mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-06 21:00:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Updated javahelp

Browse Source
This commit is contained in:
Brian Carrier 2012-04-11 13:35:49 -04:00
parent 3f8cea8c4f
commit e805d4898c
32 changed files with 562 additions and 782 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

81
Case/javahelp/org/sleuthkit/autopsy/casemodule/docs/aboutImage.html
View File

@ -1,51 +1,30 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>About Image</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>About Images</h2>
<p>
In Autopsy, an "Image" refers to the "Disk Image". Before an image can be analyzed, it must be added to a <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/casemodule-about.html">case</a>.
</p>
<p>Autopsy creates a database for each image that it imports. This database is a SQLite database and it contains all of the file system metadata from the image. When adding an image, it will take a little bit of time to populate the database. The database is stored in the case directory, but the image will stay in its original location.</p>
<h2>Supported Formats</h2>
<p>
Currently, Autopsy only supports these formats of image:
<ul type="circle">
<li>Raw Single (For example: *.img, *.dd, etc)</li>
<li>Raw Split (For example: *.001, *.002, *.aa, *.ab, etc)</li>
<li>EnCase (For example: *.e01, *e02, etc)</li>
</ul>
<h2>Adding an Image</h2>
<p>
To see how to add image to the current opened case, click <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/addImage.html">here</a>.
</p>
<h2>Removing an Image</h2>
<p>
You can remove an image in the <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/caseProperties.html">Case Properties</a> window.
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Disk Image Basics</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>About Disk Images</h2>
<p>
In Autopsy, an "image" refers to a byte-for-byte copy of a hard drive or other storage media. To analyze an image, you must use the <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/addImage.html">Add Image Wizard</a>to add it to a <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/casemodule-about.html">case</a>.
</p>
<p>Autopsy populates an embedded database for each image that it imports. This database is a SQLite database and it contains all of the file system metadata from the image. The database is stored in the case directory, but the image will stay in its original location. The image must remain accessible for the duration of the anlaysis because the database contains only basic file system information. The image is needed to retrieve file content.</p>
<h2>Supported Formats</h2>
<p>
Currently, Autopsy supports these image formats:
<ul type="circle">
<li>Raw Single (For example: *.img, *.dd, etc)</li>
<li>Raw Split (For example: *.001, *.002, *.aa, *.ab, etc)</li>
<li>EnCase (For example: *.e01, *e02, etc)</li>
</ul>
<h2>Removing an Image</h2>
<p>
You cannot currently remove an image from a case.
</p>
</body>
</html>

74
Case/javahelp/org/sleuthkit/autopsy/casemodule/docs/addImage.html
View File

@ -1,45 +1,29 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Adding An Image</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Adding An Image</h2>
<p>
There are several ways to add an image to the currently opened case:
<ul type="circle">
<li>Go to "File" and select "Add Image..." </li>
<li>Select the <img src="addImage-icon.png" alt="Add Image Icon" /> icon on the toolbar</li>
</ul>
<p>
After that, a "Add Image" wizard dialog will show up. Then follow these following steps:</p>
<ul>
<li>Select "Image Type", then enter the "Image Path" to the image that you want to analyze (you can also use the "Browse" button to browse the location of your image). Also specify the timezone that you want. When everything is completed, press "Next" button.<br><br>
&nbsp; &nbsp; <img src="AddImageWizard1_Help.png" alt="Add Image Wizard Panel 1 Help" /> </li>
<li>Autopsy needs to analyze the image to populate its database with file system metadata. If you have configured hash databases, you will be given the option of looking up files in the hash database during the ingest. Press the "Create Database" button to create the database. When the database creation process is done, you can press the "Next" button.<br><br>
&nbsp; &nbsp; <img src="AddImageWizard2_Help.png" alt="Add Image Wizard Panel 2 Help" /> </li>
<li>After the database is created, the image can be analyzed. You will be given the option to add another image or start the analysis. <br><br>
&nbsp; &nbsp; <img src="AddImageWizard3_Help.png" alt="Add Image Wizard Panel 3 Help" /> </li>
</ul>
<p>Note that Autopsy will store the path to the image in its configuration file. If the image moves, then Autopsy will give an error because it can't find the image file.
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Adding Image Wizard</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Adding An Image</h2>
<p>
There are two ways to add an image to the currently opened case:
<ul type="circle">
<li>Go to "File" and select "Add Image..." </li>
<li>Select the <img src="addImage-icon.png" alt="Add Image Icon" /> icon on the toolbar</li>
</ul>
<p>
This will bring up the Add Image wizard. It will guide you through the process. Here are some notes on what is going on during the process:</p>
<ul>
<li>The first panel will ask for the location and type of the disk image to add. You will also need to specify the timezone that the disk image came from so that the dates and times can be properly displayed and converted. <br><br>
&nbsp; &nbsp; <img src="AddImageWizard1_Help.png" alt="Add Image Wizard Panel 1 Help" /> </li>
<li>The second panel is when Autopsy is analyzing the disk image and populating the database with basic information. This can take a few minutes for large images. <br>
&nbsp; &nbsp; <img src="AddImageWizard2_Help.png" alt="Add Image Wizard Panel 2 Help" /> </li>
<li>The third panel allows you to choose which ingest modules to run on the image. Refer to the <a href="nbdocs:/org/sleuthkit/autopsy/ingest/docs/ingest-about.html">Image Ingest</a> part of the help guide for more details. </li>
<li>Once you select the ingest modules that you want to use, they will run in the background. You can choose to add another image or exit the Add Image wizard. </li>
</ul>
<p>Note that Autopsy will store the path to the image in its configuration file. If the image moves, then Autopsy will give an error because it can't find the image file.
</body>
</html>

76
Case/javahelp/org/sleuthkit/autopsy/casemodule/docs/casemodule-about.html
View File

@ -1,50 +1,26 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<html>
<head>
<title>About Cases</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>About Cases</h2>
<p>
In Autopsy, a "case" is a container concept for a set of <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/aboutImage.html">images</a>. The set of images could be from multiple drives in a single computer or from multiple computers. When you make a case, it will create a directory to hold all of the information. The directory will contain a configuration file, some databases, and some other information.
</p>
<h2>Creating a Case</h2>
<p>
Refer to the <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/createNewCase.html">Creating a Case</a> page for more details.
</p>
<h2>Opening a Case</h2>
<p>
There are three ways to open a case:
<ul>
<li>Go to "File" and then select "Open Case..."</li>
<li>Select the <img src="open-icon.png" alt="Open Case Icon" /> icon on the toolbar</li>
<li>Press "Ctrl + O" on the keyboard</li>
</ul>
<p>
After that, a File Chooser dialog will show up. Then select a ".aut" file that you previously created. It will be in the case folder.
</p>
<h2>What's Next?</h2>
<p>After you create a case, you can <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/addImage.html">add an image</a> to the case. </p>
<p>If you want to view case details or edit some case information, use the <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/caseProperties.html">Case Properties</a> window.
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<html>
<head>
<title>About Cases</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>About Cases</h2>
<p>
In Autopsy, a "case" is a container concept for a set of <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/aboutImage.html">images</a>. The set of images could be from multiple drives in a single computer or from multiple computers. When you make a case, it will create a directory to hold all of the information. The directory will contain a configuration file, some databases, and some other information. The configuration file as a .aut extension.
</p>
<p>If you want to view case details or edit some case information, use the <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/caseProperties.html">Case Properties</a> window.
<h2>Creating a Case</h2>
<p>
Refer to the <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/createNewCase.html">Creating a Case</a> page for more details.
</p>
<h2>Opening a Case</h2>
<p>
To open a case, choose "Open Case" from the File menu or use the "Ctrl + O" keyboard short cut.
Navigate to the case directory and select the ".aut" file.
</p>
</body>
</html>

97
Case/javahelp/org/sleuthkit/autopsy/casemodule/docs/hashDbMgmt.html
View File

@ -1,50 +1,47 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Hash Database Management</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Hash Database Management Window</h2>
<p>
The Hash Database Management window is where you can set and update your hash database information. Hash databases are used to identify files that are 'known'.
<ul>
<li>Known good files are those that can be safely ignored. This set of files frequently includes standard OS and application files. </li>
<li>Known bad files are those that should raise awareness. This set will vary depending on the type of investigation, but common examples include contraband images and malware.</li>
</ul>
</p>
<p>Autopsy allows for a single known bad hash database to be set and the <a href="http://www.nsrl.nist.gov">NIST NSRL</a>. Before they can be used, an index of them must exist.
The index can be directly copied in or it can be created within Autopsy. When you select the database from within this window, it will tell you if the index needs to be created. Autopsy
uses the hash database management system from The Sleuth Kit. You can manually create an index using the 'hfind' command line tool.</p>
<p>Note that the NSRL contains hashes of 'known files' that may be good or bad depending on your perspective and investigation type. For example, the existence of a piece of financial software
may be interesting to your investigation and that software could be in the NSRL. Therefore, Autopsy treats files that are found in the NSRL as simplyi 'known' and does not specify good or bad. </p>
<p>To use the NSRL, you must concatenate all of the NSRLFile.txt files together. You can use 'cat' on a Unix system or from within Cygwin to do this.</p>
<p>The 'known bad' hash database can be in the hashkeeper, md5sum, or NSRL format.</p>
<p>Autopsy uses hash databases when the image is added to the case. Each file is hashed and looked up in the configured databases. If the file is found in the NSRL, then it will be marked as
'known' in the case database. If it is found in the known bad hash database, it will be marked as 'known bad' in the case database. </p>
<p>You can see the lookup results in a couple of places. In the <a href="nbdocs:/org/sleuthkit/autopsy/filesearch/docs/open-filesearch.html">File Search</a> data explorer, there is an option to choose the 'known status'. From here, you can do a search to see all 'known bad' files.
From here, you can also choose to ignore all 'known' files that were found in the NSRL. You can also see the status of the file in a column when the file is listed. </p>
<p>Currently, you cannot reprocess a disk image with a new hash database after it has been added to a case.</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Hash Database Management</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Hash Database Management Window</h2>
<p>
The Hash Database Management window is where you can set and update your hash database information. Hash databases are used to identify files that are 'known'.
<ul>
<li>Known good files are those that can be safely ignored. This set of files frequently includes standard OS and application files. </li>
<li>Known bad (also called notable) files are those that should raise awareness. This set will vary depending on the type of investigation, but common examples include contraband images and malware.</li>
</ul>
</p>
<h2>Notable / Known Bad Hashsets</h2>
<p>Autopsy allows for a single known bad hash database to be set. Future versions will support multiple hash sets. Autopsy supports three formats:
<ul>
<li>EnCase: An EnCase hashset file. </li>
<li>MD5sum: Output from running the md5, md5sum, or md5deep program on a set of files.</li
<li>HashKeeper: Hashkeeper hashsets (Must be merged into a single file).</li>
</ul>
<h2>NIST NSRL</h2>
<p>Autopsy can use the <a href="http://www.nsrl.nist.gov">NIST NSRL</a> to detect 'known files'. Note that the NSRL contains hashes of 'known files' that may be good or bad depending on your perspective and investigation type. For example, the existence of a piece of financial software
may be interesting to your investigation and that software could be in the NSRL. Therefore, Autopsy treats files that are found in the NSRL as simplyi 'known' and does not specify good or bad. Ingest modules have the option of ignoring files that were found in the NSRL.</p>
<p>To use the NSRL, you must concatenate all of the NSRLFile.txt files together. You can use 'cat' on a Unix system or from within Cygwin to do this.</p>
<h2>Adding Hashsets</h2>
<p>Autopsy needs an index of the hashset. It can make one if you import only the hashset. When you select the database from within this window, it will tell you if the index needs to be created. Autopsy
uses the hash database management system from The Sleuth Kit. You can manually create an index using the 'hfind' command line tool.</p>
<p>You can also specify only the index file and not use the full hashset. This can save space. To do this, specify the .idx file from the Hash Database Management window. </p>
<h2>Using Hashsets</h2>
<p>There is an <a href="nbdocs:/org/sleuthkit/autopsy/ingest/docs/ingest-about.html">ingest module</a> that will hash the files and look them up in the hashsets. It will flag files that were in the notable hashset and those results will be shown in the Results tree of the <a href="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/directorytree-about.html">Data Explorer</a>.
<p>Other ingest modules are able to use the known status of a file to decide if they should ignore the file or process it.</a>
<p>You can also see the results in the <a href="nbdocs:/org/sleuthkit/autopsy/filesearch/docs/open-filesearch.html">File Search</a> window. There is an option to choose the 'known status'. From here, you can do a search to see all 'known bad' files.
From here, you can also choose to ignore all 'known' files that were found in the NSRL. You can also see the status of the file in a column when the file is listed. </p>
</body>
</html>

