sleuth.db #1618
-
|
Hi. We have a question, when does iped create sleuth.db? |
Beta Was this translation helpful? Give feedback.
Answered by
wladimirleite
Apr 3, 2023
Replies: 2 comments
-
|
Yes, that is the expected behavior. |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
gisms
-
|
thak u a lot!!! |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Yes, that is the expected behavior.
Sleuth.db is created for evidences handled by TSK (The Sleuth Kit), which are forensic images like DD, 001 and E01 files.
Folders and UFDRs are read directly by IPED.