[opensuse] Fwd: Another sleuthkit based question