autopsy
autopsy copied to clipboard
Hex Search
The keyword search module allows you to search for text, but not non-text values (i.e. a hex search).
This feature is to add a new module to do so. Could be a Data Source-level ingest module that searches the data source for specific values. Could be launched from either the usual ingest module process or could even be started from a menu that starts it for a specific set of hex values w/out the entire ingest manager getting involved.
updates?