mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-19 19:14:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5261 from APriestman/5489_addLogicalFileSetExample

Browse Source 
Added example of a folder as a logical file set
This commit is contained in:
Richard Cordovano 2019-09-25 09:47:19 -04:00 committed by GitHub
commit 13d669436f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/doxygen-user/command_line_ingest.dox
View File

@ -80,6 +80,13 @@ autopsy64.exe --caseDir="C:\work\cases\test6_2019_09_20_13_00_51" --addDataSourc
--dataSourcePath="R:\work\images\green_images.img" --dataSourcePath="R:\work\images\green_images.img"
\endverbatim \endverbatim
Finally we'll add a folder ("Test files") as a logical file set to a new case ("test9").
\verbatim
autopsy64.exe --createCase --caseName="test9" --caseBaseDir="C:\work\Cases" --addDataSource
--dataSourcePath="R:\work\images\Test files" --runIngest
\endverbatim
\subsection command_line_existing_ds Running Ingest on an Existing Data Source \subsection command_line_existing_ds Running Ingest on an Existing Data Source
You can run ingest on a data source already in the case if you know its object ID. To find this, go to the case folder and open the "Command Output" folder. You can run ingest on a data source already in the case if you know its object ID. To find this, go to the case folder and open the "Command Output" folder.