About File Search

File Search tool can be accessed either from the Tools menu or by right-clicking on image node in the Data Explorer / Directory Tree. By using File Search, you can specify, filter, and show the directories and files that you want to see from the images in the current opened case. The File Search results will be populated in a brand new Table Result viewer on the right-hand side.

Currently, Autopsy only supports 4 categories in File Search: Name, Size, Date, and Known Status based search.

• Note: Currently File Search doesn't support regular expression, however the Keyword Search feature of Autopsy does also look in file names and it does support regular expressions, which can complimentary to the File Search.

How to Open File Search

To see how to open File Search, click here.

• Note: The File Search Window is opened and closed automatically. If there's a case opened and there is at least one image inside that case, File Search Window can't be closed.

How to Use File Search

To see how to use File Search, click here.

Example

Here's an example of a File Search window: