From 3c5d1f6522a23ec801281de4f125771882eb1a1f Mon Sep 17 00:00:00 2001 From: apriestman Date: Thu, 30 Sep 2021 14:52:26 -0400 Subject: [PATCH] Update central repo doc to reflect new artifact types. --- docs/doxygen-user/central_repo.dox | 39 +++++++++--------- .../images/central_repo_ingest_settings.png | Bin 37522 -> 38648 bytes .../images/central_repo_interesting_items.png | Bin 6477 -> 0 bytes .../images/central_repo_result_viewer.png | Bin 0 -> 15159 bytes .../images/central_repo_results.png | Bin 0 -> 13461 bytes 5 files changed, 19 insertions(+), 20 deletions(-) delete mode 100644 docs/doxygen-user/images/central_repo_interesting_items.png create mode 100644 docs/doxygen-user/images/central_repo_result_viewer.png create mode 100644 docs/doxygen-user/images/central_repo_results.png diff --git a/docs/doxygen-user/central_repo.dox b/docs/doxygen-user/central_repo.dox index 7745e4f884..009344fc5f 100644 --- a/docs/doxygen-user/central_repo.dox +++ b/docs/doxygen-user/central_repo.dox @@ -14,7 +14,7 @@ The following are some use cases for the central repository: - Finding Other Instances of a Property - If you navigate to a file or Autopsy artifact (such as a Web History item), there is a content viewer in the bottom right that will show you other instances of this property across the data stored in the central repository. - Alerting When Previously Notable Properties Occur - - You can use the central repository to record which properties were associated with files and artifacts that were evidence (or notable). Once these properties have been tagged as notable they will be added to the Interesting Items section of the tree when seen again in any future cases. + - You can use the central repository to record which properties were associated with files and artifacts that were evidence (or notable). Once these properties have been tagged as notable they will be added to the Analysis Results section of the tree when seen again in any future cases. - Storing Hash Sets - You can create and import hash sets into the central repository instead of using local copies in the \ref hash_db_page "Hash Lookup module". These hash sets are functionally equivalent to local hash sets but can be shared among multiple analysts (when using a PostgreSQL central repository). @@ -151,8 +151,9 @@ other cases/data sources where the Central Repository was run. There are three settings for the Central Repository ingest module: