several questions below.
Regarding Autopsy 4.12 on Windows, single user, single server (windows 10)
I frequently need to run several modules in a certain order when starting a new case. Is there a way to script/automate running modules?
I see the in documentation for multi-user case, that a multi-user setup has some auto ingest capabilities, but I have no need for a multi-user setup. Please let me know if you think there would be a performance boost using a multi-user setup on a single server (no share over the network).
I did look for some command line parameters for the autopsy64.exe, and if I read everything correctly, the parameters apply to a new case only, not an existing case. Am I correct?
Please also note:
My cases involve several images in a single case (5 - 20 usually). So I would like to also specify the image each module is running against. (my testing shows better performance running a single module across several images at time, is better than trying to run several modules on a single image)
The ability to select the order in which a module is run is important, example use case: I need to run the Embedded File Extraction before the Hash Lookup in order to apply the hash lookup to any files within an archive.
Thanks for your time,