The Sleuth Kit & Autopsy Logo

The Sleuth Kit & Autopsy

0
Free
Visit Website

Autopsy is a GUI-based digital forensics platform that allows users to efficiently analyze hard drives and smart phones, with a plug-in architecture for custom modules. It is built on top of The Sleuth Kit, a collection of command line tools and a C library for analyzing disk images and recovering files. The tools are widely used and have active community support, with commercial training, support, and custom development available. The platform is actively maintained, with regular releases and updates, including new features and bug fixes. Autopsy and The Sleuth Kit are widely used by digital forensics professionals around the world.

FEATURES

ALTERNATIVES

Toolkit for performing acquisitions on iOS devices with logical and filesystem acquisition support.

Tool for parsing Android logs events and protobuf data

A command-line tool for creating hex dumps, converting between binary and human-readable representations, and patching binary files.

A network forensics toolkit that transforms network traffic data into graph-based representations for interactive analysis and visualization through a web interface.

Python script to parse the NTFS USN Change Journal.

Web interface for the Volatility Memory Analysis framework with advanced features.

A next-generation crawling and spidering framework for extracting data from websites

A library to access FileVault Drive Encryption (FVDE) encrypted volumes on Mac OS X systems.