Process Multiple E01 Images

[Jefresongil]

Considering the situation presented in the image, where I have several folders and each of them can have from one to "n" E01 image files. What would be the way to process it? Should I insert each folder one by one with its respective E01, or could I run the processing by indicating only the root folder?

[wladimirleite]

Hi @Jefresongil!
Currently, it is necessary to add each E01 to your processing command.
There is an open issue (#143) to allow passing a folder and process all forensic images inside it.

[wladimirleite]

The full processing log should help to find out what is going on. Can you share it? Or send me privately?

[Jefresongil]

I ended up deleting the post because I went back into processing and, strangely, all the folders appeared. I looked like a scarecrow.

[Jefresongil]

I think this is a different situation that also involves processing multiple E01 files.
The tool can't update the progress of this processing.
On Saturday, I almost aborted it, but luckily a voice told me, "Leave it alone." And luckily, I listened. And the processing completed.
Now, I'm adding four more folders to the same process.
Initially, this /0408CartasMarcados2 would be the first, but the bar hasn't even gone above zero.
I know it's processing, but it's undeniably causing anxiety and concern.

[wladimirleite]

It is still adding items ("Adicionando..." in the status shown in the progress bar).
While the total amount of data to be processed is unknown (i.e. it is still adding items), it won't be able to predict how long it will take, so the estimated finish time and the progress is not shown.
But you can clearly see that the "Processed Volume" and "Processed Items" are growing.

It is not directly related to the number of evidence files, as this situation also happens with a single evidence.
If the evidence files are not in a fast SSD, you may have an I/O bottleneck, and pausing the processing (button in the top right) may speed up items discovery.
However, in general, this won't reduce the total time spent in the processing.

[Jefresongil]

I believe we've addressed almost all the questions on this topic, but I'll venture one last one.
I rarely analyze execution logs when the process completes without errors, but this one is more intriguing.
I noticed hundreds of warnings all related to the same topic, so I decided to ask if there's any harm in this.
I noticed hundreds of "Pipe Closed" messages, but only a few showed relevant content like the one highlighted in the attached image. Is there anything concerning?
After this, I think I can close this discussion.