mirror of
https://github.com/overcuriousity/autopsy-flatpak.git
synced 2025-07-06 21:00:22 +00:00
3744 intial documentation of quick search feature added to doxygen
This commit is contained in:
parent
fa621583e9
commit
45dc03758e
@ -34,7 +34,7 @@ To open a case, either:
|
||||
|
||||
"Open Recent Case" will always bring up a screen allowing you to select one of the recently opened cases. "Open Case" will do one of two things;
|
||||
- If multi-user cases are not enabled, it will bring up a file chooser that can be used to browse to the ".aut" file in the case directory of the desired case
|
||||
- If multi-user case are enabled, it will bring up the multi-user case selection screen. This uses the coordination services to find a list of multi-user cases. If needed, the "Open Single-User Case" button can be used to bring up the normal file chooser. The following shows the multi-user case selection screen:
|
||||
- If multi-user case are enabled, it will bring up the multi-user case selection screen. This uses the coordination services to find a list of multi-user cases. If needed, the "Open Single-User Case" button can be used to bring up the normal file chooser. The multi-user case selection screen has a \ref quick_search feature which can be used to quickly find a case in the table. The following shows the multi-user case selection screen:
|
||||
|
||||
\image html multi_user_case_select.png
|
||||
|
||||
|
@ -20,6 +20,8 @@ The middle column displays each account, its device and type, and the number of
|
||||
|
||||
Selecting an account in the middle column will bring up the messages for that account in the right hand column. Here data about each message is displayed in the top section, and the messages itself can be seen in the bottom section (if applicable).
|
||||
|
||||
The middle column and the right hand column both have a \ref quick_search feature which can be used to quickly find a visible item in their section's table.
|
||||
|
||||
\image html cvt_messages.png
|
||||
|
||||
*/
|
25
docs/doxygen-user/quick_search.dox
Normal file
25
docs/doxygen-user/quick_search.dox
Normal file
@ -0,0 +1,25 @@
|
||||
/*! \page quick_search Quick Search
|
||||
|
||||
Where it can be used
|
||||
========
|
||||
|
||||
- The tree view (at the left of the main window)
|
||||
- The table view (in the results listing)
|
||||
- The open multi user case panel
|
||||
- The Auto Ingest Dashboard’s three job information panels
|
||||
- The Timeline tool’s table view
|
||||
- The Communication tool’s browse panel
|
||||
- The Communication tool’s message panel
|
||||
|
||||
How to use it
|
||||
=======
|
||||
|
||||
In order to use the search you need to select any item in the area you wish to search, and start typing what you are searching for. If the area you have selected is a search-able area a search field will appear at the bottom of the area. As you type the string you are searching for it will auto-update to select one of the results which matches your string. You can switch between the results which match the string you have typed with the up and down keys.
|
||||
|
||||
|
||||
Configuration
|
||||
======
|
||||
By default the search will match against the data in all fields which are currently visible in that area. By default the search will also ignore case. If you want to change either of these default behaviors you can click the spyglass with down area icon and configure which columns will be searched as well as if the search should ignore case. The search does not support the use of regular expressions but will match against any sub-sting in the fields it searches, not just at the beginning of the field.
|
||||
|
||||
|
||||
*/
|
@ -59,6 +59,8 @@ If you are viewing files from the Views and Results nodes, you can right-click o
|
||||
|
||||
If you want to search for single keywords, then you can use the search box in the upper right of the program. The results will be shown in a table in the upper right.
|
||||
|
||||
The tree on the left as well as the table on the right have a \ref quick_search feature which can be used to quickly find a visible node.
|
||||
|
||||
You can tag (bookmark) arbitrary files so that you can more quickly find them later or so that you can include them specifically in a report.
|
||||
|
||||
\subsection s2a Ingest Inbox
|
||||
|
@ -69,6 +69,7 @@ The __Counts View__ shows a stacked bar chart. Use this type of graph to show ho
|
||||
|
||||
The __Details View__ shows individual or groups of related events. Date/time is represented horizontally along the x-axis, but the vertical axis does not represent any specific units. You would use this interface to answer questions about what specific events happened in a given time frame or what events occurred before or after a given event. You would generally use this type of interface after using the Counts View to identify a period of time that you wanted details on. There can be a lot of details in this view and we have introduced zooming concepts, as described in the next section, to help with this.
|
||||
|
||||
The table on the bottom left hand side of the panel has a \ref quick_search feature which can be used to quickly find a node in the table.
|
||||
|
||||
Visualization settings
|
||||
----------------------
|
||||
|
Loading…
x
Reference in New Issue
Block a user