Autopsy – A Digital Forensic Tool
Autopsy is a forensic tool that is used by law enforcement, military, and corporate examiners to investigate what happened on a computer or a smartphone. It has a plug-in architecture that allows you to find add-on modules or develop custom modules in Java or Python. Autopsy offers the following features: Multi-User Cases: Collaborate with fellow examiners on large cases. Timeline Analysis: Displays system events in a graphical interface to help identify activity. Keyword Search: Text extraction and index searched modules enable you to find files that mention specific terms and find regular expression patterns. Web Artifacts: Extracts web activity from common browsers to help identify user activity. Registry Analysis: Uses RegRipper to identify recently accessed documents and USB devices. LNK File Analysis: Identifies shortcuts and accessed documents. Email Analysis: Parses MBOX format messages, such as Thunderbird. EXIF: Extracts geolocation and camer...