Autopsy User Documentation
4.9.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
The Search All Cases feature allows you to search the Central Repository for arbitrary properties. You must have the Central Repository enabled to run this search, and you must have a case open (though the open case has no effect on the search results).
Go to Tools->Search Other Cases to open the search dialog. Here you can select the property type and value to search for. An example of what the value should look like will be displayed in light grey in the Correlation Property Value box. If the entered value is invalid for that property type a red error message will be displayed.
Once you hit the Search button, any results will be displayed in the Result Viewer. The tab title will display what was searched for ("Email Addresses" and "sample@gmail.com" in the example).
Copyright © 2012-2018 Basis Technology. Generated on Tue Dec 18 2018
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.