Skip to content
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card. Installers can be found at: http://www.sf.net…
Java Perl Python Other
Latest commit 2f19af3 May 4, 2016 @rcordovano rcordovano Merge pull request #2102 from BasisOlivers/aut-2091
Fixed lack of tagging of virtual directories.
Failed to load latest commit information.
Core Merge pull request #2102 from BasisOlivers/aut-2091 May 4, 2016
CoreLibs minor comments FilteredEventsModel.java and ivy.xml Apr 28, 2016
ImageGallery Update NetBeans Platform Apr 29, 2016
KeywordSearch Fix warning for @NbBundle.Messages Apr 26, 2016
RecentActivity Fix warning for @NbBundle.Messages Apr 26, 2016
ScalpelCarver Update NetBeans Platform Apr 29, 2016
Testing Update testing/RegressionTest for ingest job settings panel button la… Apr 12, 2016
branding open pinnedView on initialization if pinnedEvents is not empty Apr 12, 2016
docs update version numbers Mar 31, 2016
icons updated with consistent veriosn of icons for netbeans branding and bo… Oct 22, 2014
installer_autopsy removed comment from installer Nov 3, 2014
nbproject Remove org.netbeans.libs.javafx from diabled modules list in nbprojec… Apr 27, 2016
pythonExamples Fixed python examples to get rid of deprecation Feb 2, 2016
test Got rid of print statement. May 2, 2016
thirdparty Fixed deprecation warnings to do with netbeans updates Apr 11, 2016
thunderbirdparser Update inter-NBM dependencies for suite NBMs for release 4.1.0 Mar 27, 2016
.gitattributes added pl for newline normalization for rr plugins Oct 26, 2013
.gitignore Scrub SQL, document how to use user-supplied queries safely Apr 30, 2015
API-CHANGES.txt Reduced RecentActivity API via making veriables private and reducing … Jan 15, 2014
BUILDING.txt Spelling mistakes in txt files are fixed Mar 11, 2016
KNOWN_ISSUES.txt Update known issues. Aug 7, 2012
LICENSE-2.0.txt Initial import into github Nov 9, 2011
NEWS.txt Fix typo in NEWS.txt Apr 13, 2016
README.txt update README.txt with mustache (and other libraries) Apr 28, 2016
build-unix.xml Updated comments about library loading Sep 17, 2014
build-windows-installer.xml Control 32 and 64-bit MSI builds, default builds all. Dec 1, 2015
build-windows.xml Integrated VHD support into Autopsy Dec 29, 2015
build.xml Update comment about netbeans-plat-version in build.xml Apr 27, 2016
git-daemon-export-okay Added overwrite flag to PlatformUtil resource file extraction method,… Apr 10, 2014
update_versions.py Fix errors in update_versions Oct 31, 2015

README.txt

Autopsy 4
http://www.sleuthkit.org/
March 15, 2016


OVERVIEW

Autopsy is a graphical interface to The Sleuth Kit and other open source digital forensics tools. 
Autopsy 3 was a complete rewrite from Autopsy 2 to make it Java-based.
Autopsy 4 improves on Autopsy 3 by supporting collaboration on a single case by multiple users.     

Although Autopsy is designed to be cross-platform (Windows, Linux, MacOSX), the current version is fully functional and fully tested only on Windows. 
We have run it on XP, Vista, and Windows 7 with no problems. 

Autopsy 4 is released under the Apache 2.0 license.
Some libraries Autopsy uses may have different, but similar, open source licenses. 


INSTALLATION

For a Windows installation, all Autopsy dependencies are bundled with the installer provided.
There is no need for manual installation of additional dependencies if the Windows installer is used.

If you want the Japanese localized version, you must have the Japanese language pack (http://support.microsoft.com/kb/972813) installed and the default locale set to JA. (http://windows.microsoft.com/en-us/windows/change-system-locale#1TC=windows-7).

Refer to the KNOWN_ISSUES.txt file for known bugs that could cause investigation problems. 


SUPPORT

There is a built-in help system in Autopsy once you get it started.  There is also a QuickStart Guide that comes with the installer.

Send any bug reports or feature requests to the sleuthkit-users e-mail list.
    http://www.sleuthkit.org/support.php


LICENSE

The Autopsy code is released under the Apache License, Version 2.  See LICENSE-2.0.txt for details.


EMBEDDED SOFTWARE

This section lists the software components and libraries that are used by 
Autopsy.   These tools are bundled with the Windows installer, unless specified otherwise.

JRE (Java Runtime Environment) 1.8
- Web page: http://www.oracle.com/technetwork/java/index.html
- License: http://www.oracle.com/technetwork/java/javase/terms/license/index.html

Netbeans 8.0.2 RCP platform and .jar files bundled with the platform
- Web page: http://netbeans.org/features/platform/
- License: https://netbeans.org/downloads/jdk-bundle/8.0.2/nb802-LICENSE.txt

Sleuth Kit for analyzing disk images.
- Web page: http://www.sleuthkit.org/sleuthkit/
- License: http://sleuthkit.org/sleuthkit/licenses.php

Libewf for opening E01 files
- Web page: https://github.com/libyal/libewf
- License: http://www.gnu.org/licenses/lgpl.html

zlib for opening E01 files
- Web page: http://zlib.net/
- License: http://zlib.net/zlib_license.html

Solr (including Lucene and TIKA) for keyword search
- Web page: http://projects.apache.org/projects/solr.html
- License: http://www.apache.org/licenses/LICENSE-2.0

GStreamer for viewing video files
- Web page: http://gstreamer.freedesktop.org/
- License: http://www.gnu.org/licenses/lgpl.html

GStreamer-java for viewing video files
- Web page: http://code.google.com/p/gstreamer-java/
- License: http://www.gnu.org/licenses/lgpl.html

Regripper for pulling recently activity
(Including custom plugins)
- Web page: http://regripper.wordpress.com/
- License: http://www.gnu.org/licenses/gpl.html

Pasco2 for pulling Internet Explorer activity
- Web page: http://sourceforge.net/projects/pasco2/
- License: http://www.gnu.org/licenses/gpl.html

Jericho for extracting content from HTML files
- Web page: http://jerichohtml.sourceforge.net/
- License: http://www.gnu.org/copyleft/lesser.html

Advanced installer 9 (Freeware)
(not embedded in Autopsy, but used to generate Autopsy installer.)
- Web page: http://www.advancedinstaller.com/

Metadata Extractor 2.6.2 for extracting Exif metadata
- Web page: http://www.drewnoakes.com/code/exif/
- License: http://www.apache.org/licenses/LICENSE-2.0

Reflections 0.9.8 for ingest module loading
- Web page: http://code.google.com/p/reflections 
- License: http://en.wikipedia.org/wiki/WTFPL

Sigar for process monitoring
- Web page: http://support.hyperic.com/display/SIGAR/Home
- License: http://support.hyperic.com/display/SIGAR/Home#Home-license

7Zip and 7Zip java bindings for 7Zip extractor module
- Web page: http://sevenzipjbind.sourceforge.net/
- License: http://sourceforge.net/directory/license:lgpl/

ImgScalr 4.2 for image resizing in image viewers
- Web page: http://www.thebuzzmedia.com/software/imgscalr-java-image-scaling-library/
- License: http://www.thebuzzmedia.com/software/imgscalr-java-image-scaling-library/#license

ControlsFX JavaFX GUI library
- Web page: http://fxexperience.com/controlsfx/
- License: https://bitbucket.org/controlsfx/controlsfx/src/default/license.txt?fileviewer=file-view-default

JFXtras JavaFX GUI library
- Web page: http://jfxtras.org/
- License: https://github.com/JFXtras/jfxtras#license

Mustache.java templating system
- Web page: https://github.com/spullara/mustache.java
- License: https://github.com/spullara/mustache.java/blob/master/LICENSE

Joda-Time date and time library
- Web page: http://www.joda.org/joda-time/
- License: http://www.joda.org/joda-time/license.html

TwelveMonkeys ImageIO plugins
- Web page: https://github.com/haraldk/TwelveMonkeys
- License: https://github.com/haraldk/TwelveMonkeys#license


EMBEDDED RESOURCES

This section lists other resources, such as icons, that are used by Autopsy.   

FAMFAMFAM Silk Icons v1.3
- Web page: http://www.famfamfam.com/lab/icons/silk/
- License: http://creativecommons.org/licenses/by/3.0/

Fugue Icons v3.5.6
- Web page: http://p.yusukekamiyamane.com/
- License: http://creativecommons.org/licenses/by/3.0/

WebHostingHub Glyphs
- Web page: http://www.webhostinghub.com/glyphs/
- License: http://creativecommons.org/licenses/by/3.0/

Splashy Icons (free as in free) 
- Web page: http://splashyfish.com/icons/
Something went wrong with that request. Please try again.