name", | ||
"Content", | ||
"Call Start", | ||
"Call Connect", | ||
"Call End", | ||
"Call Direction", | ||
"Call Type", | ||
"Call State", | ||
"Call Originator", | ||
"Call Target", | ||
"Call Originator Name", | ||
"Call Participant Name" | ||
], | ||
"data": [ | ||
[ | ||
1682691710, | ||
"8:live:.cid.832804f1252ed9b2", | ||
"", | ||
"Call Logs for Call 6d8fa7a2-9a2e-4cf2-8c87-cc946fbe5663", | ||
1682691683, | ||
1682691687, | ||
1682691710, | ||
"outgoing", | ||
"twoParty", | ||
"accepted", | ||
"8:live:.cid.832804f1252ed9b2", | ||
"8:live:.cid.5638f9306b7b8594", | ||
"ThisIs DFIR", | ||
"" | ||
], | ||
[ | ||
1682691942, | ||
"8:live:.cid.832804f1252ed9b2", | ||
"", | ||
"Call Logs for Call 1019490c-938a-45be-a3ec-b10069e7c2fc", | ||
1682691917, | ||
1682691921, | ||
1682691942, | ||
"outgoing", | ||
"twoParty", | ||
"accepted", | ||
"8:live:.cid.832804f1252ed9b2", | ||
"8:live:.cid.5638f9306b7b8594", | ||
"ThisIs DFIR", | ||
"" | ||
], | ||
[ | ||
1682692211, | ||
"8:live:.cid.832804f1252ed9b2", | ||
"", | ||
"Call Logs for Call 7f99d235-02b8-4c1c-adb7-f94038019166", | ||
1682692116, | ||
1682692120, | ||
1682692211, | ||
"incoming", | ||
"twoParty", | ||
"accepted", | ||
"8:live:.cid.5638f9306b7b8594", | ||
"8:live:.cid.832804f1252ed9b2", | ||
"ThisIs DfirTwo", | ||
"" | ||
], | ||
[ | ||
1682692733, | ||
"8:live:.cid.832804f1252ed9b2", | ||
"", | ||
"Call Logs for Call c808711b-e466-4eaf-86c2-2eae9b1cc39b", | ||
1682692633, | ||
1682692636, | ||
1682692732, | ||
"outgoing", | ||
"twoParty", | ||
"accepted", | ||
"8:live:.cid.832804f1252ed9b2", | ||
"8:live:.cid.5638f9306b7b8594", | ||
"ThisIs DFIR", | ||
"" | ||
], | ||
[ | ||
1682693144, | ||
"8:live:.cid.832804f1252ed9b2", | ||
"", | ||
"Call Logs for Call 43f78ea2-b67f-4e73-af63-eeeabab8ed68", | ||
1682693035, | ||
1682693039, | ||
1682693144, | ||
"incoming", | ||
"twoParty", | ||
"accepted", | ||
"8:live:.cid.5638f9306b7b8594", | ||
"8:live:.cid.832804f1252ed9b2", | ||
"ThisIs DfirTwo", | ||
"" | ||
] | ||
] | ||
} |
74 changes: 74 additions & 0 deletions
74
admin/test/results/teams/teams.teamsContacts.josh_ios15_ffs.20241104220314.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,74 @@ | ||
{ | ||
"metadata": { | ||
"module_name": "teams", | ||
"artifact_name": "Teams Contacts", | ||
"function_name": "teamsContacts", | ||
"case_number": "josh_ios15_ffs", | ||
"number_of_columns": 3, | ||
"number_of_rows": 9, | ||
"total_data_size_bytes": 244, | ||
"input_zip_path": "admin/test/cases/data/teams/testdata.teams.teamsContacts.josh_ios15_ffs.zip", | ||
"start_time": "2024-11-04T22:03:14.111761+00:00", | ||
"end_time": "2024-11-04T22:03:14.186558+00:00", | ||
"run_time_seconds": 0.0014848709106445312, | ||
"last_commit": { | ||
"hash": "de6fdbe64b57ef6f08cdcc5947c2bd89a6eb677c", | ||
"author_name": "abrignoni", | ||
"author_email": "abrignoni@gmail.com", | ||
"date": "2023-10-10T21:56:23-04:00", | ||
"message": "Timezone offset main code" | ||
} | ||
}, | ||
"headers": [ | ||
"Display Name", | ||
"Email", | ||
"Phone Number" | ||
], | ||
"data": [ | ||
[ | ||
"ThisIs DFIRThree", | ||
"thisisdfirthree@gmail.com", | ||
"" | ||
], | ||
[ | ||
"This Is DFIR Two", | ||
"", | ||
"9198887386" | ||
], | ||
[ | ||
"This Is DFIR Two", | ||
"thisisdfirtwo@gmail.com", | ||
"" | ||
], | ||
[ | ||
"Josh Hickman", | ||
"", | ||
"9195790479" | ||
], | ||
[ | ||
"Josh Hickman", | ||
"", | ||
"9193912507" | ||
], | ||
[ | ||
"Josh Hickman", | ||
"joshuahickman957@gmail.com", | ||
"" | ||
], | ||
[ | ||
"Liz", | ||
"", | ||
"19192084530" | ||
], | ||
[ | ||
"Thom De'Fer", | ||
"", | ||
"9198027080" | ||
], | ||
[ | ||
"Apple Inc.", | ||
"", | ||
"1800MYAPPLE" | ||
] | ||
] | ||
} |
Oops, something went wrong.