File: int_mode.html

package info (click to toggle)
autopsy 2.24-6
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 1,644 kB
  • sloc: perl: 12,439; sh: 322; makefile: 32
file content (29 lines) | stat: -rw-r--r-- 906 bytes parent folder | download | duplicates (7)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
<HTML>
<HEAD><TITLE>Autopsy Integrity Check Help</TITLE></HEAD>
<BODY BGCOLOR=#CCCC99>

<CENTER><H2>Integrity Check</H2></CENTER>

<H3>Overview</H3>
It is always important to validate the integrity of images during
an analysis.  Autopsy uses the MD5 algorithm to validate images
and other files that are created by Autopsy.  

<P>
The <TT>md5.txt</TT> files contain the MD5 values for files in that
directory.  Values are added to it when file system images are 
imported into the system or when Autopsy creates the file.  This mode
allows one to calculate the MD5 value if it was not created before 
and to validate the integrity.

<P>
When the <U>Image Integrity</U> button is selected from the <U>Host
Manager</U> window, all files will be shown with their MD5 value
if known.  Here any image can have its value verified or a new one
created.


<P>
<HR>
<FONT SIZE=0>Brian Carrier</FONT>
</BODY></HTML>