Guys, when I run Autopsy to do the analysis of evidence, does it usually take too long? I ask because the status of the analysis of the image I’m running goes 24 hours and is still at 22% …
Note: 250GB image size.
It takes a long time for me too. I would say that it all depends on the hardware Autopsy is running on as well as the current availability of those resources when it is running.
Big tip is to ensure that you have enough disk space before running this module as I have had to expend my VM HDD twice now. 