From SleuthKitWiki
Revision as of 13:13, 22 January 2014 by Carrier (Talk | contribs)

Jump to: navigation, search

The Autopsy Forensic Browser is a graphical interface to the The Sleuth Kit and other digital investigation tools. Together, they can analyze Windows and UNIX disks and file systems (NTFS, FAT, UFS1/2, Ext2/3, etc.).

Autopsy 3 is Java-based and designed to be an end-to-end platform for digital forensics. That means that it can be extended by other developers. Full details can be found on the site.

Autopsy 2 is an old-school HTML-based interface. You can get the list of official features at the site.

Additional Information

  • The Autopsy User's Guide has information on how to use the tool in an investigation.
  • The Autopsy Developer's Guide has information on contributing to Autopsy and developing for it. Note that Autopsy 3 was designed as platform to integrate other digital forensics tools. The developer's guide also outlines how to develop modules to integrate into Autopsy.