Autopsy output files storage

View previous topic View next topic Go down

Autopsy output files storage

Post  jhowell920 on Sun Jul 05, 2009 2:49 am

Hello,
I am using the CAINE v0.5 software to conduct the examination of my evidence which usually graphics cases, and when I have the Autopsy program output all of the graphics on the suspect drive image it stores them to my local drive. The problem I have is that I have run out of room that drive, I moved an old case off and can now use the system (it was deleting items on its own due to low disc space), but I currently am examining two cases that have a lot of data (one is 640GB the other is 800GB). Is there a way to redirect the output from autopsy to another drive, I am concerned that I will run out of space again when I do the graphics dump. Also can you tell me where CAINE might store other large files on my local disk I still only have 135GB free on a 250GB partition, and I do not think that CAINE has that big of a footprint. Any information would be great Thank You.

JHowell

jhowell920

Number of posts : 1
Registration date : 2009-07-05

View user profile

Back to top Go down

Re: Autopsy output files storage

Post  denis on Mon Jul 06, 2009 11:48 pm

you could use another disk, network or usb disk, make a mount point, and use it as autopsy output directory making a simlink from /var/lib.
Delete or rename the autopsy output directory, then, using /media/sdc1/autopsy/ to store your output make
# cd /var/lib
# ln -s /media/sdc1/autopsy/ autopsy
in this way you make a link, named autopsy so the program don't make mistake, but all output will be fit in /media/sdc1/autopsy/

regardes.
Denis

denis

Number of posts : 52
Località : Torino, Italy
Registration date : 2008-10-27

View user profile http://www.denisfrati.it

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum