Hello everyone,
I got to the point where I need to ingest the modules to see if there are any Hash hits, and the analysis takes a very long time, about 20 minutes to get to 5% progression in the bar in the lower-right corner of the application.
I was curious if this time is normal or not. I have quite a decent laptop running an i7 CPU @2.90GHz with 16GB of RAM. The files are stored on a SSD.
Thank you in advance,
Razvan
Did you got any update on how to resolve this? I also have the same issue, I am stuck to 1% for more than 10 min.
Yeah, I guess it’s alright. The first 5% took some time, however, it got escalated at a pretty good speed after that. I have a i7 @2.20Ghz.
Thank you focyber86 for confirming it - I have moved to 36% now and suck again.
Yes, eventually it came around after reaching 5%, it then started moving much faster, so I guess if you had the same problems than it must be the normal behavior
I feel like it’s been forever (20 minutes?) to get to 2%. I was thinking I set up something wrong in the lab but after reading other comments here it sounds like I’m in the same boat as you.
I missed one small step in the lab which is to Use “Add Hashes to Hash Set” button to copy and paste the following MD5 value into the “Ransom Case” hash set.
So I tried cancelling the ingesting and analyzing, but it does not work, and now it is stuck and i am not sure what to do to proceed. i have removed the data source and deleted the case, but the analyzing is still going on. appreciate any help
Cancellation is a sort of “best effort” thing. A message is sent to the ingest modules to stop, but it may be a while before they check it. At this point just close and reopen Autopsy to stop it.
Thank you so much! Yes finally I decided to reboot and I guess it’s the same. I’ve completed section 6 and excited to try section 7. Slow and steady. Wonderful tool!
I ran into the same issue. My solution was to force close Autopsy and reopen as @apriestman stated.
My laptop is running a 6th Gen i7 with 16GB and an Intel SSD. I chalked the slow processing time up to the fact most laptop processors are ultra-low power, designated with the “U” suffix, as opposed to high performance chips designated with an H, HK, etc. that you would find in gaming laptops or higher-end workstations.
I may be wrong, but it was just a thought.