4
Case/javahelp/org/sleuthkit/autopsy/casemodule/docs/overview.html Normal file → Executable file
View File

@ -19,12 +19,12 @@ and open the template in the editor.
<p>The main window has three major areas:
<ul>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataexplorer-about.html">Data Explorers</a> (area 4 in figure below): This area is where you go find major analysis functionality. It allows you to start finding the relevant files.</li>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataexplorer-about.html">Data Explorer Tree</a> (area 4 in figure below): This area is where you go find major analysis functionality. It allows you to start finding the relevant files quickly.</li>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataresult-about.html">Result Viewers</a> (area 5 in figure below): This area is where the files and directories that were found from the explorer window can be viewed. There are different formatting options for the files.</li>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/datacontent-about.html">Content Viewers</a> (area 6 in figure below): This area is where file content can be viewed after they are selected from the Result Viewer area.</li>
</ul>
</p>
<p>The main take away from this should be that analysis techniques can be found on the left-hand side, the results are always listed in the upper right, and the file contents are displayed in the lower left.
<p>The main take away from this should be that analysis techniques and result categories can be found on the left-hand side, the results from choosing something on the left are always listed in the upper right, and the file contents are displayed in the lower left.
<p>
<img src="Autopsy_overview.png" alt="Autopsy Overview Window" />

56
CoreComponents/javahelp/org/sleuthkit/autopsy/corecomponents/docs/corecomponents-about.html
View File

@ -1,30 +1,26 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<html>
<head>
<title>About CoreComponents</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>About CoreComponents</h2>
<p>
<!-- TODO describe your module, add more pages... -->
Contains data result and data content.
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<html>
<head>
<title>About CoreComponents</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>About CoreComponents</h2>
<p>
<!-- TODO describe your module, add more pages... -->
Contains data result and data content.
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->

61
CoreComponents/javahelp/org/sleuthkit/autopsy/corecomponents/docs/corecomponents-idx.xml
View File

@ -1,31 +1,30 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE index PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp Index Version 2.0//EN" "http://java.sun.com/products/javahelp/index_2_0.dtd">
<index version="2.0">
<indexitem text="About CoreComponents" target="org.sleuthkit.autopsy.corecomponents.about"/>
<indexitem text="About Result Viewers" target="org.sleuthkit.autopsy.corecomponents.dataresult-about"/>
<indexitem text="About Content Viewers" target="org.sleuthkit.autopsy.corecomponents.datacontent-about"/>
<indexitem text="About Data Explorers" target="org.sleuthkit.autopsy.corecomponents.dataexplorer-about"/>
<indexitem text="About Directory Tree" target="org.sleuthkit.autopsy.directorytree.about"/>
<indexitem text="How to Open Directory Tree" target="org.sleuthkit.autopsy.directorytree.open-directorytree"/>
<indexitem text="How to Use Directory Tree" target="org.sleuthkit.autopsy.directorytree.how-to-use-directorytree"/>
<indexitem text="Image Details Window" target="org.sleuthkit.autopsy.directorytree.image-details"/>
<indexitem text="Volume Details Window" target="org.sleuthkit.autopsy.directorytree.volume-details"/>
<indexitem text="File System Details Window" target="org.sleuthkit.autopsy.directorytree.filesystem-details"/>
<indexitem text="About File Search" target="org.sleuthkit.autopsy.filesearch.about"/>
<indexitem text="How to Open File Search" target="org.sleuthkit.autopsy.filesearch.open-filesearch"/>
<indexitem text="How to Use File Search" target="org.sleuthkit.autopsy.filesearch.how-to-use-filesearch"/>
<indexitem text="About Result Viewers" target="org.sleuthkit.autopsy.corecomponents.dataresult-about"/>
<indexitem text="Table Results Viewer" target="org.sleuthkit.autopsy.corecomponents.table-results-viewer"/>
<indexitem text="Thumbnail Result Viewer" target="org.sleuthkit.autopsy.corecomponents.thumbnail-results-viewer"/>
<indexitem text="Hex Content Viewer" target="org.sleuthkit.autopsy.corecomponents.hex-content-viewer"/>
<indexitem text="String Content Viewer" target="org.sleuthkit.autopsy.corecomponents.string-content-viewer"/>
<indexitem text="Picture Content Viewer" target="org.sleuthkit.autopsy.corecomponents.picture-content-viewer"/>
</index>
<?xml version="1.0" encoding="UTF-8"?>
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE index PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp Index Version 2.0//EN" "http://java.sun.com/products/javahelp/index_2_0.dtd">
<index version="2.0">
<indexitem text="About CoreComponents" target="org.sleuthkit.autopsy.corecomponents.about"/>
<indexitem text="About Result Viewers" target="org.sleuthkit.autopsy.corecomponents.dataresult-about"/>
<indexitem text="About Content Viewers" target="org.sleuthkit.autopsy.corecomponents.datacontent-about"/>
<indexitem text="About Data Explorers" target="org.sleuthkit.autopsy.corecomponents.dataexplorer-about"/>
<indexitem text="About Directory Tree" target="org.sleuthkit.autopsy.directorytree.about"/>
<indexitem text="Image Details Window" target="org.sleuthkit.autopsy.directorytree.image-details"/>
<indexitem text="Volume Details Window" target="org.sleuthkit.autopsy.directorytree.volume-details"/>
<indexitem text="File System Details Window" target="org.sleuthkit.autopsy.directorytree.filesystem-details"/>
<indexitem text="About File Search" target="org.sleuthkit.autopsy.filesearch.about"/>
<indexitem text="How to Open File Search" target="org.sleuthkit.autopsy.filesearch.open-filesearch"/>
<indexitem text="How to Use File Search" target="org.sleuthkit.autopsy.filesearch.how-to-use-filesearch"/>
<indexitem text="About Result Viewers" target="org.sleuthkit.autopsy.corecomponents.dataresult-about"/>
<indexitem text="Table Results Viewer" target="org.sleuthkit.autopsy.corecomponents.table-results-viewer"/>
<indexitem text="Thumbnail Result Viewer" target="org.sleuthkit.autopsy.corecomponents.thumbnail-results-viewer"/>
<indexitem text="Hex Content Viewer" target="org.sleuthkit.autopsy.corecomponents.hex-content-viewer"/>
<indexitem text="String Content Viewer" target="org.sleuthkit.autopsy.corecomponents.string-content-viewer"/>
<indexitem text="Text Content Viewer" target="org.sleuthkit.autopsy.corecomponents.text-content-viewer"/>
<indexitem text="Media Content Viewer" target="org.sleuthkit.autopsy.corecomponents.picture-content-viewer"/>
</index>

