The kickstart module

One of the core modules is the kickstart module. The kickstart module is used to insert the evidence into the running ocfa system.  The example below describes the command line usage of the kickstart module.

Usage: ./kickstart caseid sourceid itemid path [ charset ]

Example:

./kickstart MyCase Box2 HDU1 /mount/mycase/repos LATIN1

Parameters used with kickstart:
Remark:
Use for caseid, sourceid and itemid only alphanumeric values without any special characters.
  1. caseid. Describes the case.
  2. sourceid. Describes the source.
  3. itemid. Describes the item.
  4. path. The path from which the ocfa treewalker starts with analyzing.
  5. charset. Optional. Possible values:  LATIN1, UTF8, UCS-2, UTF-16 and many more (see iconv -l for a complete list). When not specified, the kickstart will try an automatic guess.