Compound Filters

This video shows how to use compound filters in FTK. compound filters are an option when available saved filters don’t work and you don’t want to create definitions from scratch. It displays the difference between applying different operations to the Include and Exclude box. It demonstrates how the File List looks when filters are active and how to toggle filters on and off.

Include

FTK file list with Filter Manager button highlighted Click Filter Manager

Filter Manager window with filter higlighted and cursor over right arrows "include" button Select a filter from the Filters list. Click on the right arrow button next to Include box.

Filter Manager window with filter displayed in Include box and cursor over Define button The selected filter is applied to Include. Select Define to view filter Rules.

Filter Definition window Note Operators Is.

Filter Definition window displaying no resource fork filter Check Filter Definition for filter no resource fork. Note Operator Does Not Start with. Click Close.

Filter Manager window displaying no resource fork filter in Include box Click right arrow button next to Include box to apply no resource fork filter to Include.

File List with folders multi filter applied and folders displayed Note that folders are displayed when the compound filter is on.

File List with compound filter toggled off Click funnel icon on upper left to toggle filter off.

Exclude

FTK file list with Filter Manager button highlighted Click Filter Manager

Filter Manager window with folders filter highlighted in Include box and cursor over left arrow button next to Include box Select Folders filter. Click left arrow button next to Include box.

Filter Manager window with folders filter highlighted and cursor over right arrows button next to Exclude box Select Folders filter. Click right arrow button next to Exclude box.

Filter Manager window with folders filter in Exclude box Folders filter is now applied to Exclude.

File List with folders filter applied to Exclude Note Folders are now hidden with filter applied.

File list with compound filter toggled off Click funnel icon in upper left corner to toggle filter off. Folders are now displayed.