Re: [sleuthkit-users] Autopsy reporting

[anthony s. <ant...@gm...>]

Good morning Brian,
Let me preface this by saying I’m new to the field and new to Autopsy, so I may just be missing a simple tweak somewhere. 
For the metadata: The Recent Documents page is laid out a little better in that it shows the path and the created date. An accessed/modified date would, I think, be a good addition. As far as the tagged files/results, the fact that they are all lumped together isn’t a huge problem but it might be easier to have them separated in the explorer pane. Then add the metadata in addition to the file name. 

The image hash could be added to the “Image Info” on the case summary page. 

Thanks
AJS

On Sep 9, 2014, at 9:54 PM, Brian Carrier <ca...@sl...> wrote:

> Hi Anthony, 
> 
> What exactly are the requests:
> 
> 1) In the file tags page, include the file metadata in addition to just file name?
> 2) Where do you want hash?  In the file tags page?
> 
> brian
> 
> On Sep 5, 2014, at 3:22 PM, anthony snow <ant...@gm...> wrote:
> 
>> Good afternoon,
>> 
>> I’m starting to use Autopsy as my main suite vs EnCase and since my IEF trial ran out, but it was pointed out to me that file metadata is not included in the html report. Also, there is no hash in the report. I’m finding that the reporting is not very flexible at this point. What good is separating the evidence into separate tags if its just going to report it all under one “tagged files” link?
>> 
>> Any word on a fix for this? I tried using the excel report but it puts in more info into the report than I want it to. 
>> 
>> What are others doing to work around this?
>> 
>> 
>> Thank you
>> AJS
>> ------------------------------------------------------------------------------
>> Slashdot TV.  
>> Video for Nerds.  Stuff that matters.
>> http://tv.slashdot.org/
>> _______________________________________________
>> sleuthkit-users mailing list
>> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
>> http://www.sleuthkit.org
>