Re: [sleuthkit-users] Autopsy Question - ZIP files that can't be opened
Brought to you by:
carrier
From: Derrick K. <dk...@gm...> - 2015-09-24 20:14:32
|
I don't mind the log message with an additional pop up in the lower right. That works for me. I don't recall but, are those problematic files marked somehow so that we can manually examine them after without digging through the log to identify them? Derrick On Thu, Sep 24, 2015 at 1:57 PM, Simson Garfinkel <si...@ac...> wrote: > I think that there should be a general "alert" framework where any scanner can post processing alerts, and have them show up in the results like other results. > >> On Sep 24, 2015, at 3:50 PM, Brian Carrier <ca...@sl...> wrote: >> >> Autopsy will sometimes encounter allocated ZIP files that cannot be opened by 7Zip (or other tools). We’re currently creating a log message, but no one probably sees though. Would you rather that we pop up an error message in the lower right? I’d suggest this only be done for allocated files rather than deleted files (that could be corrupt). >> >> Opinions? >> >> >> >> ------------------------------------------------------------------------------ >> _______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org > > > ------------------------------------------------------------------------------ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |