Re: [sleuthkit-users] Autopsy Question - ZIP files that can't be opened

[Ketil F. <ke...@fr...>]

How about adding an artifact group for files that can't be opened, and
adding them there in addition to logging the reason? That would make it
easier to automate reruns with tools to repair broken zip-files or try to
decrypt encrypted files, and it'd still be possible to look in the log to
find the reason it didn't open initially.

Regards, Ketil
On 24 Sep 2015 21:51, "Brian Carrier" <ca...@sl...> wrote:

> Autopsy will sometimes encounter allocated ZIP files that cannot be opened
> by 7Zip (or other tools).  We’re currently creating a log message, but no
> one probably sees though.   Would you rather that we pop up an error
> message in the lower right?  I’d suggest this only be done for allocated
> files rather than deleted files (that could be corrupt).
>
> Opinions?
>
>
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>