Is there any documentation on backing up a case (single user) to move to a new machine or drive?
You should just be able to move the whole case folder. The only thing that will potentially break is if the image paths change. When you load up the case from the new location it may tell you that the image(s) in the case can not be found and will allow you to try to browse to it. You can also use something like SQLiteBrowser to update the autopsy.db file. The image paths are in the tsk_image_names table.
1 Like