# Section 7 Lab question 2

**URL:** <https://sleuthkit.discourse.group/t/section-7-lab-question-2/750>\
**Category:** Autopsy Online Training\
**Created:** [April 13, 2020, 10:39am UTC](https://sleuthkit.discourse.group/t/section-7-lab-question-2/750 "2020-04-13T10:39:53Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Abdulghani\_Alkhateeb](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/abdulghani_alkhateeb/32/395_2.png) [@Abdulghani\_Alkhateeb](https://sleuthkit.discourse.group/u/Abdulghani_Alkhateeb)\
**Post date:** [April 13, 2020, 10:39am UTC](https://sleuthkit.discourse.group/t/section-7-lab-question-2/750/1 "2020-04-13T10:39:53Z")

</div>

I tried to search for Archive.7z under the View list but there is no File matched with given one in the lab step, how do I find it?

---

<div class="post-metadata">

**Author:** ![John\_Lehr](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/john_lehr/32/45_2.png) [@John\_Lehr](https://sleuthkit.discourse.group/u/John_Lehr)\
**Post date:** [April 13, 2020, 2:13pm UTC](https://sleuthkit.discourse.group/t/section-7-lab-question-2/750/2 "2020-04-13T14:13:47Z")

</div>

There are a few ways for find files in Autopsy. The most direct way, when you have a file name as is provided in the question, is to use File Search by Attributes dialog box from the Tools menus. Select the name options, and search for “archive.zip”. The search is case in-sensitive.

A more indirect method to search for Zip archives is to use the same File Search by Attributes and search for mime type application/zip.

Finally, Autopsy provides a shortcut in the left panel in the Views section: File Types -\> By Extension -\> Archives. Just be aware that file name extensions can be incorrect or falsified and this is the least accurate search.

---

<div class="post-metadata">

**Author:** ![datta\_charan](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/datta_charan/32/445_2.png) [@datta\_charan](https://sleuthkit.discourse.group/u/datta_charan)\
**Post date:** [April 14, 2020, 1:45pm UTC](https://sleuthkit.discourse.group/t/section-7-lab-question-2/750/3 "2020-04-14T13:45:21Z")

</div>

I have the same issue, even after searching for the file using above solution the file doesn’t show up.  
its like the file doesn’t exist.

---

<div class="post-metadata">

**Author:** ![jot3r](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/jot3r/32/530_2.png) [@jot3r](https://sleuthkit.discourse.group/u/jot3r)\
**Post date:** [April 16, 2020, 11:26pm UTC](https://sleuthkit.discourse.group/t/section-7-lab-question-2/750/4 "2020-04-16T23:26:15Z")

</div>

I found it looking in file type\> By MIME TYPE \> application\> zip (9)  
 ![imagen](https://global.discourse-cdn.com/free1/uploads/sleuthkit/original/1X/0c62f721a58ff574e9d5a0e96e852a8fd8614c65.png)  
regards