Skip to content

Commit

Permalink
Merge pull request #911 from JamesHabben/main
Browse files Browse the repository at this point in the history
update teams
  • Loading branch information
JamesHabben authored Nov 4, 2024
2 parents 44c9a21 + 1dc7eb2 commit ce66473
Show file tree
Hide file tree
Showing 12 changed files with 1,533 additions and 211 deletions.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
72 changes: 72 additions & 0 deletions admin/test/cases/testdata.teams.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,72 @@
{
"josh_ios15_ffs": {
"description": "",
"maker": "",
"make_data": {
"input_data_path": "/Users/jameshabben/Documents/phone-images/Josh/iOS_15_Public_Image.tar.gz",
"os": "macOS-15.0-x86_64-i386-64bit",
"timestamp": "2024-11-04T13:38:37.697695",
"last_commit": {
"hash": "de6fdbe64b57ef6f08cdcc5947c2bd89a6eb677c",
"author_name": "abrignoni",
"author_email": "abrignoni@gmail.com",
"date": "2023-10-10T21:56:23-04:00",
"message": "Timezone offset main code"
}
},
"artifacts": {
"teamsMessages": {
"search_patterns": [
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/*/Skype*.sqlite*",
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/Downloads/*/Images/*"
],
"file_count": 34,
"expected_output": {
"headers": [],
"data": []
}
},
"teamsContacts": {
"search_patterns": [
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/*/Skype*.sqlite*"
],
"file_count": 1,
"expected_output": {
"headers": [],
"data": []
}
},
"teamsUser": {
"search_patterns": [
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/*/Skype*.sqlite*"
],
"file_count": 1,
"expected_output": {
"headers": [],
"data": []
}
},
"teamsCalls": {
"search_patterns": [
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/*/Skype*.sqlite*"
],
"file_count": 1,
"expected_output": {
"headers": [],
"data": []
}
},
"teamsLocations": {
"search_patterns": [
"*/mobile/Containers/Shared/AppGroup/*/SkypeSpacesDogfood/*/Skype*.sqlite*"
],
"file_count": 1,
"expected_output": {
"headers": [],
"data": []
}
}
},
"image_name": "josh_ios15_ffs"
}
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,120 @@
{
"metadata": {
"module_name": "teams",
"artifact_name": "Teams Call Logs",
"function_name": "teamsCalls",
"case_number": "josh_ios15_ffs",
"number_of_columns": 14,
"number_of_rows": 5,
"total_data_size_bytes": 1076,
"input_zip_path": "admin/test/cases/data/teams/testdata.teams.teamsCalls.josh_ios15_ffs.zip",
"start_time": "2024-11-04T22:03:14.018178+00:00",
"end_time": "2024-11-04T22:03:14.110998+00:00",
"run_time_seconds": 0.014806032180786133,
"last_commit": {
"hash": "de6fdbe64b57ef6f08cdcc5947c2bd89a6eb677c",
"author_name": "abrignoni",
"author_email": "abrignoni@gmail.com",
"date": "2023-10-10T21:56:23-04:00",
"message": "Timezone offset main code"
}
},
"headers": [
"Compose Timestamp",
"From",
"Display Name",
"Content",
"Call Start",
"Call Connect",
"Call End",
"Call Direction",
"Call Type",
"Call State",
"Call Originator",
"Call Target",
"Call Originator Name",
"Call Participant Name"
],
"data": [
[
1682691710,
"8:live:.cid.832804f1252ed9b2",
"",
"Call Logs for Call 6d8fa7a2-9a2e-4cf2-8c87-cc946fbe5663",
1682691683,
1682691687,
1682691710,
"outgoing",
"twoParty",
"accepted",
"8:live:.cid.832804f1252ed9b2",
"8:live:.cid.5638f9306b7b8594",
"ThisIs DFIR",
""
],
[
1682691942,
"8:live:.cid.832804f1252ed9b2",
"",
"Call Logs for Call 1019490c-938a-45be-a3ec-b10069e7c2fc",
1682691917,
1682691921,
1682691942,
"outgoing",
"twoParty",
"accepted",
"8:live:.cid.832804f1252ed9b2",
"8:live:.cid.5638f9306b7b8594",
"ThisIs DFIR",
""
],
[
1682692211,
"8:live:.cid.832804f1252ed9b2",
"",
"Call Logs for Call 7f99d235-02b8-4c1c-adb7-f94038019166",
1682692116,
1682692120,
1682692211,
"incoming",
"twoParty",
"accepted",
"8:live:.cid.5638f9306b7b8594",
"8:live:.cid.832804f1252ed9b2",
"ThisIs DfirTwo",
""
],
[
1682692733,
"8:live:.cid.832804f1252ed9b2",
"",
"Call Logs for Call c808711b-e466-4eaf-86c2-2eae9b1cc39b",
1682692633,
1682692636,
1682692732,
"outgoing",
"twoParty",
"accepted",
"8:live:.cid.832804f1252ed9b2",
"8:live:.cid.5638f9306b7b8594",
"ThisIs DFIR",
""
],
[
1682693144,
"8:live:.cid.832804f1252ed9b2",
"",
"Call Logs for Call 43f78ea2-b67f-4e73-af63-eeeabab8ed68",
1682693035,
1682693039,
1682693144,
"incoming",
"twoParty",
"accepted",
"8:live:.cid.5638f9306b7b8594",
"8:live:.cid.832804f1252ed9b2",
"ThisIs DfirTwo",
""
]
]
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,74 @@
{
"metadata": {
"module_name": "teams",
"artifact_name": "Teams Contacts",
"function_name": "teamsContacts",
"case_number": "josh_ios15_ffs",
"number_of_columns": 3,
"number_of_rows": 9,
"total_data_size_bytes": 244,
"input_zip_path": "admin/test/cases/data/teams/testdata.teams.teamsContacts.josh_ios15_ffs.zip",
"start_time": "2024-11-04T22:03:14.111761+00:00",
"end_time": "2024-11-04T22:03:14.186558+00:00",
"run_time_seconds": 0.0014848709106445312,
"last_commit": {
"hash": "de6fdbe64b57ef6f08cdcc5947c2bd89a6eb677c",
"author_name": "abrignoni",
"author_email": "abrignoni@gmail.com",
"date": "2023-10-10T21:56:23-04:00",
"message": "Timezone offset main code"
}
},
"headers": [
"Display Name",
"Email",
"Phone Number"
],
"data": [
[
"ThisIs DFIRThree",
"thisisdfirthree@gmail.com",
""
],
[
"This Is DFIR Two",
"",
"9198887386"
],
[
"This Is DFIR Two",
"thisisdfirtwo@gmail.com",
""
],
[
"Josh Hickman",
"",
"9195790479"
],
[
"Josh Hickman",
"",
"9193912507"
],
[
"Josh Hickman",
"joshuahickman957@gmail.com",
""
],
[
"Liz",
"",
"19192084530"
],
[
"Thom De'Fer",
"",
"9198027080"
],
[
"Apple Inc.",
"",
"1800MYAPPLE"
]
]
}
Loading

0 comments on commit ce66473

Please sign in to comment.