by thegman » Wed Jul 08, 2015 8:49 pm
I recently had a power outage while analyzing a drive. Autopsy was about half way through the ingest modules. When I started the computer back up and started to run the ingest modules again, my expectation was that autopsy would start where it left off. To my surprise autopsy seemingly had to start running the ingest modules from the beginning. Is this expected behavior?