Autopsy

From SleuthKitWiki
Revision as of 07:44, 6 December 2012 by Octest (Talk | contribs)

Jump to: navigation, search

The Autopsy Forensic Browser is a graphical interface to the The Sleuth Kit and other digital investigation tools. Together, they can analyze Windows and UNIX disks and file systems (NTFS, FAT, UFS1/2, Ext2/3, etc.).

Autopsy 2 is an old-school HTML-based interface. You can get the list of official features at the sleuthkit.org site.

Autopsy 3 is a complete rewrite and is Java-based using the NetBeans platform. It is currently in beta form. You can get the official list of features at the sleuthkit.org site.

Additional Information

  • The Autopsy User's Guide has information on how to use the tool in an investigation.
  • The Autopsy Developer's Guide has information on contributing to Autopsy and developing for it. Note that Autopsy 3 was designed as platform to integrate other digital forensics tools. The developer's guide also outlines how to develop modules to integrate into Autopsy.