sleuthkit / autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
http://www.sleuthkit.org/autopsy/
2.43k stars 594 forks source link

[Autopsy] "save table as csv" produces incorrect reports #7921

Open eg-cc opened 2 weeks ago

eg-cc commented 2 weeks ago

Product Versions tested: Autopsy 4.21.0 and 4.20 tested on two different devices


Hi there,

I've tried to export a result table to csv by using the "save table as csv" function.

But for one row in Autopsy the csv-file contains several rows. I've tried to find out, what's the problem. As I see it, for reasons unknown to me, line feed characters (LF) are inserted in the "keyword preview" area when the csv file is created.

I have attached the exported csv file and a screenshot from autopsy.

I also noticed that with every csv export a new line is created in the "File type" dropdown menu with the name "csv file" - see second attached screenshot.

csv_screenshot autopsy_result table dropdown menu result_export.csv