55
CoreComponents/javahelp/org/sleuthkit/autopsy/corecomponents/docs/corecomponents-map.xml
View File

@ -1,28 +1,27 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE map PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp Map Version 2.0//EN" "http://java.sun.com/products/javahelp/map_2_0.dtd">
<map version="2.0">
<mapID target="org.sleuthkit.autopsy.directorytree.about" url="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/directorytree-about.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.open-directorytree" url="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/open-directorytree.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.how-to-use-directorytree" url="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/how-to-use-directorytree.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.image-details" url="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/image-details.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.volume-details" url="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/volume-details.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.filesystem-details" url="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/filesystem-details.html"/>
<mapID target="org.sleuthkit.autopsy.filesearch.about" url="nbdocs:/org/sleuthkit/autopsy/filesearch/docs/filesearch-about.html"/>
<mapID target="org.sleuthkit.autopsy.filesearch.open-filesearch" url="nbdocs:/org/sleuthkit/autopsy/filesearch/docs/open-filesearch.html"/>
<mapID target="org.sleuthkit.autopsy.filesearch.how-to-use-filesearch" url="nbdocs:/org/sleuthkit/autopsy/filesearch/docs/how-to-use-filesearch.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.about" url="corecomponents-about.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.dataexplorer-about" url="dataexplorer-about.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.dataresult-about" url="dataresult-about.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.datacontent-about" url="datacontent-about.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.table-results-viewer" url="table-results-viewer.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.thumbnail-results-viewer" url="thumbnail-results-viewer.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.hex-content-viewer" url="hex-content-viewer.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.string-content-viewer" url="string-content-viewer.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.picture-content-viewer" url="picture-content-viewer.html"/>
</map>
<?xml version="1.0" encoding="UTF-8"?>
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE map PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp Map Version 2.0//EN" "http://java.sun.com/products/javahelp/map_2_0.dtd">
<map version="2.0">
<mapID target="org.sleuthkit.autopsy.directorytree.about" url="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/directorytree-about.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.image-details" url="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/image-details.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.volume-details" url="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/volume-details.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.filesystem-details" url="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/filesystem-details.html"/>
<mapID target="org.sleuthkit.autopsy.filesearch.about" url="nbdocs:/org/sleuthkit/autopsy/filesearch/docs/filesearch-about.html"/>
<mapID target="org.sleuthkit.autopsy.filesearch.open-filesearch" url="nbdocs:/org/sleuthkit/autopsy/filesearch/docs/open-filesearch.html"/>
<mapID target="org.sleuthkit.autopsy.filesearch.how-to-use-filesearch" url="nbdocs:/org/sleuthkit/autopsy/filesearch/docs/how-to-use-filesearch.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.about" url="corecomponents-about.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.dataexplorer-about" url="dataexplorer-about.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.dataresult-about" url="dataresult-about.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.datacontent-about" url="datacontent-about.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.table-results-viewer" url="table-results-viewer.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.thumbnail-results-viewer" url="thumbnail-results-viewer.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.hex-content-viewer" url="hex-content-viewer.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.string-content-viewer" url="string-content-viewer.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.text-content-viewer" url="text-content-viewer.html"/>
<mapID target="org.sleuthkit.autopsy.corecomponents.picture-content-viewer" url="picture-content-viewer.html"/>
</map>

76
CoreComponents/javahelp/org/sleuthkit/autopsy/corecomponents/docs/corecomponents-toc.xml
View File

@ -1,45 +1,31 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE toc PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp TOC Version 2.0//EN" "http://java.sun.com/products/javahelp/toc_2_0.dtd">
<toc version="2.0">
<tocitem text="Data Explorers">
<tocitem text="About Data Explorers" target="org.sleuthkit.autopsy.corecomponents.dataexplorer-about"/>
<tocitem text="Directory Tree">
<tocitem text="About Directory Tree" target="org.sleuthkit.autopsy.directorytree.about"/>
<tocitem text="How to Open Directory Tree" target="org.sleuthkit.autopsy.directorytree.open-directorytree"/>
<tocitem text="How to Use Directory Tree" target="org.sleuthkit.autopsy.directorytree.how-to-use-directorytree"/>
<tocitem text="Image Details Window" target="org.sleuthkit.autopsy.directorytree.image-details"/>
<tocitem text="Volume Details Window" target="org.sleuthkit.autopsy.directorytree.volume-details"/>
<tocitem text="File System Details Window" target="org.sleuthkit.autopsy.directorytree.filesystem-details"/>
</tocitem>
<tocitem text="File Search">
<tocitem text="About File Search" target="org.sleuthkit.autopsy.filesearch.about"/>
<tocitem text="How to Open File Search" target="org.sleuthkit.autopsy.filesearch.open-filesearch"/>
<tocitem text="How to Use File Search" target="org.sleuthkit.autopsy.filesearch.how-to-use-filesearch"/>
</tocitem>
</tocitem>
<tocitem text="Result Viewers">
<tocitem text="About Result Viewers" target="org.sleuthkit.autopsy.corecomponents.dataresult-about"/>
<tocitem text="Table Results Viewer">
<tocitem text="Table Results Viewer" target="org.sleuthkit.autopsy.corecomponents.table-results-viewer"/>
</tocitem>
<tocitem text="Thumbnail Results Viewer">
<tocitem text="Thumbnail Result Viewer" target="org.sleuthkit.autopsy.corecomponents.thumbnail-results-viewer"/>
</tocitem>
</tocitem>
<tocitem text="Content Viewers">
<tocitem text="About Content Viewers" target="org.sleuthkit.autopsy.corecomponents.datacontent-about"/>
<tocitem text="Hex Content Viewer">
<tocitem text="Hex Content Viewer" target="org.sleuthkit.autopsy.corecomponents.hex-content-viewer"/>
</tocitem>
<tocitem text="String Content Viewer">
<tocitem text="String Content Viewer" target="org.sleuthkit.autopsy.corecomponents.string-content-viewer"/>
</tocitem>
<tocitem text="Picture Content Viewer">
<tocitem text="Picture Content Viewer" target="org.sleuthkit.autopsy.corecomponents.picture-content-viewer"/>
</tocitem>
</tocitem>
</toc>
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE toc PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp TOC Version 2.0//EN" "http://java.sun.com/products/javahelp/toc_2_0.dtd">
<toc version="2.0">
<tocitem text="Data Explorers">
<tocitem text="About Data Explorers" target="org.sleuthkit.autopsy.corecomponents.dataexplorer-about"/>
<tocitem text="Directory Tree">
<tocitem text="About Directory Tree" target="org.sleuthkit.autopsy.directorytree.about"/>
<tocitem text="Image Details Window" target="org.sleuthkit.autopsy.directorytree.image-details"/>
<tocitem text="Volume Details Window" target="org.sleuthkit.autopsy.directorytree.volume-details"/>
<tocitem text="File System Details Window" target="org.sleuthkit.autopsy.directorytree.filesystem-details"/>
</tocitem>
<tocitem text="File Search">
<tocitem text="About File Search" target="org.sleuthkit.autopsy.filesearch.about"/>
<tocitem text="How to Open File Search" target="org.sleuthkit.autopsy.filesearch.open-filesearch"/>
<tocitem text="How to Use File Search" target="org.sleuthkit.autopsy.filesearch.how-to-use-filesearch"/>
</tocitem>
</tocitem>
<tocitem text="Result Viewers">
<tocitem text="About Result Viewers" target="org.sleuthkit.autopsy.corecomponents.dataresult-about"/>
<tocitem text="Table Results Viewer" target="org.sleuthkit.autopsy.corecomponents.table-results-viewer"/>
<tocitem text="Thumbnail Result Viewer" target="org.sleuthkit.autopsy.corecomponents.thumbnail-results-viewer"/>
</tocitem>
<tocitem text="Content Viewers">
<tocitem text="About Content Viewers" target="org.sleuthkit.autopsy.corecomponents.datacontent-about"/>
<tocitem text="Hex Content Viewer" target="org.sleuthkit.autopsy.corecomponents.hex-content-viewer"/>
<tocitem text="String Content Viewer" target="org.sleuthkit.autopsy.corecomponents.string-content-viewer"/>
<tocitem text="Text Content Viewer" target="org.sleuthkit.autopsy.corecomponents.text-content-viewer"/>
<tocitem text="Media Content Viewer" target="org.sleuthkit.autopsy.corecomponents.picture-content-viewer"/>
</tocitem>
</toc>

