Re: [sleuthkit-users] Autopsy keyword search returns no results - but should

[RB <ao...@gm...>]

On Thu, Nov 6, 2008 at 09:43, Stephen Mathezer <mat...@ya...> wrote:
> Can any provide any insight as to why my searches are coming up empty?

Look at the log for your case, it should have the search terms there.
My guess is that your manual grep terms and those coming through
Autopsy's syntax-escapes differ.  Autopsy also runs its searches
through srch_strings to reduce your search set by string length, so
that may have some effect if you're doing a lot of regex work.


RB