# Multi-accounts and recent activity

**URL:** <https://sleuthkit.discourse.group/t/multi-accounts-and-recent-activity/3836>\
**Category:** Autopsy Feature Requests\
**Created:** [July 5, 2023, 7:50am UTC](https://sleuthkit.discourse.group/t/multi-accounts-and-recent-activity/3836 "2023-07-05T07:50:07Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fabrice](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/fabrice/32/1520_2.png) [@Fabrice](https://sleuthkit.discourse.group/u/Fabrice)\
**Post date:** [July 5, 2023, 7:50am UTC](https://sleuthkit.discourse.group/t/multi-accounts-and-recent-activity/3836/1 "2023-07-05T07:50:07Z")

</div>

Hi!  
We found out an issue with the recent activity module. It actually has difficulties to find results with the multi-accounts on a Windows E01. For the main account, it finds a lot of things, but for all the secondaries (4 for us today), there are no results (or just a few), not enough anyway.  
After working with the web databases for each account, we have found a lot more.  
Does anyone have noticed that before?

Many thanks.

---

<div class="post-metadata">

**Author:** ![Mark\_McKinnon](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/mark_mckinnon/32/42_2.png) [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Post date:** [July 5, 2023, 12:21pm UTC](https://sleuthkit.discourse.group/t/multi-accounts-and-recent-activity/3836/2 "2023-07-05T12:21:09Z")

</div>

Hi Fabrice,

Are you referring to the profiles that are used in chromium browsers? What version of Autopsy are you using?

Mark

---

<div class="post-metadata">

**Author:** ![Fabrice](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/fabrice/32/1520_2.png) [@Fabrice](https://sleuthkit.discourse.group/u/Fabrice)\
**Post date:** [July 5, 2023, 12:28pm UTC](https://sleuthkit.discourse.group/t/multi-accounts-and-recent-activity/3836/3 "2023-07-05T12:28:12Z")

</div>

Hi,  
this is for all datas from the recent activities (like all browsers). All datas from the main user are found, but from the other users, it just found a very few. But compares to the databases we parsed, it is like it began, but stoped, and then did the others the same way.  
We are using autopsy 4.20.0.

---

<div class="post-metadata">

**Author:** ![Fabrice](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/fabrice/32/1520_2.png) [@Fabrice](https://sleuthkit.discourse.group/u/Fabrice)\
**Post date:** [July 5, 2023, 12:43pm UTC](https://sleuthkit.discourse.group/t/multi-accounts-and-recent-activity/3836/4 "2023-07-05T12:43:59Z")

</div>

I meant Windows users. Sorry for the explanation.

---

<div class="post-metadata">

**Author:** ![Fabrice](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/fabrice/32/1520_2.png) [@Fabrice](https://sleuthkit.discourse.group/u/Fabrice)\
**Post date:** [July 6, 2023, 3:42pm UTC](https://sleuthkit.discourse.group/t/multi-accounts-and-recent-activity/3836/5 "2023-07-06T15:42:49Z")

</div>

Hi,  
after further testing, it appears that the error was caused by us and the filters we have used in a speadsheet. The problem was that at first it was difficult to differentiate between users because they were in the same source, and after checking, some databases that we thought were full, were empty.  
My bad…  
Fab.