Autopsy

The Autopsy Forensic Browser is a graphical interface to the The Sleuth Kit and other digital investigation tools. Together, they can analyze Windows and UNIX disks and file systems (NTFS, FAT, UFS1/2, Ext2/3, etc.).

Autopsy 2 is an old-school HTML-based interface. You can get the list of official features at the sleuthkit.org site.

Autopsy 3 is a complete rewrite and is Java-based using the NetBeans platform. It is currently in beta form. You can get the official list of features at the sleuthkit.org site.

Additional Information

• The Autopsy User's Guide has information on how to use the tool in an investigation.
• The Autopsy Developer's Guide has information on contributing to Autopsy and developing for it. Note that Autopsy 3 was designed as platform to integrate other digital forensics tools. The developer's guide also outlines how to develop modules to integrate into Autopsy.