Skip to content
This repository

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.

Merge pull request #598 from alexjacks92/master

Removing email code from test scripts, master branch.
latest commit e78fb736dd
Richard Cordovano rcordovano authored
Octocat-spinner-32 Core Not nullifying util processes - presumed fix for javaIO flushing error.
Octocat-spinner-32 CoreLibs Sigar now loads correctly on mac
Octocat-spinner-32 ExifParser Updated library versions for 3.0.9 release
Octocat-spinner-32 HashDatabase Updated library versions for 3.0.9 release
Octocat-spinner-32 KeywordSearch Updated library versions for 3.0.9 release
Octocat-spinner-32 RecentActivity added more checks to RR plug-ins to not display path of module when k…
Octocat-spinner-32 ScalpelCarver Core ingest modules have same version as autopsy.
Octocat-spinner-32 SevenZip Updated library versions for 3.0.9 release
Octocat-spinner-32 Testing Fixed line endings.
Octocat-spinner-32 Timeline Suppressed warnings where appropriate
Octocat-spinner-32 branding made line endings more consistent
Octocat-spinner-32 branding_autopsy Added Mac OS X icon file
Octocat-spinner-32 docs line endings.
Octocat-spinner-32 installer_autopsy Updated instsaller file to have version in path.
Octocat-spinner-32 nbproject Updated version and news file before release
Octocat-spinner-32 test Bug fix - now able to run test without jenkins support successfully.
Octocat-spinner-32 thirdparty Fixed 64-bit/CRT dlls on master. Same fix that was applied to develop…
Octocat-spinner-32 thunderbirdparser Updated library versions for 3.0.9 release
Octocat-spinner-32 .gitattributes added pl for newline normalization for rr plugins
Octocat-spinner-32 .gitignore Fixed git ignore and several minor issues with regression, as well as…
Octocat-spinner-32 API-CHANGES.txt changed order of attributes for web artifacts, marked 2 unused classe…
Octocat-spinner-32 BUILDING.txt Updated based on 64-bit options
Octocat-spinner-32 KNOWN_ISSUES.txt Update known issues.
Octocat-spinner-32 LICENSE-2.0.txt Initial import into github
Octocat-spinner-32 NEWS.txt Updated version and news file before release
Octocat-spinner-32 README.txt update readme
Octocat-spinner-32 build-unix.xml Initial merge of core modules - it does build.
Octocat-spinner-32 build-windows.xml Merged Autopsy 3.0.9 release into develop (master->develop)
Octocat-spinner-32 build.xml Removed xdock as suggested by #379.
Octocat-spinner-32 line endings.
                               Autopsy 3.0

                                March 13, 2013


Autopsy is a graphical interface to The Sleuth Kit and other open source digital forensics tools. 
Autopsy 3 is a complete rewrite from Autopsy 2 and it is now Java-based.     

Although Autopsy is designed to be cross-platform (Windows, Linux, MacOSX), the current version is fully functional and fully tested only on Windows. 
We have run it on XP, Vista, and Windows 7 with no problems. 

Autopsy 3.0 is released under the Apache 2.0 license. 


All Autopsy dependencies are bundled with the installer provided.
There is no need for manual installation of additional dependencies if the installer is used.

Refer to the next section for additional info on third-party software requirements to run Autopsy without installer.

Refer to the KNOWN_ISSUES.txt file for known bugs that could cause investigation problems. 


There is a built-in help system in Autopsy once you get it started.  There is also a QuickStart Guide that came
with the installer. 

Send any bug reports or feature requests to the sleuthkit-users e-mail list.


The Autopsy code is released under the Apache License, Version 2.  See LICENSE-2.0.txt for details.


This section lists the software components and libraries that are used inside of
Autopsy.   These tools are bundled with the installer, unless specified otherwise.

JRE (Java Runtime Environment) 1.7, 32 bit
- Web page:
- License:

Netbeans 7.3 RCP platform and .jar files bundled with the platform
- Web page:
- License:

Sleuth Kit for analyzing disk images.
- Web page:
- License:

Libewf for opening E01 files
- Web page:
- License:

zlib for opening E01 files
- Web page:
- License:

Solr (including Lucene and TIKA) for keyword search
- Web page:
- License:

GStreamer for viewing video files
- Web page:
- License:

GStreamer-java for viewing video files
- Web page:
- License:

Regripper for pulling recently activity
(Including custom plugins)
- Web page:
- License:

Pasco2 for pulling Internet Explorer activity
- Web page:
- License:

Jericho for extracting content from HTML files
- Web page:
- License:

Advanced installer 9 (Freeware)
(not embedded in Autopsy, but used to generate Autopsy installer.)
- Web page:

Metadata Extractor 2.6.2 for extracting Exif metadata
- Web page:
- License:

Reflections 0.9.8 for ingest module loading
- Web page: 
- License:

Sigar for process monitoring
- Web page:
- License:

7Zip and 7Zip java bindings for 7Zip extractor module
- Web page:
- License:

ImgScalr 4.2 for image resizing in image viewers
- Web page:
- License:

Something went wrong with that request. Please try again.