search

sleuthkit / autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
http://www.sleuthkit.org/autopsy/
2.3k stars 586 forks source link

Autopsy 4.2.0 & 4.3.0 Hash Lookup run 80% then complains of SQL errors #2479

Open globeone opened 7 years ago

globeone commented 7 years ago

Autopsy 4.2.0 and 4.3.0 (windows 7) Whenever I run the Hash Lookup about 80% of the way I start getting the following SQL error.

Unable to close connection to case database Caused by: An SQLException was provoked by the following failure: java.util.ConcurrentModificationException

Disk layout is as such

C: SSD Partition 1 = Autopsy Program E: SSD Partition 2 = Autopsy Case Files F: USB3 m.2 SSD = Encase Image Files

image

rcordovano commented 7 years ago

globeone, this has also been reported by another user via the Sleuthkit User group. The other user provided log files, so we have some additional data about the problem with which to work. We will have someone look at this as soon as we can spare the resources to do so.

Thanks,

Richard Cordovano Autopsy/Autopsy Customization Team Lead Director of Engineering, Digital Forensics Basis Technology

On Tue, Jan 24, 2017 at 9:23 AM, globeone notifications@github.com wrote:

Autopsy 4.2.0 and 4.3.0 (windows 7) Whenever I run the Hash Lookup about 80% of the way I start getting the following SQL error.

Unable to close connection to case database Caused by: An SQLException was provoked by the following failure: java.util.ConcurrentModificationException

Disk layout is as such

C: SSD Partition 1 = Autopsy Program E: SSD Partition 2 = Autopsy Case Files F: USB3 m.2 SSD = Encase Image Files

[image: image] https://cloud.githubusercontent.com/assets/10052587/22250806/9ac79e1e-e248-11e6-9b56-2eb2e573fd0e.png

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/sleuthkit/autopsy/issues/2479, or mute the thread https://github.com/notifications/unsubscribe-auth/ABolxSkL38C38hRl5D8Ybdw377EH7WOgks5rVglygaJpZM4LsUa6 .