82
CoreComponents/javahelp/org/sleuthkit/autopsy/corecomponents/docs/datacontent-about.html
View File

@ -1,45 +1,37 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>About Content Viewers</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>About Content Viewers</h2>
<p>
The "Content Viewers" are in the lower right area of the interface. They allow you to view raw data. The data being shown should be have been selected from a <a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataresult-about.html">Result Viewer</a> window (upper right).
</p>
<p>
Currently, there are 3 main tabs on "Content Viewer" window:
<ul>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/hex-content-viewer.html">Hex Content Viewer</a></li>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/string-content-viewer.html">String Content Viewer</a></li>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/picture-content-viewer.html">Picture Content Viewer</a></li>
</ul>
</p>
<h2>Example</h2>
<p>
Here's one of the example of a "Content Viewer" window:
<br>
&nbsp;&nbsp;&nbsp;&nbsp; <img src="ContentViewer_example.png" alt="Example of Content Viewer Window" />
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>About Content Viewers</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Content Viewers</h2>
<p>
The Content Viewer area is in the lower right area of the interface. This area is used to view a specific file in a variety of formats. There are different tabs for different viewers. Not all tabs support all file types, so only some of them will be enabled. To display data in this area, it must be selected from the <a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataresult-about.html">Result Viewer</a> window (upper right).
</p>
<p>The Content Viewer area is part of a plug-in framework. You can install modules that will add more viewer types. This section describes the viewers that come by default with Autopsy.</p>
<p>Here's an example of a "Content Viewer" window:</p>
<br>
&nbsp;&nbsp;&nbsp;&nbsp; <img src="ContentViewer_example.png" alt="Example of Content Viewer Window" />
<h2>Default Viewers</h2>
<p>
Currently, there are 3 main tabs on "Content Viewer" window:
<ul>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/hex-content-viewer.html">Hex Content Viewer</a></li>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/string-content-viewer.html">String Content Viewer</a></li>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/picture-content-viewer.html">Media Viewer</a></li>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/text-content-viewer.html">Text Viewer</a></li>
</ul>
</p>
<h2>Example</h2>
<p>
</p>
</body>
</html>

105
CoreComponents/javahelp/org/sleuthkit/autopsy/corecomponents/docs/dataresult-about.html
View File

@ -1,64 +1,41 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>About Result Viewers</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>About Result Viewers</h2>
<p>
The Result Viewer windows are in the upper right area of the interface and display the results from a <a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataexplorer-about.html">Data Explorer</a> window.
You will have the option in this are to display the results in a variety of formats.
Currently, there are 2 main tabs on "Result Viewer" window:
<ul>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/table-results-viewer.html">Table Results Viewer</a></li>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/thumbnail-results-viewer.html">Thumbnail Results Viewer</a></li>
</ul>
</p>
<h2>Right Click Functions</h2>
<p>
Viewers in Result Viewers have some right click function that built in into them:
<br><br>
&nbsp;&nbsp; 1. Open File in External Viewer<br>
&nbsp;&nbsp;&nbsp;&nbsp; This right click function will open the selected node/data in an "external" application. Note: This does not support all file types.
<br><br>
&nbsp;&nbsp; 2. View in New Window<br>
&nbsp;&nbsp;&nbsp;&nbsp; This right click function will pop up a new "Content Viewers" window for the selected node/data. You can dock this new window or close it.
<br><br>
&nbsp;&nbsp; 3. Extract<br>
&nbsp;&nbsp;&nbsp;&nbsp; This right click function will extract the selected file or directory to any location on the local hard drive (you can specify the location).
<br><br>
&nbsp;&nbsp; 4. View (Hex and String)<br>
&nbsp;&nbsp;&nbsp;&nbsp; This right click function will change the active tab on the main "Content Viewers" window to be the selected tab.
<br><br>
</p>
<h2>Example</h2>
<p>
Here's one of the example of a "Result Viewer" window:
<br>
&nbsp;&nbsp;&nbsp;&nbsp; <img src="ResultViewer_example.png" alt="Example of Result Viewer Window" />
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Result Viewers</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Result Viewers</h2>
<p>
The Result Viewer windows are in the upper right area of the interface and display the results from selecting something in the <a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/dataexplorer-about.html">Explorer Tree</a> area.
You will have the option in this are to display the results in a variety of formats.
Currently, there are 2 main tabs on "Result Viewer" window:
<ul>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/table-results-viewer.html">Table Results Viewer</a></li>
<li><a href="nbdocs:/org/sleuthkit/autopsy/corecomponents/docs/thumbnail-results-viewer.html">Thumbnail Results Viewer</a></li>
</ul>
</p>
<h2>Right Click Functions</h2>
<p>
Viewers in Result Viewers have some right click function that built in into them. Here are some examples that you may see:
<ul>
<li>Open File in External Viewer: Opens the selected file in an "external" application as defined by the local OS. For example, HTML files maybe opened by IE or Firefox, depending on what the local system is configured to use. </li>
<li>View in New Window: Opens the content in a new internal Content Viewer (instead of in the default location in the lower right).</li>
<li>Extract: Make a local copy of the file or directory for further analysis.</li>
</ul>
</p>
<h2>Example</h2>
<p>
Here's one of the example of a "Result Viewer" window:
<br>
&nbsp;&nbsp;&nbsp;&nbsp; <img src="ResultViewer_example.png" alt="Example of Result Viewer Window" />
</p>
</body>
</html>

