Difference between revisions of "Autopsy"

From SleuthKitWiki
Jump to: navigation, search
(Created initial version with content from sleuthkit.org)
 
Line 1: Line 1:
The Autopsy Forensic Browser is a graphical interface to the command line digital investigation analysis tools in  [[The Sleuth Kit]]. Together, they can analyze Windows and UNIX disks and file systems (NTFS, FAT, UFS1/2, Ext2/3).
+
The Autopsy Forensic Browser is a graphical interface to the [[The Sleuth Kit]] and other digital investigation tools. Together, they can analyze Windows and UNIX disks and file systems (NTFS, FAT, UFS1/2, Ext2/3, etc.).
  
The Sleuth Kit and Autopsy are both Open Source and run on UNIX platforms. As Autopsy is HTML-based, you can connect to the Autopsy server from any platform using an HTML browser. Autopsy provides a "File Manager"-like interface and shows details about deleted data and file system structures.
+
Autopsy 2 is an old-school HTML-based interface.  You can get the list of official features at the [http://www.sleuthkit.org/autopsy/desc.php sleuthkit.org] site.  
  
More details and features are listed [http://www.sleuthkit.org/autopsy/ here].
+
[[Autopsy 3]] is a complete rewrite and is Java-based using the NetBeans platform. It is currently in beta form.  You can get the official list of features at the [http://www.sleuthkit.org/autopsy/desc3.php sleuthkit.org] site.
 +
 
 +
If you want more information on using Autopsy to conduct an investigation, refer to the [[Autopsy User's Guide]].
 +
 
 +
If you want more information on contributing to Autopsy and developing for it, refer to the [[Autopsy Developer's Guide]].  Note that  Autopsy 3 was designed as platform to integrate other digital forensics tools.  The developer's guide also outlines how to develop modules to integrate into Autopsy.

Revision as of 14:28, 5 June 2012

The Autopsy Forensic Browser is a graphical interface to the The Sleuth Kit and other digital investigation tools. Together, they can analyze Windows and UNIX disks and file systems (NTFS, FAT, UFS1/2, Ext2/3, etc.).

Autopsy 2 is an old-school HTML-based interface. You can get the list of official features at the sleuthkit.org site.

Autopsy 3 is a complete rewrite and is Java-based using the NetBeans platform. It is currently in beta form. You can get the official list of features at the sleuthkit.org site.

If you want more information on using Autopsy to conduct an investigation, refer to the Autopsy User's Guide.

If you want more information on contributing to Autopsy and developing for it, refer to the Autopsy Developer's Guide. Note that Autopsy 3 was designed as platform to integrate other digital forensics tools. The developer's guide also outlines how to develop modules to integrate into Autopsy.