Bookmarks may be lost in multicase reports

sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.

Other

886 stars 211 forks source link

Bookmarks may be lost in multicase reports #2037

Closed Descadeirado closed 5 months ago

Descadeirado commented 6 months ago

It happened to me in 2 cases already: Processed a case with multiple devices images, worked in them with multicase and created bookmarks. At the end I generate the report. When I open IPED-SearchApp on the report the itens are on the case and the bookmarks are there, but all bookmarks are with 0 itens.

On the first case, all my bookmarked itens were from only one material, so I ran the report directly from IPED-SearchApp from that material and generated the report without issues. On the second case, my bookmarks have itens from more than on material and I don´t know how to proceed.

Thanks!

wladimirleite commented 6 months ago

Hello! I believe this issue was fixed by #1940. It should be included in the next release.

Descadeirado commented 6 months ago

Tried with 4.2-snapshot lib and localization folders. It didnt work.

wladimirleite commented 6 months ago

Tried with 4.2-snapshot lib and localization folders. It didnt work.

Can you share the report creation log?

Descadeirado commented 6 months ago

Yes, it's on the corporate email.

Em seg., 1 de jan. de 2024 11:03, Wladimir Leite @.***> escreveu:

Tried with 4.2-snapshot lib and localization folders. It didnt work.

Can you share the report creation log?

— Reply to this email directly, view it on GitHub https://github.com/sepinf-inc/IPED/issues/2037#issuecomment-1873341075, or unsubscribe https://github.com/notifications/unsubscribe-auth/AQOCYZ7QXGFOEWHQLPOMDOTYMK63XAVCNFSM6AAAAABBGRS5NCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNZTGM2DCMBXGU . You are receiving this because you authored the thread.Message ID: @.***>

wladimirleite commented 6 months ago

Thanks! I will take a look tomorrow.

wladimirleite commented 6 months ago

After some investigation (thanks @Descadeirado for providing the access to the environment where the case is processed), I managed to isolate the issue. Although its effect is somewhat similar to #1940, it is a different issue.

wladimirleite commented 6 months ago

I also managed to reproduce it in a small case, following the steps:

Process 2 folders as 2 cases.
Open the 2 cases as a multicase.
Create bookmarks, including only items from the first case (in my test the first in alphabetical order, but it may be necessary to repeat using the other case to reproduce).
Generate a report.
When the report is opened, items were exported, but bookmarks are empty.

If at least one item of the second case is bookmarked, everything works as expected.