Difference between pages "Digital Forensic Research Workshop" and "Autopsy Forensic Browser"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
m
 
m
 
Line 1: Line 1:
'''Digital Forensic Research Workshop''' - DFRWS [http://www.dfrws.org/]
+
The '''Autopsy Forensic Browser''' [http://www.sleuthkit.org/autopsy/index.php] is a graphical interface to the command line digital investigation analysis tools in  The [[Sleuthkit]]. Together, they can analyze Windows and UNIX disks and file systems ([[NTFS]], [[FAT]], [[UFS1/2]], [[Ext2]]/[[Ext3]]).
  
The Digital Forensic Research Workshop (DFRWS) was initiated in August 2001 to bring academic researchers and digital forensic investigators and practitioners together for active discussion that addresses three major objectives:
+
The [[Sleuthkit]] and Autopsy are both Open Source and run on UNIX platforms. As Autopsy is HTML-based, you can connect to the Autopsy server from any platform using an HTML browser. Autopsy provides a "File Manager"-like interface and shows details about deleted data and file system structures.
 
+
* Define the need and create the processes for the incorporation of a rigorous scientific method as a fundamental tenant of the evolving discipline of Digital Forensic Science
+
* Develop a research agenda that considers practitioner requirements, multiple investigative environments and emphasizes real world usability
+
* The discovery, explanation and presentation of conclusive, persuasive evidence that will meet the heightened scrutiny of the courts and other decision-makers in military and civilian environments
+
 
+
Since 2001, an annual workshop has been held in various cities around the US to present and discuss research topics. Archives are available as well as a more detailed history.
+

Revision as of 11:05, 14 May 2006

The Autopsy Forensic Browser [1] is a graphical interface to the command line digital investigation analysis tools in The Sleuthkit. Together, they can analyze Windows and UNIX disks and file systems (NTFS, FAT, UFS1/2, Ext2/Ext3).

The Sleuthkit and Autopsy are both Open Source and run on UNIX platforms. As Autopsy is HTML-based, you can connect to the Autopsy server from any platform using an HTML browser. Autopsy provides a "File Manager"-like interface and shows details about deleted data and file system structures.