I would like to get all the files that have the Attribute Flag “Hidden” to group up for review for my class assignment. I cannot figure out how to get them to do this and I cannot find a solution to this online. I am using Autopsy 4.16.0 if this helps. The only other option I have to me is to go through each user individually and look at each and every file manually.
Is there anyway to get Autopsy to group all of the hidden files into one section similar to Extension Mismatch Detection or Installed Programs?