63
CoreComponents/javahelp/org/sleuthkit/autopsy/corecomponents/docs/picture-content-viewer.html
View File

@ -1,40 +1,23 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Picture Content Viewer</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Picture Content Viewer</h2>
<p>
Picture Content Viewer will show the actual picture from the picture file.
Currently, Picture Content Viewer only support JPG, GIF, and PNG formats.
If you select an non-picture file or an unsupported picture format on the "Result Viewers", this tab will be disabled.
<br><br>
</p>
<h2>Example</h2>
<p>
Here's one of the example of "Picture Content Viewer":
<br>
&nbsp;&nbsp;&nbsp;&nbsp; <img src="Picture_Content_Viewer.png" alt="Example of Picture Content Viewer Tab" />
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Media Content Viewer</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Media Content Viewer</h2>
<p>
The Media Content Viewer will show a picture or video file. Video files can be played and paused. The size of the picture or video will be reduced to fit into the screen. If you want more complex analysis of the media, then you must export the file. </p>
<p>If you select an non-picture file or an unsupported picture format on the "Result Viewers", this tab will be disabled.</p>
</p>
<p>
Here's one of the example of the "Media Content Viewer":
<br>
&nbsp;&nbsp;&nbsp;&nbsp; <img src="Picture_Content_Viewer.png" alt="Example of Picture Content Viewer Tab" />
</p>
</body>
</html>

58
CoreComponents/javahelp/org/sleuthkit/autopsy/corecomponents/docs/string-content-viewer.html
View File

@ -1,38 +1,20 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>String Content Viewer</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>String Content Viewer</h2>
<p>
Strings Content Viewer just scans the data of the file / folder and show you it for printable ASCII strings of a default length of 4 or more ASCII characters. If the length of printable ASCII is less than 4, it won't show the string.
<br><br>
</p>
<h2>Example</h2>
<p>
Here's one of the example of "String Content Viewer":
<br>
&nbsp;&nbsp;&nbsp;&nbsp; <img src="String_Content_Viewer.png" alt="Example of String Content Viewer Tab" />
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>String Content Viewer</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>String Content Viewer</h2>
<p>Strings Content Viewer scans the data of the file / folder and searches it for data that could be text. If it finds data that is ASCII data and at least four characters long, then it displays it to the user.</p>
<p>Note that this is different from the Text Content Viewer, which displays the text for a file that is stored in the keyword search index. The results may be the same or they could be different.</p>
<h2>Example</h2>
<p>
Here's one of the example of "String Content Viewer":
<br>
&nbsp;&nbsp;&nbsp;&nbsp; <img src="String_Content_Viewer.png" alt="Example of String Content Viewer Tab" />
</p>
</body>
</html>

16
CoreComponents/javahelp/org/sleuthkit/autopsy/corecomponents/docs/text-content-viewer.html Executable file
View File

@ -0,0 +1,16 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>String Content Viewer</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Text Content Viewer</h2>
<p>Text Content Viewer uses the keyword search index that may have been populated during <a href="nbdocs:/org/sleuthkit/autopsy/ingest/docs/ingest-about.html">Image Ingest</a>. If a file has text stored in the index, then this tab will be enabled and it will be displayed to the user. </p>
<p>This tab may have more text on it than the "Strings Content Viewer", which relies on searching the file for text-looking data. Some files, like PDF, will not have text-looking data at the byte-level, but the keyword indexing process knows how to interpret a PDF file and produce text. </p>
<p>If this tab is not enabled, then either the file has no text or you did not enable Keyword Search as an ingest module. Note that this viewer is also used to display keyword hits.</p>
</body>
</html>

48
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/directorytree-about.html Normal file → Executable file
View File

@ -1,50 +1,24 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<html>
<head>
<title>About Directory Tree</title>
<title>Explorer Tree</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>About Directory Tree</h2>
<h2>About Explorer Tree</h2>
<p>
Directory Tree is one of the main windows in Autopsy. Here, you can see and analyze all the images (also volumes and directories inside that images) which are shown in tree format. You can also see the details of the image, volume, and the file system from directory tree.
<br><br>
The explorer tree is a very important area of the interface. This is where you will start many of your analysis approaches and find results from automated procedures. The tree has three main areas:
<ul>
<li>Images: Where you can find the directory tree hierarchy of the file systems in the images. Go here to navigate to a specific file or directory.</li>
<li>Views: Where you can view all of the files in the images, but organized by file type or dates instead of directories. Go here if you are looking for files of a given type or that were recently used.</li>
<li>Results: Where you can see the results from the background ingest tasks and you can see your previous search results. Go here to see what was found by the ingest modules and to find your previous search results. </li>
</ul>
</p>
<h2>How to Open Directory Tree</h2>
<p>
To see how to open Directory Tree, click <a href="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/open-directorytree.html">here</a>.
<br><br>
<b>Note:</b> The Directory Tree Window is opened and closed automatically. If there's a case opened and there is at least one image inside that case, Directory Tree Window can't be closed.
<br><br>
</p>
<h2>How to Use Directory Tree</h2>
<p>
To see how to use Directory Tree, click <a href="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/how-to-use-directorytree.html">here</a>.
<br><br>
</p>
<h2>Example</h2>
<p>
Here's an example of a Directory Tree window:
&nbsp;&nbsp;<img src="DirectoryTree_example.png" alt="Directory Tree Top Component Window" />
Here's an example of an Explorer Tree: <br />
&nbsp;&nbsp;<img src="DirectoryTree_example.png" alt="Explorer Tree" />
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->

2
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/directorytree-idx.xml
View File

@ -6,8 +6,6 @@ and open the template in the editor.
<!DOCTYPE index PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp Index Version 2.0//EN" "http://java.sun.com/products/javahelp/index_2_0.dtd">
<index version="2.0">
<indexitem text="About Directory Tree" target="org.sleuthkit.autopsy.directorytree.about"/>
<indexitem text="How to Open Directory Tree" target="org.sleuthkit.autopsy.directorytree.open-directorytree"/>
<indexitem text="How to Use Directory Tree" target="org.sleuthkit.autopsy.directorytree.how-to-use-directorytree"/>
<indexitem text="Image Details Window" target="org.sleuthkit.autopsy.directorytree.image-details"/>
<indexitem text="Volume Details Window" target="org.sleuthkit.autopsy.directorytree.volume-details"/>
<indexitem text="File System Details Window" target="org.sleuthkit.autopsy.directorytree.filesystem-details"/>

