/usr/share/autopsy/help/int_mode.html is in autopsy 2.24-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 | <HTML>
<HEAD><TITLE>Autopsy Integrity Check Help</TITLE></HEAD>
<BODY BGCOLOR=#CCCC99>
<CENTER><H2>Integrity Check</H2></CENTER>
<H3>Overview</H3>
It is always important to validate the integrity of images during
an analysis. Autopsy uses the MD5 algorithm to validate images
and other files that are created by Autopsy.
<P>
The <TT>md5.txt</TT> files contain the MD5 values for files in that
directory. Values are added to it when file system images are
imported into the system or when Autopsy creates the file. This mode
allows one to calculate the MD5 value if it was not created before
and to validate the integrity.
<P>
When the <U>Image Integrity</U> button is selected from the <U>Host
Manager</U> window, all files will be shown with their MD5 value
if known. Here any image can have its value verified or a new one
created.
<P>
<HR>
<FONT SIZE=0>Brian Carrier</FONT>
</BODY></HTML>
|