Re: [sleuthkit-users] Moving case locker, files, etc...

[Brian C. <ca...@sl...>]

On Nov 22, 2004, at 8:30 PM, Rich Thompson wrote:

> I am upgrading Linux distros, and will need to
> preserve some case locker files, etc...  can I just
> burn the entire case locker to a disk, re-install
> Linux, re-install the Sleuthkit and Autopsy, then copy
> back the case locker???  I might need to work more on
> these cases, and I want to pick up where I left off (I
> really don;t want to do all that work again...)


Yea.  The evidence locker is very flexible.  It has no full paths 
inside of it.  The only potential issue is if you imported your 
partition images with a symbolic link then the image must exist in the 
same location in your new system or you need to manually delete the 
link and make a new one to the new location.

Check out the Informer #2 for more details:
http://www.sleuthkit.org/informer/sleuthkit-informer-2.html

brian