Support removing a data source from a case

Open moshekaplan opened this issue 4 years ago • 4 comments

Support removing a data source from a case.

This could be useful if a data source is accidentally added, and so 'pollutes' the other collected data artifacts, making it harder to review them.

Oct 17 '21 23:10 moshekaplan

Data sources can already be deleted from a case. http://sleuthkit.org/autopsy/docs/user-docs/4.19.0/ds_page.html#data_source_deletion

Oct 17 '21 23:10 APriestman

I see. Can hosts also be removed?

Oct 18 '21 00:10 moshekaplan

Yes if they do not contain any data sources. http://sleuthkit.org/autopsy/docs/user-docs/4.19.0/host_page.html#host_menu

Oct 18 '21 00:10 APriestman

Could a new "Remove Host" option be added, to remove a host and all contained data sources?

Oct 18 '21 00:10 moshekaplan