diff --git a/docs/doxygen-user/case_management.dox b/docs/doxygen-user/case_management.dox index d458238b67..141e909dfd 100755 --- a/docs/doxygen-user/case_management.dox +++ b/docs/doxygen-user/case_management.dox @@ -30,4 +30,18 @@ To open a case, either: Navigate to the case directory and select the ".aut" file. +\section case_properties Viewing Case Properties +You can view the case properties by going to the "Case" menu and clicking "Case Properties". This will open a screen similar to one of the two following screenshots: +

+\image html single-user-case-properties.PNG +

+\image html multi-user-case-properties.PNG +

+ +You can use the "Ingest History" tab to view which data sources had which modules run upon them, and when, as shown in the screenshot below. +

+\image html case-properties-history-tab.PNG +

+ + */ diff --git a/docs/doxygen-user/images/case-properties-history-tab.PNG b/docs/doxygen-user/images/case-properties-history-tab.PNG new file mode 100755 index 0000000000..9add4e8fb5 Binary files /dev/null and b/docs/doxygen-user/images/case-properties-history-tab.PNG differ diff --git a/docs/doxygen-user/images/extension-mismatch-detected-ingest-settings.PNG b/docs/doxygen-user/images/extension-mismatch-detected-ingest-settings.PNG index fba9b2f45f..db82252ae9 100755 Binary files a/docs/doxygen-user/images/extension-mismatch-detected-ingest-settings.PNG and b/docs/doxygen-user/images/extension-mismatch-detected-ingest-settings.PNG differ diff --git a/docs/doxygen-user/images/hash-lookup.PNG b/docs/doxygen-user/images/hash-lookup.PNG index c760ce71cd..960892b20b 100755 Binary files a/docs/doxygen-user/images/hash-lookup.PNG and b/docs/doxygen-user/images/hash-lookup.PNG differ diff --git a/docs/doxygen-user/images/ingest-already-run.PNG b/docs/doxygen-user/images/ingest-already-run.PNG new file mode 100755 index 0000000000..e3243711fe Binary files /dev/null and b/docs/doxygen-user/images/ingest-already-run.PNG differ diff --git a/docs/doxygen-user/images/ingest-history.PNG b/docs/doxygen-user/images/ingest-history.PNG new file mode 100755 index 0000000000..085475a6d4 Binary files /dev/null and b/docs/doxygen-user/images/ingest-history.PNG differ diff --git a/docs/doxygen-user/images/interesting_files_ingest_settings.PNG b/docs/doxygen-user/images/interesting_files_ingest_settings.PNG index b6277a684b..b4cda8c5a5 100755 Binary files a/docs/doxygen-user/images/interesting_files_ingest_settings.PNG and b/docs/doxygen-user/images/interesting_files_ingest_settings.PNG differ diff --git a/docs/doxygen-user/images/keyword-search-ingest-settings.PNG b/docs/doxygen-user/images/keyword-search-ingest-settings.PNG index 78a2c99b1d..a234b41dc8 100755 Binary files a/docs/doxygen-user/images/keyword-search-ingest-settings.PNG and b/docs/doxygen-user/images/keyword-search-ingest-settings.PNG differ diff --git a/docs/doxygen-user/images/keyword-search-list.PNG b/docs/doxygen-user/images/keyword-search-list.PNG index 7cdb0b5f5a..acbac2f0a6 100755 Binary files a/docs/doxygen-user/images/keyword-search-list.PNG and b/docs/doxygen-user/images/keyword-search-list.PNG differ diff --git a/docs/doxygen-user/images/multi-user-case-properties.PNG b/docs/doxygen-user/images/multi-user-case-properties.PNG new file mode 100755 index 0000000000..1bd87ba21f Binary files /dev/null and b/docs/doxygen-user/images/multi-user-case-properties.PNG differ diff --git a/docs/doxygen-user/images/previous-version-already-run.PNG b/docs/doxygen-user/images/previous-version-already-run.PNG new file mode 100755 index 0000000000..d2223795cd Binary files /dev/null and b/docs/doxygen-user/images/previous-version-already-run.PNG differ diff --git a/docs/doxygen-user/images/select-ingest-modules.PNG b/docs/doxygen-user/images/select-ingest-modules.PNG index 1238b14675..b706bc9b1f 100755 Binary files a/docs/doxygen-user/images/select-ingest-modules.PNG and b/docs/doxygen-user/images/select-ingest-modules.PNG differ diff --git a/docs/doxygen-user/images/single-user-case-properties.PNG b/docs/doxygen-user/images/single-user-case-properties.PNG new file mode 100755 index 0000000000..181cf65b87 Binary files /dev/null and b/docs/doxygen-user/images/single-user-case-properties.PNG differ diff --git a/docs/doxygen-user/ingest.dox b/docs/doxygen-user/ingest.dox index b2c9d02bf0..7ab8212f85 100644 --- a/docs/doxygen-user/ingest.dox +++ b/docs/doxygen-user/ingest.dox @@ -39,10 +39,25 @@ There may also be an "Advanced" button that is enabled in the lower corner. Pre As an example, the hash lookup module will allow you to enable or disable hash databases in the "run time" options panel, but requires you to go to the "Advanced" dialog to add or remove hash databases from the Autopsy configuration. +

