Re: [sleuthkit-users] Autopsy3 architecture discussion

[Luís F. N. <lfc...@gm...>]

Hi everyone,

I am new to Autopsy and have played a bit with Autopsy 3.0.9 and,
monitoring system resources and the gui, the module ingesting pipeline
seems to be single threaded to me, i.e., only one file is processed at a
time in the pipeline. Is it correct?

If yes, I suggest and ask for an improvement to the design to execute
multiple parallel module pipelines concurrently. Each pipeline would
process a different file, picked up from a shared list of files to process.
Autopsy could start N pipelines by default, where N is the number of
processor cores in the system, so it will take full advantage of high
concurrent hardware available these days. I think this would result in
great processing speed ups.

Nassif