[sleuthkit-users] Autopsy keyword search returns no results - but should
Brought to you by:
carrier
From: Stephen M. <mat...@ya...> - 2008-11-06 16:44:03
|
Hi there. I recently fired up Autopsy installed from the Ubuntu Gutsy package (I believe Autopsy and Sleuth Kit are version 2.08). I have a 108 GB NTFS image from which I have extracted strings for both allocated and unallocated space. The .asc files are 37 GB and 28 GB respectively. No matter what I search for, my keyword search runs for 5-10 minutes and then comes up with no results. If I manually grep through the .asc files, there are plenty of results there. The Autopsy data directory is NFS mounted off of FreeNAS. Can any provide any insight as to why my searches are coming up empty? thanks -Steve |