+\section ingest_already_run Notification of Ingest Already Run +If an ingest module has already been run for a particular data source, you will see a triangular yellow icon with an exclaimation point next to the module in the "Run Ingest Modules" dialog, as shown in the screenshot below. +

+\image html ingest-already-run.PNG +

+If an older version of an ingest module has been run for a particular data source, you will see a round blue icon with an "i" next to the module in the "Run Ingest Modules" dialog, as shown in the screenshot below. +

+\image html previous-version-already-run.PNG +

+ +Clicking "View Ingest History" will show you the ingest history in tabular form, allowing you to see which modules were run on which data sources and when, as shown in the screenshot below. +

+\image html ingest-history.PNG +

\section ingest_results Viewing Ingest Module Results -Ingest modules run in the background. An ingest module can provide you results in a variety of ways, but we recommend specific methods: +Ingest modules run in the background. An ingest module can provide you results in a variety of ways, but we recommend specific methods: -# If they post results to the Blackboard, then you will find them in the "Results" area of the tree in the main interface. -# They can send a message to the Ingest Inbox so that you get a message each time something really important is found. diff --git a/docs/doxygen-user/module_install.dox b/docs/doxygen-user/module_install.dox index ad8337e660..31a02b3098 100644 --- a/docs/doxygen-user/module_install.dox +++ b/docs/doxygen-user/module_install.dox @@ -6,12 +6,12 @@ There are two types of modules: - Modules written in Java that are shipped in NBM (NetBeans Module) files. - Modules written in Python that are shipped as a folder in a ZIP file. -\section module_install_nbm Installing NetBeans Module +\section module_install_nbm Installing NetBeans Modules If you have an NBM file, then it may contain one or more Autopsy modules. To install it, use the plugin manager at "Tools", "Plugins". Choose the "Downloaded" tab and then choose "Add Plugins". Browse to the NBM file. It may require you to restart Autopsy. -\section module_install_python Installing Python Module +\section module_install_python Installing Python Modules If you have a ZIP file with a Python module in it, then unzip the file and you should get a folder. Open the Python module library folder using "Tools", "Python Plugins". Copy the module folder into there and Autopsy should identify and use it next time it loads modules. */ diff --git a/docs/doxygen/debugTsk.dox b/docs/doxygen/debugTsk.dox index 2863bc1e9f..d70c014667 100644 --- a/docs/doxygen/debugTsk.dox +++ b/docs/doxygen/debugTsk.dox @@ -7,6 +7,6 @@ If you find that you need to debug some of the C/C++ code from The Sleuth Kit (T -# Build the Autopsy suite so that it copies the new JAR file with the debug dlls. -# Set your breakpoints in the TSK source. -# Run Autopsy in the debugger. --# In VC++, do Debug->Attach to process... If you don't see this menu item, set Tools->Settings->Expert Settings. There is also a Tools->Attach to process..(Ctrl+Alt+P). Attach to nbexex64,exe (netbeasn64.exe is the IDE). +-# In VC++, do Debug->Attach to process... If you don't see this menu item, set Tools->Settings->Expert Settings. There is also a Tools->Attach to process..(Ctrl+Alt+P). Attach to nbexec64.exe (netbeans64.exe is the IDE). */ diff --git a/docs/doxygen/footer.html b/docs/doxygen/footer.html index 08c9a6d5fb..550d5d13f7 100755 --- a/docs/doxygen/footer.html +++ b/docs/doxygen/footer.html @@ -1,5 +1,5 @@
-

Copyright © 2012-2015 Basis Technology. Generated on: $date
+

Copyright © 2012-2016 Basis Technology. Generated on: $date
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.

diff --git a/docs/doxygen/modContent.dox b/docs/doxygen/modContent.dox index 830091a189..d42e495be8 100755 --- a/docs/doxygen/modContent.dox +++ b/docs/doxygen/modContent.dox @@ -45,7 +45,7 @@ If you only want to analyze files, then you want to get the AbstractFile object \code AbstractFile file = node.getLookup().lookup(AbstractFile.class); \endcode -If file is null, then it means that the node isn't for a AbstractFile (perhaps its of a full volume). +If file is null, then it means that the node isn't for an AbstractFile (perhaps its of a full volume). Once you have the AbstractFile object, you can get the file's name, content, and metadata. If you want to get whatever is passed in, then you can use the more generic lookup: diff --git a/docs/doxygen/regressionTesting.dox b/docs/doxygen/regressionTesting.dox index f08101eaa6..4ec2f5dfa4 100755 --- a/docs/doxygen/regressionTesting.dox +++ b/docs/doxygen/regressionTesting.dox @@ -195,7 +195,7 @@ For further reference regarding ContainerOperators, please see When an element has been selected, the individual components may be manipulated with ContainerOperators. -To select a button, use the code below, where cont is one of the ContainerOperators from above, text is the text displayed on the button, and index is the button's order if there are multiple with the same name (i.e. if there are three buttons labeled �preview�, the first's index is 0, then 1, then 2). +To select a button, use the code below, where cont is one of the ContainerOperators from above, text is the text displayed on the button, and index is the button's order if there are multiple with the same name (i.e. if there are three buttons labeled "Preview", the first's index is 0, then 1, then 2). JbuttonOperator jbo = new JbuttonOperator(ContainerOperator cont, String text, int index);