sleuthkit / autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
http://www.sleuthkit.org/autopsy/
2.43k stars 595 forks source link

Reporting: Autopsy reports. #977

Open BitSniffing opened 10 years ago

BitSniffing commented 10 years ago

Release: 3.1.0

Details: It would be nice to have some application reports regarding Autopsy itself. For example:

-total number of cases created -all case numbers and their title -maybe "Case Properties" -"Options" settings -would be great for audit purposes -"Keyword Search" lists -"Hash Database" lists -"File Extension Mismatch" lists -audit of changes made to keyword lists -all forensic images (all types) imported and their hash value -calculations of "Image File" v. "Logical Disk" v. "Logical Files" that have been imported -what seems to be the predominate method of input -plugins loaded -"Performance Diagnostics" record -ingest times of forensic images (processing times)

BitSniffing commented 10 years ago

Formatting my sub-groups didn't take. Here it is again with sub-groups identified better. "*" is main category with "-" as sub-category.

total number of cases created all case numbers and their title -maybe "Case Properties" "Options" settings -would be great for audit purposes -"Keyword Search" lists -"Hash Database" lists -"File Extension Mismatch" lists -audit of changes made to keyword lists all forensic images (all types) imported and their hash value calculations of "Image File" v. "Logical Disk" v. "Logical Files" that have been imported what seems to be the predominate method of input plugins loaded "Performance Diagnostics" record -ingest times of forensic images (processing times)

bcarrier commented 9 years ago

Where would you want this? As an HTML report or a window in the app that displays these stats? What is the use case for reporting these?

BitSniffing commented 9 years ago

HTML or PDF and used for auditing purposes, stat analysis, and the like.