Autopsy uses Tika and other libraries to extract text from HTML, Microsoft Office, PDF, RTF, and more. ![]() ![]() Instead of searching the raw data, keyword searching in Autopsy is performed on the output of text extraction modules. Multiple concurrent keyword searches can be run against the search index. In addition, ad-hoc keyword searches can be run directly from the content bar during an investigation after (or even during) ingest of the disk image. By default, Autopsy includes regular expression searches for: Pre-defined lists of keywords and regular expressions can be configured to run while the image is being ingested. ![]() Autopsy uses the powerful text indexing engine Apache SOLR to power its fast and robust keyword searching features.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |