Using Past Data to Determine Relevance in Autopsy

Explore the latest advancements in digital forensics and data relevance determination in this 29-minute conference talk from OSDFCon 2020. Discover how Autopsy's new File Discovery UI leverages past case data to prioritize file analysis, allowing investigators to focus on unique and potentially significant files. Learn about the Central Repository's role in storing hash data from previous cases and its integration with the File Discovery UI. Gain insights into future developments for more efficient data triage and customizable search settings. Presented by Brian Carrier, CTO at Basis Technology and renowned digital forensics expert, this talk covers Carrier's Laws, Autopsy's current architecture, the concept of "Marked as Notable," and the implementation of past case data in forensic analysis. Witness a live demo and explore the potential applications in Cybertriage. Enhance your understanding of modern digital forensics techniques and tools to streamline investigations and improve efficiency in uncovering relevant evidence.

Introduction
Carriers Laws
Autopsy
Current Architecture
Marked as Notable
Past Cases Table
Past Data Concepts
Past Data UI
Grouping Results
Demo
Cybertriage