Re: [sleuthkit-users] RE: searching times was - Problem adding image
Brought to you by:
carrier
From: Brian C. <bca...@at...> - 2003-03-11 00:04:00
|
On Sun, Mar 09, 2003 at 11:07:27PM -0500, Eagle Investigative Services wrote: > Thanks Brian, > > I have to re-red the docs, but when I ran a keyword search on > the string " *.eml ", it was still searching after an hour and a half. > Is this normal? For your file system size and based on how long your MD5 took, yes. > Is there a way to speed up the process in Autopsy? For example > if I was looking for a person's name that I know is contained in > a deleted email. Is there a way to quickly search for that or do I need > to sit it out? Use the 'Extract Strings' button from the bottom of the keyword search screen. brian |