Autopsy User Documentation  4.13.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Search All Cases

Overview

The Search All Cases feature allows you to search the Central Repository for arbitrary properties. You must have the Central Repository enabled to run this search, and you must have a case open (though the open case has no effect on the search results).

Usage

Go to Tools->Search Other Cases to open the search dialog. Here you can select the property type and value to search for. An example of what the value should look like will be displayed in light grey in the Correlation Property Value box. If the entered value is invalid for that property type a red error message will be displayed.

search_all_cases_dialog.png

Once you hit the Search button, any results will be displayed in the Result Viewer. The tab title will display what was searched for ("Email Addresses" and "sample@gmail.com" in the example).

search_all_cases_results.png

Copyright © 2012-2019 Basis Technology. Generated on Thu Nov 21 2019
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.