[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sleuthkit-users
Subject:    Re: [sleuthkit-users] Autopsy reporting
From:       anthony snow <anthony.j.snow () gmail ! com>
Date:       2014-09-10 15:30:34
Message-ID: 5B61C42A-71D3-4788-B3D1-09A6F1CDB45D () gmail ! com
[Download RAW message or body]

Good morning Brian,
Let me preface this by saying I’m new to the field and new to Autopsy, so I may just \
be missing a simple tweak somewhere.  For the metadata: The Recent Documents page is \
laid out a little better in that it shows the path and the created date. An \
accessed/modified date would, I think, be a good addition. As far as the tagged \
files/results, the fact that they are all lumped together isn’t a huge problem but it \
might be easier to have them separated in the explorer pane. Then add the metadata in \
addition to the file name. 

The image hash could be added to the “Image Info” on the case summary page. 

Thanks
AJS

On Sep 9, 2014, at 9:54 PM, Brian Carrier <carrier@sleuthkit.org> wrote:

> Hi Anthony, 
> 
> What exactly are the requests:
> 
> 1) In the file tags page, include the file metadata in addition to just file name?
> 2) Where do you want hash?  In the file tags page?
> 
> brian
> 
> On Sep 5, 2014, at 3:22 PM, anthony snow <anthony.j.snow@gmail.com> wrote:
> 
> > Good afternoon,
> > 
> > I’m starting to use Autopsy as my main suite vs EnCase and since my IEF trial ran \
> > out, but it was pointed out to me that file metadata is not included in the html \
> > report. Also, there is no hash in the report. I’m finding that the reporting is \
> > not very flexible at this point. What good is separating the evidence into \
> > separate tags if its just going to report it all under one “tagged files” link? 
> > Any word on a fix for this? I tried using the excel report but it puts in more \
> > info into the report than I want it to.  
> > What are others doing to work around this?
> > 
> > 
> > Thank you
> > AJS
> > ------------------------------------------------------------------------------
> > Slashdot TV.  
> > Video for Nerds.  Stuff that matters.
> > http://tv.slashdot.org/
> > _______________________________________________
> > sleuthkit-users mailing list
> > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> > http://www.sleuthkit.org
> 


------------------------------------------------------------------------------
Want excitement?
Manually upgrade your production database.
When you want reliability, choose Perforce
Perforce version control. Predictably reliable.
http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk
_______________________________________________
sleuthkit-users mailing list
https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
http://www.sleuthkit.org


[prev in list] [next in list] [prev in thread] [next in thread]