mirror of
https://github.com/overcuriousity/autopsy-flatpak.git
synced 2025-07-06 21:00:22 +00:00
56 lines
2.7 KiB
Plaintext
56 lines
2.7 KiB
Plaintext
/*! \page tagging_page Tagging
|
|
|
|
Tagging (or Bookmarking) allows you to create a reference to a file or object and easily find it later. Tagging is also used by the \ref central_repo_page "central repository" to mark items as notable.
|
|
|
|
When an interesting item is discovered, the user can tag it by right-clicking the item and selecting one of the tag options.
|
|
|
|
When you tag a Blackboard artifact result, you have the choice to either:
|
|
- Tag File -- use this when the file itself is of interest
|
|
- Tag Result -- use this when the result is of interest
|
|
|
|
Which to choose depends upon the context and what you desire in the final report.
|
|
|
|
\image html tagging-1.PNG
|
|
|
|
Once you have chosen to tag the file or the result, there are two more options:
|
|
- Quick Tag -- use this if you just want the tag
|
|
- Tag and Comment -- use this if you need to add a comment about this tag
|
|
|
|
\image html tagging-2.PNG
|
|
<br>
|
|
There are several default tag names:
|
|
- Bookmark - Default tag for marking files of interest
|
|
- CAT-1 through CAT-5 - For law enforcement use
|
|
- Follow Up - Default tag for marking files to follow up on
|
|
- Notable item - Default tag for indicating that an item should be marked as notable in the central repository
|
|
|
|
You can also create custom tag names. These tag names will be automatically saved for future use. Choose a tag from the list you have created, or create a "New Tag".
|
|
|
|
\image html tagging-3.PNG
|
|
|
|
If you just want to tag the item with the default "Bookmark" tag, you can also use the keyboard shortcut control+B instead of going through the menus.
|
|
|
|
You can also apply tags to groups of items at once. Select multiple items in the Blackboard, right click, and add the appropriate tag.
|
|
Items may have more than one tag.
|
|
|
|
Tagged results are shown in the "Results" portion of the tree under "Tags". Tagged items are also highlighted in the Results Viewer.
|
|
|
|
<br>
|
|
\image html tagging-4.PNG
|
|
<br>
|
|
|
|
The list of tags can be edited through the Tags tab on the Options menu.
|
|
<br>
|
|
\image html tagging-5.PNG
|
|
<br>
|
|
|
|
From here, new tags can be added, existing tags can be edited, and user-created tags can be deleted. Note that deleting a tag does not remove it from any tagged items, and that tag will still be usable in any case where it has been used to tag an item.
|
|
<br>
|
|
\image html tagging-6.PNG
|
|
<br>
|
|
|
|
If using the central repository, changing the notable status will effect tagged items in the current case only in the following way:
|
|
- If "File A" is tagged with "Tag A", which is not notable, and then "Tag A" is switched to notable, "File A" will be marked as notable in the central repository
|
|
- If "File B" is tagged with "Tag B", which is notable, and then "Tag B" is switched to non-notable, if there are no other notable tags on "File B" then its notable status in the central repository will be removed.
|
|
*/
|