Re: [sleuthkit-users] Autopsy Survey: Directory Contents Count

[Simson G. <si...@ac...>]

Since the results are not being parsed, we have some flexibility.

Have you thought about having them reported as “0 (+2)” and “3 (+2)” ? 


> 
> 
>> -----Original Message-----
>> From: Brian Carrier [mailto:ca...@sl...]
>> Sent: Thursday, December 05, 2013 5:51 PM
>> To: sle...@li... users
>> Subject: [sleuthkit-users] Autopsy Survey: Directory Contents Count
>> 
>> Currently, the tree on the left of Autopsy shows the number of items in the
>> directory.  If there is a "." or ".." entry in the directory, they are included in
>> the count.  In our last training course, someone suggested that we should
>> not include those entries in the number so that a directory with no files or
>> sub-folders shows up as "0" in the tree except "2".   I'm a bit torn on this one
>> because they are in fact entries in the database and some could also get
>> confused that there are more rows in the table than what was reported.
>> 
>> Thoughts? Do you want the number in the tree to include the "." and ".." or
>> not?
>> 
>> brian
>> 
>>