Skip to content
Snippets Groups Projects
Commit 5f0e8d37 authored by Karl Mortensen's avatar Karl Mortensen
Browse files

Update documentation

parent 207124a0
No related branches found
No related tags found
No related merge requests found
Showing
with 7 additions and 4 deletions
...@@ -10,7 +10,7 @@ Each case has its own directory that is named based on the case name. The direct ...@@ -10,7 +10,7 @@ Each case has its own directory that is named based on the case name. The direct
There are several ways to create a new case: There are several ways to create a new case:
- The opening splash screen has a button to create a new case. - The opening splash screen has a button to create a new case.
- The "File", "Create New Case" menu item - The "Case", "Create New Case" menu item
The New Case wizard dialog will open and you will need to enter the case name and base directory. A directory for the case will be created inside of the "base directory". If the directory already exists, you will need to either delete the existing directory or choose a different combination of names. The New Case wizard dialog will open and you will need to enter the case name and base directory. A directory for the case will be created inside of the "base directory". If the directory already exists, you will need to either delete the existing directory or choose a different combination of names.
...@@ -26,7 +26,7 @@ After you create the case, you will be prompted to add a data source, as describ ...@@ -26,7 +26,7 @@ After you create the case, you will be prompted to add a data source, as describ
To open a case, either: To open a case, either:
- Choose "Open Existing Case" or "Open Recent Case" from the opening splash screen. - Choose "Open Existing Case" or "Open Recent Case" from the opening splash screen.
- Choose the "File", "Open Case" menu item or "File", "Open Recent Case" - Choose the "Case", "Open Case" menu item or "Case", "Open Recent Case"
Navigate to the case directory and select the ".aut" file. Navigate to the case directory and select the ".aut" file.
......
...@@ -15,7 +15,7 @@ Autopsy supports three types of data sources: ...@@ -15,7 +15,7 @@ Autopsy supports three types of data sources:
You can add a data source in several ways: You can add a data source in several ways:
- After you create a case, it automatically prompts you to add a data source. - After you create a case, it automatically prompts you to add a data source.
- There is a toolbar item to add a Data Source when a case is open. - There is a toolbar item to add a Data Source when a case is open.
- The "File", "Add Data Source" menu item when a case is open. - The "Case", "Add Data Source" menu item when a case is open.
The data source must remain accessible for the duration of the analysis because the case contains a reference to the data source. It does <b>not</b> copy the data source into the case folder. The data source must remain accessible for the duration of the analysis because the case contains a reference to the data source. It does <b>not</b> copy the data source into the case folder.
...@@ -79,6 +79,9 @@ You can add files or folders that are on your local computer (or on a shared dri ...@@ -79,6 +79,9 @@ You can add files or folders that are on your local computer (or on a shared dri
Some things to note when doing this: Some things to note when doing this:
- Autopsy ignores the time stamps on files that it adds this way because they could be the timestamps when they were copied onto your examination device. - Autopsy ignores the time stamps on files that it adds this way because they could be the timestamps when they were copied onto your examination device.
- If you have a USB-attached device that you are analyzing and you choose to add the device's contents using this method, then note that it will not look at unallocated space or deleted files. Autopsy will only be able to see the allocated files. You should add the device as a "Logical Drive" to analyze the unallocated space. - If you have a USB-attached device that you are analyzing and you choose to add the device's contents using this method, then note that it will not look at unallocated space or deleted files. Autopsy will only be able to see the allocated files. You should add the device as a "Logical Drive" to analyze the unallocated space.
- You can modify the name of the Logical File Set from the default LogicalFileSet# by clicking the "Change" button as shown in the screenshot below:
\image html change_logical_file_set_display_name.PNG
To add logical files: To add logical files:
-# Choose "Logical Files" from the pull down. -# Choose "Logical Files" from the pull down.
......
<hr/> <hr/>
<p><i>Copyright &#169; 2012-2015 Basis Technology. Generated on $date<br/> <p><i>Copyright &#169; 2012-2016 Basis Technology. Generated on $date<br/>
This work is licensed under a This work is licensed under a
<a rel="license" href="http://creativecommons.org/licenses/by-sa/3.0/us/">Creative Commons Attribution-Share Alike 3.0 United States License</a>. <a rel="license" href="http://creativecommons.org/licenses/by-sa/3.0/us/">Creative Commons Attribution-Share Alike 3.0 United States License</a>.
</i></p> </i></p>
......
docs/doxygen-user/images/change_logical_file_set_display_name.PNG

27 KiB

docs/doxygen-user/images/content-viewer-1.PNG

1.26 MiB | W: | H:

docs/doxygen-user/images/content-viewer-1.PNG

1.15 MiB | W: | H:

docs/doxygen-user/images/content-viewer-1.PNG
docs/doxygen-user/images/content-viewer-1.PNG
docs/doxygen-user/images/content-viewer-1.PNG
docs/doxygen-user/images/content-viewer-1.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/directory-tree.PNG

64.9 KiB | W: | H:

docs/doxygen-user/images/directory-tree.PNG

68.4 KiB | W: | H:

docs/doxygen-user/images/directory-tree.PNG
docs/doxygen-user/images/directory-tree.PNG
docs/doxygen-user/images/directory-tree.PNG
docs/doxygen-user/images/directory-tree.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/email_results.PNG

46.9 KiB | W: | H:

docs/doxygen-user/images/email_results.PNG

45.9 KiB | W: | H:

docs/doxygen-user/images/email_results.PNG
docs/doxygen-user/images/email_results.PNG
docs/doxygen-user/images/email_results.PNG
docs/doxygen-user/images/email_results.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/extension-mismatch-detected-configuration.PNG

