Autopsy

Sleuth Kit

Autopsy is a digital forensics platform that serves as a graphical interface to The Sleuth Kit and other forensic tools. Used by law enforcement, military, and corporate examiners, it allows you to investigate computer activities and even recover photos from camera memory cards. Designed as a comprehensive platform, Autopsy includes default and third-party modules, facilitating detailed analyses such as keyword search, timeline analysis, and deleted file recovery, among others, to provide a complete understanding of digital incidents.

Autopsy addresses the need to analyze and understand specific activities in computer systems in a detailed manner. Its ability to integrate various forensic tools helps identify security compromises and recover deleted data, essential in digital security investigations.

Autopsy is a digital forensics platform that serves as a graphical interface for The Sleuth Kit and other forensic tools. It allows examiners to investigate computer activity using modules such as timeline analysis, hash filtering, keyword searching, web artifact extraction, and deleted file recovery.

Autopsy natively integrates E01 (Expert Witness) and RAW/DD formats; its ingestion wizard recognizes both without prior conversion. It also uses standard MIME, ZIP, and EXIF metadata identifiers to classify artifacts, standardizing forensic analysis and ensuring reproducible legal proceedings without relying on proprietary tools.