Save files after search

[Nep]

Once a search has been carried out and the results are shown, is there a way to save those files to a specific folder on my computer?
Thanks

[David (PassMark)]

If you create a case (from the Manage case function), then you can save the files to the case folder.

Right click on the file and select,
Add to case / Files.

[Nep]

Thanks!

What if I select all of the found files and there are files in different folders with the same name? Are they renamed?

I'll try your solution when I can get the image mounted again. I'll open another thread about that problem.

[Michael (Passmark)]

They won't be renamed, but placed in different sub folders within the case folder.

[Nep]

I selected all of the found files and clicked to save them in the Case Files. After copying a few of them, OSF stops working and the only option is to close the program. This happens with Win7 SP1 and XP SP3.
See error here: http://www.box.net/shared/3xga0qvnra

Thanks

[Nep]

Just an FYI... This also happens with OSForensics 0.92beta...

[David (PassMark)]

We have a look at it this morning and get back to you. If we can't reproduce it quickly we might need to ask you for additional details, like file paths, free space on the drive, and any case details meta data you entered with the files.

[Michael (Passmark)]

Firstly can you confirm you have created/opened a case from the "Manage Case" window. There is a bug in OSF currently that allows adding files to a case when you don't have one open and in this situation the behaviour is undefined.

If that wasn't the problem, can you export the files you are trying to copy to csv (right click -> export list of selected items to -> CSV) and email us the csv file so we can see if there are any files you are trying to copy that may be causing a problem.

[Nep]

Yes, I have created a case before searching for files and wanting to save them.
Sent email and requested CSV file.

[David (PassMark)]

Seems to be related to files with long names (around 260 characters).

There will be a fix available in the next patch release, late next week most likely.