Run Ingest modul on selected part of filesystem

Discuss new features that you would like to see in Autopsy. Consider creating a github issue instead of this forum, as we review those more when adding features and many of the discussions ultimately end up as github issues.

https://github.com/sleuthkit/autopsy/issues

Moderator: carrier

Run Ingest modul on selected part of filesystem

Postby rpav » Thu Sep 03, 2015 6:49 am

User story: I would like to run keyword search on files created by user. Because of performance, I would like to do:
1) data sources analyze to know which filesystem is present (if any) and how it is organized
2) select part of filesystem (usually dedicated to store user specific data, /home in Unix, /Users in Win) and run ingest module only on that part

Thank you,
roman
rpav
 
Posts: 4
Joined: Thu Sep 03, 2015 3:39 am
Location: Czech Republic

Re: Run Ingest modul on selected part of filesystem

Postby robertolarcher » Thu Oct 08, 2015 9:23 am

Hi, since I have the same problem I just pulled a request on github. The proposed solution has some limitations but seems to be ok for Keyword Search ingest module
robertolarcher
 
Posts: 4
Joined: Fri Sep 04, 2015 12:16 pm

Re: Run Ingest modul on selected part of filesystem

Postby delarndesilva » Fri Jan 15, 2016 5:58 pm

Hi

I'm carrying out a research in to the same are to come up with more permanent solution. Any updated on this anyone ??

thanks

Delarn
delarndesilva
 
Posts: 1
Joined: Fri Jan 15, 2016 5:54 pm


Return to Autopsy Feature Requests

Who is online

Users browsing this forum: No registered users and 1 guest

cron