Learning Autopsy for Digital Forensics

Learn the basics of Autopsy, the digital forensic platform and graphical interface that helps you apply the tools of the Sleuth Kit and other digital forensics tools.

Introduction

• Hey, where's the data?
• Getting the most out of this course

1. Preparing Autopsy

• Introduction and installation of Autopsy
• Autopsy workflow
• Creating a case
• What data sources are allowed?
• Viewing case logs and output
• Challenge: View case logs and output
• Solution: View case logs and output

2. Ingest Modules

• Utilizing Automated Analysis in Autopsy
• The Extension Mismatch and USB device-attached modules
• The Recent Activity and Interesting Files modules
• Installing third-party modules
• Challenge: Install a third-party module
• Solution: Install a third-party module

3. Reviewing Results

• UI layout
• The image and video gallery
• The timeline tool

4. Searching and Reporting

• Searching for keywords and files
• Tagging
• Generating reports in Autopsy
• Challenge: Search for all instances of a file
• Solution: Search for all instances of a file

Conclusion

• Next steps: Create your own case and analyze your files