# Section 6 Lab Quiz

**URL:** <https://sleuthkit.discourse.group/t/section-6-lab-quiz/645>\
**Category:** Autopsy Online Training\
**Created:** [April 11, 2020, 10:48am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645 "2020-04-11T10:48:58Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![WhiteBeard](https://avatars.discourse-cdn.com/v4/letter/w/ec9cab/32.png) [@WhiteBeard](https://sleuthkit.discourse.group/u/WhiteBeard)\
**Post date:** [April 11, 2020, 10:48am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/1 "2020-04-11T10:48:58Z")

</div>

Question: How many total “.jpg” files are in the folder “Pictures” where the notable hash hit was found?  
non of the option is correct, the Hashsit hits detect 6 file but only 1 file location point to Pictures folder. Am i missing something here or what.

---

<div class="post-metadata">

**Author:** ![Tahir](https://avatars.discourse-cdn.com/v4/letter/t/91b2a8/32.png) [@Tahir](https://sleuthkit.discourse.group/u/Tahir)\
**Post date:** [April 12, 2020, 6:15am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/2 "2020-04-12T06:15:44Z")

</div>

Hi ,  
Please follow these steps and you will find correct answer

click on “Image /videos” on ths task bar( under the menu bar)  
A new window will open and then clcik on the button “only has hits”.  
You wills ee three folders / file (spam and trash, Desktop/pictures, Cache).  
You have to click on the the pictures and then you will see 7 pictures on the right hand side. and that is correct answer.  
Tahir

---

<div class="post-metadata">

**Author:** ![Tahir](https://avatars.discourse-cdn.com/v4/letter/t/91b2a8/32.png) [@Tahir](https://sleuthkit.discourse.group/u/Tahir)\
**Post date:** [April 12, 2020, 6:16am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/3 "2020-04-12T06:16:55Z")

</div>

Hi All,  
can some one tell me how we ogt the question 1 answer  
“How many total hits are found under the “Hashset Hits” results after running the Hash Lookup Ingest Module?”

---

<div class="post-metadata">

**Author:** ![WhiteBeard](https://avatars.discourse-cdn.com/v4/letter/w/ec9cab/32.png) [@WhiteBeard](https://sleuthkit.discourse.group/u/WhiteBeard)\
**Post date:** [April 12, 2020, 8:45am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/4 "2020-04-12T08:45:07Z")

</div>

After you run the Hashset module you will find a number between square brackets, this is how many hit found by hash module.

---

<div class="post-metadata">

**Author:** ![Tahir](https://avatars.discourse-cdn.com/v4/letter/t/91b2a8/32.png) [@Tahir](https://sleuthkit.discourse.group/u/Tahir)\
**Post date:** [April 12, 2020, 8:59am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/5 "2020-04-12T08:59:06Z")

</div>

Can you share the image for me please, I cant get it

---

<div class="post-metadata">

**Author:** ![WhiteBeard](https://avatars.discourse-cdn.com/v4/letter/w/ec9cab/32.png) [@WhiteBeard](https://sleuthkit.discourse.group/u/WhiteBeard)\
**Post date:** [April 12, 2020, 9:01am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/6 "2020-04-12T09:01:47Z")

</div>

![Pasted Graphic](https://global.discourse-cdn.com/free1/uploads/sleuthkit/original/1X/005d6f5e4784723afeeca3d80ebeab99a557ec89.png)

---

<div class="post-metadata">

**Author:** ![Tahir](https://avatars.discourse-cdn.com/v4/letter/t/91b2a8/32.png) [@Tahir](https://sleuthkit.discourse.group/u/Tahir)\
**Post date:** [April 12, 2020, 9:04am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/7 "2020-04-12T09:04:17Z")

</div>

Thanks white beard,  
I got ransome case (8), so I was bit confused.  
Thanks again,  
I really appreacite that  
Tahir

---

<div class="post-metadata">

**Author:** ![peritos](https://avatars.discourse-cdn.com/v4/letter/p/3d9bf3/32.png) [@peritos](https://sleuthkit.discourse.group/u/peritos)\
**Post date:** [April 14, 2020, 2:56pm UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/8 "2020-04-14T14:56:53Z")

</div>

I got just 2  
Thanks  
Leandro

---

<div class="post-metadata">

**Author:** ![Giak20](https://avatars.discourse-cdn.com/v4/letter/g/898d66/32.png) [@Giak20](https://sleuthkit.discourse.group/u/Giak20)\
**Post date:** [April 15, 2020, 10:24am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/9 "2020-04-15T10:24:35Z")

</div>

Good morning, everyone, I’m not seeing any results. ![HashSet](https://global.discourse-cdn.com/free1/uploads/sleuthkit/original/1X/76400cfb6e66966f8dea612ec32fc414a6f8efd6.png)

---

<div class="post-metadata">

**Author:** ![fudlow](https://avatars.discourse-cdn.com/v4/letter/f/278dde/32.png) [@fudlow](https://sleuthkit.discourse.group/u/fudlow)\
**Post date:** [April 15, 2020, 9:13pm UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/10 "2020-04-15T21:13:24Z")

</div>

So my ingest gets to 86% and just hangs there - no hash hits, nothing. Anyone? Ferris? Anyone?

---

<div class="post-metadata">

**Author:** ![DMadden](https://avatars.discourse-cdn.com/v4/letter/d/f9ae1b/32.png) [@DMadden](https://sleuthkit.discourse.group/u/DMadden)\
**Post date:** [April 17, 2020, 3:13pm UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/11 "2020-04-17T15:13:22Z")

</div>

I have been stuck at 1% for over an hour. Autopsy did the same thing last night. I shut down and reloaded the project and still getting stuck. Running an i7-8750H @2.2GHz with 32GB ram.

---

<div class="post-metadata">

**Author:** ![Sparkles\_Gliters](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/sparkles_gliters/32/541_2.png) [@Sparkles\_Gliters](https://sleuthkit.discourse.group/u/Sparkles_Gliters)\
**Post date:** [April 17, 2020, 5:47pm UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/12 "2020-04-17T17:47:54Z")

</div>

Same Problem here, it says “configure my Central Repository”? how am I suppose to do that? thank you in advance for answering

---

<div class="post-metadata">

**Author:** ![Paul](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/paul/32/85_2.png) [@Paul](https://sleuthkit.discourse.group/u/Paul)\
**Post date:** [April 18, 2020, 2:21am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/13 "2020-04-18T02:21:04Z")

</div>

IIRC there were 6 files but not all were .jpg files

---

<div class="post-metadata">

**Author:** ![aadit\_dave](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/aadit_dave/32/553_2.png) [@aadit\_dave](https://sleuthkit.discourse.group/u/aadit_dave)\
**Post date:** [April 19, 2020, 10:59am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/14 "2020-04-19T10:59:05Z")

</div>

Hi Tahir,

I just got 10 cases, is that correct answer?

 ![Untitled-1](https://global.discourse-cdn.com/free1/uploads/sleuthkit/original/1X/f2bc24033cd94bc56bba992334982aa9c6461f91.jpeg)

---

<div class="post-metadata">

**Author:** ![aadit\_dave](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/aadit_dave/32/553_2.png) [@aadit\_dave](https://sleuthkit.discourse.group/u/aadit_dave)\
**Post date:** [April 19, 2020, 11:07am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/15 "2020-04-19T11:07:22Z")

</div>

Also i can not find this question answer  
One of the hits is in a folder named “Pictures”. Right click on the file to “View” there.

Please help me.

---

<div class="post-metadata">

**Author:** ![Tahir](https://avatars.discourse-cdn.com/v4/letter/t/91b2a8/32.png) [@Tahir](https://sleuthkit.discourse.group/u/Tahir)\
**Post date:** [April 19, 2020, 11:12am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/16 "2020-04-19T11:12:24Z")

</div>

Hi  
Thanks for your email,

Some time you run the things again and then it does this , this has happened to me, but you dont need to worry, the purpose of the exercise is how you utlisie this product,

---

<div class="post-metadata">

**Author:** ![SK49](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@SK49](https://sleuthkit.discourse.group/u/SK49)\
**Post date:** [April 25, 2020, 11:04am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/17 "2020-04-25T11:04:57Z")

</div>

1. Select the hashits tree node that has a count in its name
2. Review the details pane
3. Find the file that has the required path
4. Right-click that file and choose ‘View in Directory’

---

<div class="post-metadata">

**Author:** ![Pato](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/pato/32/637_2.png) [@Pato](https://sleuthkit.discourse.group/u/Pato)\
**Post date:** [April 25, 2020, 10:57pm UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/18 "2020-04-25T22:57:26Z")

</div>

same problem here but, 2% instead… have you fix it?

---

<div class="post-metadata">

**Author:** ![DMadden](https://avatars.discourse-cdn.com/v4/letter/d/f9ae1b/32.png) [@DMadden](https://sleuthkit.discourse.group/u/DMadden)\
**Post date:** [April 27, 2020, 4:34pm UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/19 "2020-04-27T16:34:18Z")

</div>

I ended up closing down the project. Restarting my computer and then reloading the project. Ran smooth after that.

---

<div class="post-metadata">

**Author:** ![Pato](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/pato/32/637_2.png) [@Pato](https://sleuthkit.discourse.group/u/Pato)\
**Post date:** [April 28, 2020, 3:32am UTC](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645/20 "2020-04-28T03:32:05Z")

</div>

It worked also to me. Thanks for the hint!

[Next page](https://sleuthkit.discourse.group/t/section-6-lab-quiz/645.md?page=2)
