The Autopsy Forensic Browser is a graphical interface to The Sleuth Kit. Together, they can analyze Windows and UNIX disks and file systems (NTFS, FAT, UFS1/2, Ext2/3). Version 3.0 of Autopsy is a complete re-write and this page describes its features.

Autopsy 3 has been designed to be a graphical platform for open source digital forensics tools. It was written in Java using the NetBeans Platform. This approach allows Autopsy to run on multiple platforms (Windows, OS X, Linux, etc.) and have a modular framework that makes it easy to incorporate other open source forensics tools and create an end-to-end solution. Autopsy 3.0 is faster and easier to use than Autopsy 2.0

New features:

- Using Sleuthkit 4.0.0

- Integrated plugin installer.

- New options menu to globally access module options.

- Added custom ingest module loader and ingest module auto-discovery

Improvements:

- Updated ingest framework APIs.

- Merged the main modules into Autopsy-Core and Autopsy-CoreLibs.

- Improved logging infrastructure.

- Improved configuration infrastructure.

- Keyword search: upgraded Lucene from 34 to 36.

- Build system improvements.

- Updated documentation.

Download The Autopsy Forensic Browser v 3.0.0

Subscribe Top Hacker Stories via email