Re: [sleuthkit-users] RE: searching times was - Problem adding image

[Brian C. <bca...@at...>]

On Sun, Mar 09, 2003 at 11:07:27PM -0500, Eagle Investigative Services wrote:
> Thanks Brian,
> 
> I have to re-red the docs, but when I ran a keyword search on
> the string " *.eml ", it was still searching after an hour and a half.
> Is this normal?

For your file system size and based on how long your MD5 took, yes.

 
> Is there a way to speed up the process in Autopsy? For example
> if I was looking for a person's name that I know is contained in
> a deleted email. Is there a way to quickly search for that or do I need
> to sit it out?

Use the 'Extract Strings' button from the bottom of the keyword search
screen.

brian