mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-06 21:00:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Clarify that file search is on name only.

Browse Source
This commit is contained in:
apriestman 2021-07-12 09:27:28 -04:00
parent 11ddc1af30
commit fbd0b2b47a
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
docs/doxygen-user/file_search.dox
View File

@ -21,18 +21,18 @@ or select the "Tools", "File Search by Attributes".
There are several categories that you can use to filter and show the directories and files within the images in the current opened case. There are several categories that you can use to filter and show the directories and files within the images in the current opened case.
The categories are: The categories are:
\li Name: \li Name:
Search for all files and directory whose name contains the pattern given. Search for all files and directories whose name contains the pattern given. Search is on the file/directory name only and does not look at the parent path.
Note: it doesn't support regular expression and keyword matching. Note: it doesn't support regular expression and keyword matching.
\li Size: \li Size:
Search for all files and directory whose size matches the pattern given. The pattern can be "equal to", "greater than", and "less than". The unit for the size can be "Byte(s)", "KB", "MB", "GB", and "TB". Search for all files and directories whose size matches the pattern given. The pattern can be "equal to", "greater than", and "less than". The unit for the size can be "Byte(s)", "KB", "MB", "GB", and "TB".
\li MIME Type: \li MIME Type:
Search for all files with the selected MIME type. Multiple types can be used by holding SHIFT or CTRL while selecting. Search for all files with the selected MIME type. Multiple types can be used by holding SHIFT or CTRL while selecting.
\li MD5: \li MD5:
Search for all files with the given MD5 hash. Search for all files with the given MD5 hash.
\li Date: \li Date:
Search for all files and directory whose "date property" is within the date range given. The "date properties" are "Modified Date", "Accessed Date", "Changed Date", and "Created Date". You must also specify the timezone for the date given. Search for all files and directories whose "date property" is within the date range given. The "date properties" are "Modified Date", "Accessed Date", "Changed Date", and "Created Date". You must also specify the timezone for the date given.
\li Known Status: \li Known Status:
Search for all files and directory whose known status is recognized as either Unknown, Known, or Known Bad. For more on Known Status, see the \ref hash_db_page. Search for all files whose known status is recognized as either Unknown, Known, or Known Bad. For more on Known Status, see the \ref hash_db_page.
To use any of these filters, check the box next to the category and click "Search" button to start the search process. The result will show up in the "Result Viewer". To use any of these filters, check the box next to the category and click "Search" button to start the search process. The result will show up in the "Result Viewer".
\li Data Source: \li Data Source:
Search only within the specified data source instead of the entire case. Note that multiple data sources can be selected by holding SHIFT or CTRL while selecting. Search only within the specified data source instead of the entire case. Note that multiple data sources can be selected by holding SHIFT or CTRL while selecting.