mirror of
https://github.com/overcuriousity/autopsy-flatpak.git
synced 2025-07-09 06:39:33 +00:00
Fixing typos/wording
This commit is contained in:
parent
a67593bc99
commit
c5e49b7b54
@ -1,9 +1,9 @@
|
||||
/*! \page ds_page Data Sources
|
||||
|
||||
|
||||
A data source the thing you want to analyze. It can be a disk image, some logical files, a local disk, etc. You must open a case prior to adding a data source to Autopsy.
|
||||
A data source is the thing you want to analyze. It can be a disk image, some logical files, a local disk, etc. You must open a case prior to adding a data source to Autopsy.
|
||||
|
||||
Autopsy supports three types of data sources:
|
||||
Autopsy supports four types of data sources:
|
||||
- Disk Image or VM File: A file (or set of files) that is a byte-for-byte copy of a hard drive or media card, or a virtual machine image. (see \ref ds_img)
|
||||
- Local Disk: Local storage device (local drive, USB-attached drive, etc.). (see \ref ds_local)
|
||||
- Logical Files: Local files or folders. (see \ref ds_log)
|
||||
@ -97,6 +97,6 @@ All of the files that you added in the panel will be grouped together into a sin
|
||||
To add unallocated space image files:
|
||||
-# Choose "Unallocated Space Image File" from the pull down
|
||||
-# Browse to the file
|
||||
-# Choose whether to break the image up into chunks. Breaking the image up will give better performance since the chunks can be processed in parallel, but there is a chance that potential keyword matches or carved images that occur right on the chunk boundary will be missed.
|
||||
-# Choose whether to break the image up into chunks. Breaking the image up will give better performance since the chunks can be processed in parallel, but there is a chance that keywords or carved files that span chunk boundaries will be missed.
|
||||
|
||||
*/
|
@ -21,7 +21,7 @@ Note that you can get a lot of false positives with this module. You can add you
|
||||
Ingest Settings
|
||||
------
|
||||
|
||||
In the ingest settings, the user can choose whether to run on all files, all files except text files, or only multimedia or executable files. Additionally, the user can choose to skip all files without an extenion, and to skip all known files (from the Hash Lookup module).
|
||||
In the ingest settings, the user can choose whether to run on all files, all files except text files, or only multimedia or executable files. Additionally, the user can choose to skip all files without an extension, and to skip any known files identified by the hash lookup module, if it is enabled.
|
||||
|
||||
\image html extension-mismatch-detected-ingest-settings.PNG
|
||||
|
||||
|
@ -12,7 +12,7 @@ Quick Start
|
||||
===========
|
||||
1. The Image Gallery tool can be configured to collect data about images/videos as ingest runs or all at once after ingest. To change this setting go to "Tools", "Options", "Image /Video Gallery". This setting is saved per case, but cannot be changed during ingest. See the Options window for more details
|
||||
2. Create a case as normal and add a disk image (or folder of files) as a data source. Ensure that you have the hash lookup module enabled with NSRL and known bad hashsets, the EXIF module enabled, and the File Type module enabled.
|
||||
3. Click the "View Images/Videos" button or go through "Tools", "View Images/Videos" in the menu. This will open the Autopsy Image/Video Analysis tool in a new window.
|
||||
3. Click the "View Images/Videos" button or select "View Images/Videos" in the "Tools" menu. This will open the Autopsy Image/Video Analysis tool in a new window.
|
||||
4. Groups of images will be presented as they are analyzed by the background ingest modules. You can later resort and regroup, but it is required to keep it grouped by folder while ingest is still ongoing.
|
||||
5. As each group is reviewed, the next highest priority group is presented, according to a sorting criteria (the default is the density of hash set hits).
|
||||
6. Images that were hits from hashsets, will have a dashed border around them.
|
||||
|
@ -36,7 +36,7 @@ The Lists tab is used to create/import and add content to keyword lists. Once a
|
||||
<br>
|
||||
\image html keyword-search-configuration-new-keywords.PNG
|
||||
|
||||
New entries can be typed into the dialog or pasted from the clipboard. All entries added at once must be the same type of match (exact, substring, or regex) but the dialog can be used multiple times to add keywords to the keyword list.
|
||||
New entries can be typed into the dialog or pasted from the clipboard. All entries added at once must be the same type of match (exact, substring, or regex), but the dialog can be used multiple times to add keywords to the keyword list.
|
||||
|
||||
<br>
|
||||
<b>String extraction setting</b> \n
|
||||
|
@ -22,7 +22,7 @@ You can create arbitrary tag names. Autopsy remembers your tag names from previo
|
||||
|
||||
\image html tagging-3.PNG
|
||||
|
||||
If you just want to tag the item under the default "Bookmark" tag, you can also use the keyboard shortcut control+B instead of going through the menus.
|
||||
If you just want to tag the item with the default "Bookmark" tag, you can also use the keyboard shortcut control+B instead of going through the menus.
|
||||
|
||||
You can also apply tags to groups of items at once. Select multiple items in the Blackboard, right click, and add the appropriate tag.
|
||||
Items may have more than one tag.
|
||||
|
Loading…
x
Reference in New Issue
Block a user