Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card. Installers can be found at: http://www.sf.net…
Java Perl Python Other

Merge pull request #1273 from sleuthkit/report_updates

Updated report interface variable name to make it more clear. Updated…
latest commit ad779792e0
@bcarrier bcarrier authored
Failed to load latest commit information.
Core Updated report interface variable name to make it more clear. Updated…
CoreLibs add openjfx-dialogs dependency via ivy
ImageGallery bail for thumbnail detection if non-supported mime type.
KeywordSearch Merge pull request #1260 from esaunders/develop
RecentActivity Updated NBM module version numbers
ScalpelCarver removed Scalpel Module from being an active module so that it does no…
Testing appropriately escape the path properties set by ANT
branding Resolve merge conflicts for cherry-pick of Case class formatting
docs Updated python examples and docs
icons updated with consistent veriosn of icons for netbeans branding and bo…
installer_autopsy removed comment from installer
nbproject Update platform.properties
pythonExamples Updated report interface variable name to make it more clear. Updated…
test additional files with prefixed imagename removed from result folder
thirdparty fixed MS CRT dlls so that we have 32-bit versus 64-bit. Changed to ha…
thunderbirdparser replaced deprecate ATTRIBUTE_TYPE.TSK_ENCRYPTION_DETECTED
.gitattributes added pl for newline normalization for rr plugins
.gitignore Merge remote-tracking branch 'upstream/develop' into with_image_analy…
API-CHANGES.txt Reduced RecentActivity API via making veriables private and reducing …
BUILDING.txt Updated comments about library loading
KNOWN_ISSUES.txt Update known issues.
LICENSE-2.0.txt Initial import into github
NEWS.txt Updated NEWS
README.txt updated README.txt with licenses for icons
build-unix.xml Updated comments about library loading
build-windows-installer.xml removed installer code from build-windows into a separate file
build-windows.xml removed installer code from build-windows into a separate file
build.xml dir location checked before copying. No new dir created
git-daemon-export-okay Added overwrite flag to PlatformUtil resource file extraction method,…
update_versions.py Updated version numbers for 3.1.0

README.txt

                               Autopsy 3.0
                          http://www.sleuthkit.org/

                                March 13, 2013


OVERVIEW

Autopsy is a graphical interface to The Sleuth Kit and other open source digital forensics tools. 
Autopsy 3 is a complete rewrite from Autopsy 2 and it is now Java-based.     

Although Autopsy is designed to be cross-platform (Windows, Linux, MacOSX), the current version is fully functional and fully tested only on Windows. 
We have run it on XP, Vista, and Windows 7 with no problems. 

Autopsy 3.0 is released under the Apache 2.0 license. 


INSTALLATION

All Autopsy dependencies are bundled with the installer provided.
There is no need for manual installation of additional dependencies if the installer is used.

If you want the Japanese localized version, you must have the Japanese language pack (http://support.microsoft.com/kb/972813) installed and the default locale set to JA. (http://windows.microsoft.com/en-us/windows/change-system-locale#1TC=windows-7).

Refer to the next section for additional info on third-party software requirements to run Autopsy without installer.

Refer to the KNOWN_ISSUES.txt file for known bugs that could cause investigation problems. 


SUPPORT

There is a built-in help system in Autopsy once you get it started.  There is also a QuickStart Guide that came with the installer.

Send any bug reports or feature requests to the sleuthkit-users e-mail list.
    http://www.sleuthkit.org/support.php


LICENSE

The Autopsy code is released under the Apache License, Version 2.  See LICENSE-2.0.txt for details.


EMBEDDED SOFTWARE

This section lists the software components and libraries that are used inside of
Autopsy.   These tools are bundled with the installer, unless specified otherwise.

JRE (Java Runtime Environment) 1.8
- Web page: http://www.oracle.com/technetwork/java/index.html
- License: http://www.oracle.com/technetwork/java/javase/terms/license/index.html

Netbeans 7.3 RCP platform and .jar files bundled with the platform
- Web page: http://netbeans.org/features/platform/
- License: 
http://services.netbeans.org/downloads/licence/nb-7.0-final-2011-04-20-license.txt

Sleuth Kit for analyzing disk images.
- Web page: http://www.sleuthkit.org/sleuthkit/
- License: http://sleuthkit.org/sleuthkit/licenses.php

Libewf for opening E01 files
- Web page: http://sourceforge.net/projects/libewf/
- License: http://www.gnu.org/licenses/lgpl.html

zlib for opening E01 files
- Web page: http://zlib.net/
- License: http://zlib.net/zlib_license.html

Solr (including Lucene and TIKA) for keyword search
- Web page: http://projects.apache.org/projects/solr.html
- License: http://www.apache.org/licenses/LICENSE-2.0

GStreamer for viewing video files
- Web page: http://gstreamer.freedesktop.org/
- License: http://www.gnu.org/licenses/lgpl.html

GStreamer-java for viewing video files
- Web page: http://code.google.com/p/gstreamer-java/
- License: http://www.gnu.org/licenses/lgpl.html

Regripper for pulling recently activity
(Including custom plugins)
- Web page: http://regripper.wordpress.com/
- License: http://www.gnu.org/licenses/gpl.html

Pasco2 for pulling Internet Explorer activity
- Web page: http://sourceforge.net/projects/pasco2/
- License: http://www.gnu.org/licenses/gpl.html

Jericho for extracting content from HTML files
- Web page: http://jerichohtml.sourceforge.net/
- License: http://www.gnu.org/copyleft/lesser.html

Advanced installer 9 (Freeware)
(not embedded in Autopsy, but used to generate Autopsy installer.)
- Web page: http://www.advancedinstaller.com/

Metadata Extractor 2.6.2 for extracting Exif metadata
- Web page: http://www.drewnoakes.com/code/exif/
- License: http://www.apache.org/licenses/LICENSE-2.0

Reflections 0.9.8 for ingest module loading
- Web page: http://code.google.com/p/reflections 
- License: http://en.wikipedia.org/wiki/WTFPL

Sigar for process monitoring
- Web page: http://support.hyperic.com/display/SIGAR/Home
- License: http://support.hyperic.com/display/SIGAR/Home#Home-license

7Zip and 7Zip java bindings for 7Zip extractor module
- Web page: http://sevenzipjbind.sourceforge.net/
- License: http://sourceforge.net/directory/license:lgpl/

ImgScalr 4.2 for image resizing in image viewers
- Web page: http://www.thebuzzmedia.com/software/imgscalr-java-image-scaling-library/
- License: http://www.thebuzzmedia.com/software/imgscalr-java-image-scaling-library/#license


EMBEDED RESOURCES

This section lists other resources, such as icons, that are used by Autopsy.   

FAMFAMFAM Silk Icons v1.3
- Web page: http://www.famfamfam.com/lab/icons/silk/
- License: http://creativecommons.org/licenses/by/3.0/

Fugue Icons v3.5.6
- Web page: http://p.yusukekamiyamane.com/
- License: http://creativecommons.org/licenses/by/3.0/

WebHostingHub Glyphs
- Web page: http://www.webhostinghub.com/glyphs/
- License: http://creativecommons.org/licenses/by/3.0/

Splashy Icons (free as in free) 
- Web page: http://splashyfish.com/icons/
Something went wrong with that request. Please try again.