58.8 KiB | W: | H:

docs/doxygen-user/images/extension-mismatch-detected-configuration.PNG

69.1 KiB | W: | H:

docs/doxygen-user/images/extension-mismatch-detected-configuration.PNG
docs/doxygen-user/images/extension-mismatch-detected-configuration.PNG
docs/doxygen-user/images/extension-mismatch-detected-configuration.PNG
docs/doxygen-user/images/extension-mismatch-detected-configuration.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/extension-mismatch-detected.PNG

80.3 KiB | W: | H:

docs/doxygen-user/images/extension-mismatch-detected.PNG

82.2 KiB | W: | H:

docs/doxygen-user/images/extension-mismatch-detected.PNG
docs/doxygen-user/images/extension-mismatch-detected.PNG
docs/doxygen-user/images/extension-mismatch-detected.PNG
docs/doxygen-user/images/extension-mismatch-detected.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/filetype.PNG

52.5 KiB | W: | H:

docs/doxygen-user/images/filetype.PNG

45.5 KiB | W: | H:

docs/doxygen-user/images/filetype.PNG
docs/doxygen-user/images/filetype.PNG
docs/doxygen-user/images/filetype.PNG
docs/doxygen-user/images/filetype.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/interesting_files_configuration.PNG

69.1 KiB | W: | H:

docs/doxygen-user/images/interesting_files_configuration.PNG

63.2 KiB | W: | H:

docs/doxygen-user/images/interesting_files_configuration.PNG
docs/doxygen-user/images/interesting_files_configuration.PNG
docs/doxygen-user/images/interesting_files_configuration.PNG
docs/doxygen-user/images/interesting_files_configuration.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/keyword-search-configuration-dialog-general.PNG

46.6 KiB | W: | H:

docs/doxygen-user/images/keyword-search-configuration-dialog-general.PNG

55.8 KiB | W: | H:

docs/doxygen-user/images/keyword-search-configuration-dialog-general.PNG
docs/doxygen-user/images/keyword-search-configuration-dialog-general.PNG
docs/doxygen-user/images/keyword-search-configuration-dialog-general.PNG
docs/doxygen-user/images/keyword-search-configuration-dialog-general.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/keyword-search-configuration-dialog-string-extraction.PNG

52.1 KiB | W: | H:

docs/doxygen-user/images/keyword-search-configuration-dialog-string-extraction.PNG

64.7 KiB | W: | H:

docs/doxygen-user/images/keyword-search-configuration-dialog-string-extraction.PNG
docs/doxygen-user/images/keyword-search-configuration-dialog-string-extraction.PNG
docs/doxygen-user/images/keyword-search-configuration-dialog-string-extraction.PNG
docs/doxygen-user/images/keyword-search-configuration-dialog-string-extraction.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/keyword-search-configuration-dialog.PNG

48.1 KiB | W: | H:

docs/doxygen-user/images/keyword-search-configuration-dialog.PNG

57 KiB | W: | H:

docs/doxygen-user/images/keyword-search-configuration-dialog.PNG
docs/doxygen-user/images/keyword-search-configuration-dialog.PNG
docs/doxygen-user/images/keyword-search-configuration-dialog.PNG
docs/doxygen-user/images/keyword-search-configuration-dialog.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/keyword-search-hits.PNG

109 KiB | W: | H:

docs/doxygen-user/images/keyword-search-hits.PNG

123 KiB | W: | H:

docs/doxygen-user/images/keyword-search-hits.PNG
docs/doxygen-user/images/keyword-search-hits.PNG
docs/doxygen-user/images/keyword-search-hits.PNG
docs/doxygen-user/images/keyword-search-hits.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/keyword-search-ingest-settings.PNG

52.2 KiB | W: | H:

docs/doxygen-user/images/keyword-search-ingest-settings.PNG

38.6 KiB | W: | H:

docs/doxygen-user/images/keyword-search-ingest-settings.PNG
docs/doxygen-user/images/keyword-search-ingest-settings.PNG
docs/doxygen-user/images/keyword-search-ingest-settings.PNG
docs/doxygen-user/images/keyword-search-ingest-settings.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/keyword-search-list-results.PNG

33.4 KiB | W: | H:

docs/doxygen-user/images/keyword-search-list-results.PNG

53.6 KiB | W: | H:

docs/doxygen-user/images/keyword-search-list-results.PNG
docs/doxygen-user/images/keyword-search-list-results.PNG
docs/doxygen-user/images/keyword-search-list-results.PNG
docs/doxygen-user/images/keyword-search-list-results.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/keyword-search-list.PNG

11.1 KiB | W: | H:

docs/doxygen-user/images/keyword-search-list.PNG

16 KiB | W: | H:

docs/doxygen-user/images/keyword-search-list.PNG
docs/doxygen-user/images/keyword-search-list.PNG
docs/doxygen-user/images/keyword-search-list.PNG
docs/doxygen-user/images/keyword-search-list.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/nsrl_import_process.PNG

63.4 KiB | W: | H:

docs/doxygen-user/images/nsrl_import_process.PNG

75.6 KiB | W: | H:

docs/doxygen-user/images/nsrl_import_process.PNG
docs/doxygen-user/images/nsrl_import_process.PNG
docs/doxygen-user/images/nsrl_import_process.PNG
docs/doxygen-user/images/nsrl_import_process.PNG
  • 2-up
  • Swipe
  • Onion skin
docs/doxygen-user/images/nsrl_imported.PNG

51.9 KiB | W: | H:

docs/doxygen-user/images/nsrl_imported.PNG

68 KiB | W: | H:

docs/doxygen-user/images/nsrl_imported.PNG
docs/doxygen-user/images/nsrl_imported.PNG
docs/doxygen-user/images/nsrl_imported.PNG
docs/doxygen-user/images/nsrl_imported.PNG
  • 2-up
  • Swipe
  • Onion skin
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment