Autopsy Forensic Browser, version 2

From ForensicsWiki
Revision as of 16:05, 14 May 2006 by Jfbeckers (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

The Autopsy Forensic Browser [1] is a graphical interface to the command line digital investigation analysis tools in The Sleuthkit. Together, they can analyze Windows and UNIX disks and file systems (NTFS, FAT, UFS1/2, Ext2/Ext3).

The Sleuthkit and Autopsy are both Open Source and run on UNIX platforms. As Autopsy is HTML-based, you can connect to the Autopsy server from any platform using an HTML browser. Autopsy provides a "File Manager"-like interface and shows details about deleted data and file system structures.