Customizable Views

Discuss new features that you would like to see in Autopsy. Consider creating a github issue instead of this forum, as we review those more when adding features and many of the discussions ultimately end up as github issues.

https://github.com/sleuthkit/autopsy/issues

Moderator: carrier

Customizable Views

Postby osguy » Fri Dec 19, 2014 1:37 am

Some of the things I found myself doing with other Products and can't do conveniently with Autopsy 3.1.1:

Hide all "known". If I have a hash match, don't display it.

Show All Files, particularly with above caveat. I don't want to always wade through the directory structure.

Sort All files, see previous, by times, sizes, types, ... whatever.

I can do all these things the hard way by running SQL commands against the database and exporting the list. I then have to manually select the files from the export list in Autopsy. It would be nice to have the functions integrated, perhaps as customizable views.

The power is already in the DB, a slick and flexible GUI to leverage it would be very welcome!
osguy
 
Posts: 14
Joined: Thu Nov 20, 2014 2:49 am

Return to Autopsy Feature Requests

Who is online

Users browsing this forum: No registered users and 2 guests