I have question/problem I have case with a lot of sources. To limit duplication of files to analyse - I made
filters for every of source - every next source hash lookup is whitelisted by unique md5’s of previous ones. And it worked, but when I accidentally selected wrong filter (hashset of known files) a lot of files
disappeared from results - what is correct. But problem is that when i re-run hash verification with disabled previously selected filter - Autopsy remembered that those files are known and they don’t appear on the list anymore.
Is there any way to “undo” hashlist verification process by specific hashlist ?
I’m using Autopsy 4.19 on Linux