sleuthkit-users

[sleuthkit-users] Indexed Searching

[John T. H. <joh...@gm...>]

SXMgYW55b25lIG9uIHRoaXMgbGlzdCBhd2FyZSBvZiBhbiBvcGVuIHNvdXJjZSBpbmRleGluZyBz
ZWFyY2ggZW5naW5lPyBJJ20KbG9va2luZyBmb3Igc29tZXRoaW5nIGFsb25nIHRoZSBsaW5lcyBv
ZiBkdFNlYXJjaCAod2hpY2ggaXMgd2hhdCBGVEsncwppbmRleGVkIHNlYXJjaCBpcyBkZXJpdmVk
IGZyb20pIHRoYXQgSSBjYW4gdXNlIHRvIGdlbmVyYXRlIGFuIGluZGV4IG9mIGNhc2UKZmlsZXMs
IGFuZCB0aGVuIHBlcmZvcm0gc3RyaW5nIHF1ZXJpZXMgYXQgYSBtdWNoIGZhc3RlciBwYWNlIHRo
YW4gaWYgZWFjaApxdWVyeSBoYXMgdG8gcmVhZCB0aHJvdWdoIHRoZSBlbnRpcmV0eSBvZiB0aGUg
ZXZpZGVuY2UgZmlsZXMuCgpUaGFua3MuCgotLQpKb2huIFQuIEhvZmZvc3MK

Re: [sleuthkit-users] Indexed Searching

[Paul B. <p.j...@br...>]

For older versions of Autopsy/sleuthkit there is a "integrated" solution.
See: http://www.brainspark.nl

For the latest versions a revision is in the making, but I'm still 
waiting for some feedback from Brian..

Regards,
Paul

John T. Hoffoss wrote:

>Is anyone on this list aware of an open source indexing search engine? I'm
>looking for something along the lines of dtSearch (which is what FTK's
>indexed search is derived from) that I can use to generate an index of case
>files, and then perform string queries at a much faster pace than if each
>query has to read through the entirety of the evidence files.
>
>Thanks.
>
>--
>John T. Hoffoss
>  
>

Re: [sleuthkit-users] Indexed Searching

[Brian C. <ca...@sl...>]

Paul Bakker wrote:
> For older versions of Autopsy/sleuthkit there is a "integrated" solution.
> See: http://www.brainspark.nl
> 
> For the latest versions a revision is in the making, but I'm still 
> waiting for some feedback from Brian.

Yea, I have been the bottleneck.  I just completed some changes that 
have been on the TODO list for quite a while and I will soon start to 
look at the large changes that have been submitted, such as this index 
search and some new file systems.

brian

Re: [sleuthkit-users] Indexed Searching

[farmer d. <far...@ya...>]

Hi John,

Beagle and webglimpse come to mind.  Beagle is pretty
sweet, 2.6 kernel only with GNOME desktop environment.
 Check out webglimpse - might be what you're looking
for.

regards,

farmerdude


www.forensicbootcd.com



--- "John T. Hoffoss" <joh...@gm...>
wrote:

> Is anyone on this list aware of an open source
> indexing search engine? I'm
> looking for something along the lines of dtSearch
> (which is what FTK's
> indexed search is derived from) that I can use to
> generate an index of case
> files, and then perform string queries at a much
> faster pace than if each
> query has to read through the entirety of the
> evidence files.
> 
> Thanks.
> 
> --
> John T. Hoffoss
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com