1
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/directorytree-map.xml
View File

@ -6,7 +6,6 @@ and open the template in the editor.
<!DOCTYPE map PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp Map Version 2.0//EN" "http://java.sun.com/products/javahelp/map_2_0.dtd">
<map version="2.0">
<mapID target="org.sleuthkit.autopsy.directorytree.about" url="directorytree-about.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.open-directorytree" url="open-directorytree.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.how-to-use-directorytree" url="how-to-use-directorytree.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.image-details" url="image-details.html"/>
<mapID target="org.sleuthkit.autopsy.directorytree.volume-details" url="volume-details.html"/>

5
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/directorytree-toc.xml Normal file → Executable file
View File

@ -1,10 +1,7 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE toc PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp TOC Version 2.0//EN" "http://java.sun.com/products/javahelp/toc_2_0.dtd">
<!--
NOTE: This TOC is not used. The help pages in this module are loaded as part of the TOC of CoreComponents.
<toc version="2.0">
<tocitem text="DirectoryTree">
<tocitem text="About DirectoryTree" target="org.sleuthkit.autopsy.directorytree.about"/>

70
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/filesystem-details.html Normal file → Executable file
View File

@ -1,48 +1,22 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>File System Details Window</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>File System Details Window</h2>
<p>
File System Details Windows shows the general and detailed information of file system from the selected volume.
<br><br>
</p>
<h2>General File System Information</h2>
<p>
This windows shows the information about file system type, image offset, volume ID, block size, block count, root metadata entry, first metadata entry, and last metadata entry.
<br><br>
</p>
<h2>Detailed File System Information</h2>
<p>
<i>More coming about this information...</i>
<br><br>
</p>
<h2>Example</h2>
<p>
&nbsp;&nbsp;&nbsp;&nbsp;<img src="FileSystemDetailHelp.png" alt="Example of File System Details Window" />
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>File System Details Window</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>File System Details Window</h2>
<p>
The File System Details indow shows you the general information about a file system in the disk image. You can open the window by by right clicking on a file system and choosing "File System Details".
</p>
<p><img src="rightClick_fileSystemDetails.png" alt="Right click on directory tree to show File System Details" /></p>
<p>There are two sections to this window: General and Detailed. The general information section has data associated with all types of file systems, such as its type, starting location, number of blocks, etc.
The detailed section has information that is specific to the type of file system. Some file systems will have more data here than others.</p>
<p>An example is shown here: <br />
&nbsp;&nbsp;&nbsp;&nbsp;<img src="FileSystemDetailHelp.png" alt="Example of File System Details Window" />
</p>
</body>
</html>

54
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/how-to-use-directorytree.html
View File

@ -1,54 +0,0 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>How to Use Directory Tree</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>How to Use Directory Tree</h2>
<p>
Information on Directory Tree functionality:
<br><br>
&nbsp; 1. To pass the data and show it on the "Result Viewer". <br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; To pass the data and show it on the "Result Viewer", select / click the corresponding node on the Directory Tree.
<br><br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <img src="node_selected.png" alt="select node on directory tree" />
<br><br>
&nbsp; 2. To show the "Image Details" <br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; To see the detail of the image, right click on the image node and select "Image Details".<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>Note:</b> To know more about "Image Detail" window, click <a href="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/image-details.html">here</a>.
<br><br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <img src="rightClick_imageDetails.png" alt="Right click on directory tree to show Image Details" />
<br><br>
&nbsp; 3. To show the "Volume Details" <br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; To see the detail of the volume, right click on the volume node and select "Volume Details".<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>Note:</b> To know more about "Volume Detail" window, click <a href="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/volume-details.html">here</a>.
<br><br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <img src="rightClick_volumeDetails.png" alt="Right click on directory tree to show Volume Details" />
<br><br>
&nbsp; 4. To show the "File System Details" <br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; To see the detail of the file system of a volume, right click on that volume node and select "File System Details".<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>Note:</b> To know more about "File System Detail" window, click <a href="nbdocs:/org/sleuthkit/autopsy/directorytree/docs/filesystem-details.html">here</a>.
<br><br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <img src="rightClick_fileSystemDetails.png" alt="Right click on directory tree to show File System Details" />
<br><br>
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->

56
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/image-details.html Normal file → Executable file
View File

@ -1,36 +1,20 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Image Details Window</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Image Details Window</h2>
<p>
Image Details Windows shows the information about name, type, and sector size of the selected image.
<br><br>
</p>
<h2>Example</h2>
<p>
&nbsp;&nbsp;&nbsp;&nbsp;<img src="ImageDetailHelp.png" alt="Example of Image Details Window" />
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Image Details Window</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Image Details Window</h2>
<p>
The Image Details window shows you basic information about a disk image. You can access it by right-clicking on an image in the tree and choosing "Image Details".
</p>
<p><img src="rightClick_imageDetails.png" alt="Right click on directory tree to show Image Details" /></p>
<p>An example is shown here: <br />
&nbsp;&nbsp;&nbsp;&nbsp;<img src="ImageDetailHelp.png" alt="Example of Image Details Window" />
</p>
</body>
</html>

BIN
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/node_selected.png
View File

Binary file not shown.
Side by Side

Before

Width:  |  Height:  |  Size: 31 KiB

45
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/open-directorytree.html
View File

@ -1,45 +0,0 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>How to Open Directory Tree</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>How to Open Directory Tree</h2>
<p>
To open the Directory Tree, you can do one of the following thing:
<ul type="circle">
<li>
Click the Directory Tree tab.
<br><br>
&nbsp;&nbsp;<img src="open_directoryTree1.png" alt="Open Directory Tree Top Component 1" />
<br><br>
</li>
<li>
Select the "Tools" -> "Directory Tree"
<br><br>
&nbsp;&nbsp;<img src="open_directoryTree2.png" alt="Open Directory Tree Top Component 2" />
<br><br>
</li>
</ul>
<b>Note:</b> The Directory Tree Window is opened and closed automatically. If there's a case opened and there is at least one image inside that case, Directory Tree Window can't be closed.
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->

BIN
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/open_directoryTree1.png
View File

Binary file not shown.
Side by Side

Before

Width:  |  Height:  |  Size: 29 KiB

BIN
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/open_directoryTree2.png
View File

Binary file not shown.
Side by Side

Before

Width:  |  Height:  |  Size: 19 KiB

58
DirectoryTree/javahelp/org/sleuthkit/autopsy/directorytree/docs/volume-details.html Normal file → Executable file
View File

@ -1,36 +1,22 @@
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Volume Details Window</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Volume Details Window</h2>
<p>
Volume Details Windows shows the information about volume ID, starting sector, the length, description, and flags of the selected volume.
<br><br>
</p>
<h2>Example</h2>
<p>
&nbsp;&nbsp;&nbsp;&nbsp;<img src="VolumeDetailHelp.png" alt="Example of Volume Details Window" />
</p>
</body>
</html>
<!--
Tip: to create a link which will open in an external web browser, try:
<object classid="java:org.netbeans.modules.javahelp.BrowserDisplayer">
<param name="content" value="http://www.netbeans.org/">
<param name="text" value="<html><u>http://www.netbeans.org/</u></html>">
<param name="textFontSize" value="medium">
<param name="textColor" value="blue">
</object>
To create a link to a help set from another module, you need to know the code name base and path, e.g.:
<a href="nbdocs://org.netbeans.modules.usersguide/org/netbeans/modules/usersguide/configure/configure_options.html">Using the Options Window</a>
(This link will behave sanely if that module is disabled or missing.)
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Volume Details Window</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Volume Details Window</h2>
<p>
The Volume Details window shows you information about a volume. It shows information such as the starting sector, length, and description. You can view the information by right clicking on a volume in the tree and choosing "Volume Details".
</p>
<p><img src="rightClick_volumeDetails.png" alt="Right click on directory tree to show Volume Details" /></p>
<p>
An example is shown here:<br />
&nbsp;&nbsp;&nbsp;&nbsp;<img src="VolumeDetailHelp.png" alt="Example of Volume Details Window" />
</p>
</body>
</html>

36
Ingest/src/org/sleuthkit/autopsy/ingest/docs/ingest-about.html Executable file
View File

@ -0,0 +1,36 @@
<html>
<head>
<title>Image Ingest</title>
<link rel="stylesheet" href="nbdocs:/org/netbeans/modules/usersguide/ide.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<h2>Image Ingest</h2>
<p>Autopsy tries to automate as many things as possible for you. There are many tasks that will always be performed in a digital investigation and the ingest manager is responsible for making sure that they happen. </p>
<p>The ingest process begins after the basic file system information has been added to the database. The ingest process is similar to triage. A series of ingest modules (described in a following section) run automatically behind the scenes and make their results available as soon as possible. </p>
<p>You can start image ingest in two ways. When you add an image with the <a href="nbdocs:/org/sleuthkit/autopsy/casemodule/docs/addImage.html">Add Image wizard</a>, you will be shown the list of ingest modules and you can choose which you want to run and you can do some basic configuration of the modules. You can also launch the Ingest Manager run ingest by right clicking on an image in the explorer tree and choosing "Restart Image Ingest". </p>
<p>The results from the ingest module can typically be found in the Results area of the explorer tree. However, some modules may choose to write results to a local file or to some other location and not make them available in the UI. </p>
<h2>Ingest Modules</h2>
<p>
An ingest module is resposible for extracting data from and searching images. Different modules will do different things. Examples include:
<ul>
<li>Calculate MD5 hash of each file</li>
<li>Lookup MD5 hash in database</li>
<li>Detect file type of each file</li>
<li>Keyword search each file</li>
<li>Extract web artifacts (downloads, history, etc.</li>
</ul>
</p>
<p>Ingest modules can be created by third-party-developers and can be added independently of Autopsy. </p>
<h2>Configuring Ingest Modules</h2>
There are two places to configure ingest modules. When the Ingest Manager is launched so that you can choose which ingest modules to run, there maybe a small set of configuration changes that the module allows you to set from that interface. Additional configuration is typically available from a separate dialog box that can be opened from either the "Tools" menu or with the "Advanced" button in the Ingest Manager.
<h2>Adding Ingest Modules</h2>
<p>ADD HERE</p>
</body>
</html>

28
Ingest/src/org/sleuthkit/autopsy/ingest/docs/ingest-hs.xml Executable file
View File

@ -0,0 +1,28 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE helpset PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp HelpSet Version 2.0//EN" "http://java.sun.com/products/javahelp/helpset_2_0.dtd">
<helpset version="2.0">
<title>org.sleuthkit.autopsy.ingest Help</title>
<maps>
<homeID>org.sleuthkit.autopsy.ingest.about</homeID>
<mapref location="ingest-map.xml"/>
</maps>
<view mergetype="javax.help.AppendMerge">
<name>TOC</name>
<label>Table of Contents</label>
<type>javax.help.TOCView</type>
<data>ingest-toc.xml</data>
</view>
<view mergetype="javax.help.AppendMerge">
<name>Index</name>
<label>Index</label>
<type>javax.help.IndexView</type>
<data>ingest-idx.xml</data>
</view>
<view>
<name>Search</name>
<label>Search</label>
<type>javax.help.SearchView</type>
<data engine="com.sun.java.help.search.DefaultSearchEngine">JavaHelpSearch</data>
</view>
</helpset>

9
Ingest/src/org/sleuthkit/autopsy/ingest/docs/ingest-idx.xml Executable file
View File

@ -0,0 +1,9 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE index PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp Index Version 2.0//EN" "http://java.sun.com/products/javahelp/index_2_0.dtd">
<index version="2.0">
<indexitem text="About Ingest" target="org.sleuthkit.autopsy.ingest.about"/>
</index>

9
Ingest/src/org/sleuthkit/autopsy/ingest/docs/ingest-map.xml Executable file
View File

@ -0,0 +1,9 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE map PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp Map Version 2.0//EN" "http://java.sun.com/products/javahelp/map_2_0.dtd">
<map version="2.0">
<mapID target="org.sleuthkit.autopsy.ingest.about" url="ingest-about.html"/>
</map>

11
Ingest/src/org/sleuthkit/autopsy/ingest/docs/ingest-toc.xml Executable file
View File

@ -0,0 +1,11 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
To change this template, choose Tools | Templates
and open the template in the editor.
-->
<!DOCTYPE toc PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp TOC Version 2.0//EN" "http://java.sun.com/products/javahelp/toc_2_0.dtd">
<toc version="2.0">
<tocitem text="org.sleuthkit.autopsy.ingest">
<tocitem text="About Ingest" target="org.sleuthkit.autopsy.ingest.about"/>
</tocitem>
</toc>

8
Ingest/src/org/sleuthkit/autopsy/ingest/docs/package-info.java Executable file
View File

@ -0,0 +1,8 @@
/*
* To change this template, choose Tools | Templates
* and open the template in the editor.
*/
@HelpSetRegistration(helpSet = "ingest-hs.xml", position = 3575)
package org.sleuthkit.autopsy.ingest.docs;
import org.netbeans.api.javahelp.HelpSetRegistration;