GitHub - xboxoneresearch/autopsy: Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.

xboxoneresearch / autopsy Public

forked from sleuthkit/autopsy

Notifications You must be signed in to change notification settings
Fork 0
Star 0

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.

www.sleuthkit.org/autopsy/

0 stars 595 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 35,611 Commits
Core		Core
CoreLibs		CoreLibs
CoreTestLibs		CoreTestLibs
Experimental		Experimental
ImageGallery		ImageGallery
InternalPythonModules		InternalPythonModules
KeywordSearch		KeywordSearch
RecentActivity		RecentActivity
ScalpelCarver		ScalpelCarver
Testing		Testing
Tika		Tika
Tools		Tools
branding		branding
developers		developers
docs		docs
icons		icons
installer_autopsy		installer_autopsy
linux_macos_install_scripts		linux_macos_install_scripts
nbproject		nbproject
netbeans-plat/15		netbeans-plat/15
pythonExamples		pythonExamples
release_scripts		release_scripts
snap		snap
test		test
thirdparty		thirdparty
thunderbirdparser		thunderbirdparser
unix		unix
.gitattributes		.gitattributes
.gitignore		.gitignore
.travis.yml		.travis.yml
API-CHANGES.txt		API-CHANGES.txt
BUILDING.txt		BUILDING.txt
BootstrapIvy.xml		BootstrapIvy.xml
LICENSE-2.0.txt		LICENSE-2.0.txt
NEWS.txt		NEWS.txt
README.txt		README.txt
Running_Linux_OSX.md		Running_Linux_OSX.md
TSKVersion.xml		TSKVersion.xml
appveyor.yml		appveyor.yml
build-unix.xml		build-unix.xml
build-windows-installer.xml		build-windows-installer.xml
build-windows.xml		build-windows.xml
build.xml		build.xml
git-daemon-export-okay		git-daemon-export-okay
ruleset.xml		ruleset.xml
setupSleuthkitBranch.py		setupSleuthkitBranch.py
travis_build.sh		travis_build.sh
unix_setup.sh		unix_setup.sh

Repository files navigation

Autopsy 4
http://www.sleuthkit.org/
March 15, 2016


OVERVIEW

Autopsy is a graphical interface to The Sleuth Kit and other open source digital forensics tools. 
Autopsy 3 was a complete rewrite from Autopsy 2 to make it Java-based.
Autopsy 4 improves on Autopsy 3 by supporting collaboration on a single case by multiple users.     

Although Autopsy is designed to be cross-platform (Windows, Linux, MacOSX), the current version is fully functional and fully tested only on Windows. 
We have run it on XP, Vista, and Windows 7 with no problems. 

Autopsy 4 is released under the Apache 2.0 license.
Some libraries Autopsy uses may have different, but similar, open source licenses. 


INSTALLATION

For a Windows installation, all Autopsy dependencies are bundled with the installer provided.
There is no need for manual installation of additional dependencies if the Windows installer is used.

If you want the Japanese localized version, you must have the Japanese language pack (http://support.microsoft.com/kb/972813) installed and the default locale set to JA. (http://windows.microsoft.com/en-us/windows/change-system-locale#1TC=windows-7).


SUPPORT

There is a built-in help system in Autopsy once you get it started.  There is also a QuickStart Guide that comes with the installer.

Send any bug reports or feature requests to the sleuthkit-users e-mail list.
    http://www.sleuthkit.org/support.php


LICENSE

The Autopsy code is released under the Apache License, Version 2.  See LICENSE-2.0.txt for details.


EMBEDDED SOFTWARE

This section lists the software components and libraries that are used by 
Autopsy.   These tools are bundled with the Windows installer, unless specified otherwise.

JRE (Java Runtime Environment) 17
- Web page: https://www.oracle.com/java/technologies/downloads/#java17
- License: https://www.oracle.com/a/tech/docs/jdk17-lium.pdf

Netbeans 15 RCP platform and .jar files bundled with the platform
- Web page: https://netbeans.apache.org/
- License: https://www.apache.org/licenses/LICENSE-2.0

Sleuth Kit for analyzing disk images.
- Web page: http://www.sleuthkit.org/sleuthkit/
- License: http://sleuthkit.org/sleuthkit/licenses.php

Libewf for opening E01 files
- Web page: https://github.com/libyal/libewf
- License: http://www.gnu.org/licenses/lgpl.html

zlib for opening E01 files
- Web page: http://zlib.net/
- License: http://zlib.net/zlib_license.html

Solr (including Lucene and TIKA) for keyword search
- Web page: http://projects.apache.org/projects/solr.html
- License: http://www.apache.org/licenses/LICENSE-2.0

GStreamer for viewing video files
- Web page: http://gstreamer.freedesktop.org/
- License: http://www.gnu.org/licenses/lgpl.html

GStreamer 1.x Java Core for viewing video files
- Web page: https://github.com/gstreamer-java/gst1-java-core
- License: https://github.com/gstreamer-java/gst1-java-core/blob/master/LICENSE.md

Regripper for pulling recent activity
(Including custom plugins)
- Web page: http://regripper.wordpress.com/
- License: http://www.gnu.org/licenses/gpl.html

Pasco2 for pulling Internet Explorer activity
- Web page: http://sourceforge.net/projects/pasco2/
- License: http://www.gnu.org/licenses/gpl.html

Jericho for extracting content from HTML files
- Web page: http://jerichohtml.sourceforge.net/
- License: http://www.gnu.org/copyleft/lesser.html

Advanced installer 9 (Freeware)
(not embedded in Autopsy, but used to generate Autopsy installer.)
- Web page: http://www.advancedinstaller.com/

Metadata Extractor 2.6.2 for extracting Exif metadata
- Web page: http://www.drewnoakes.com/code/exif/
- License: http://www.apache.org/licenses/LICENSE-2.0

Reflections 0.9.8 for ingest module loading
- Web page: http://code.google.com/p/reflections 
- License: http://en.wikipedia.org/wiki/WTFPL

Sigar for process monitoring
- Web page: http://support.hyperic.com/display/SIGAR/Home
- License: http://support.hyperic.com/display/SIGAR/Home#Home-license

7Zip and 7Zip java bindings for 7Zip extractor module
- Web page: http://sevenzipjbind.sourceforge.net/
- License: http://sourceforge.net/directory/license:lgpl/

ImgScalr 4.2 for image resizing in image viewers
- Web page: http://www.thebuzzmedia.com/software/imgscalr-java-image-scaling-library/
- License: http://www.thebuzzmedia.com/software/imgscalr-java-image-scaling-library/#license

ControlsFX JavaFX GUI library
- Web page: http://fxexperience.com/controlsfx/
- License: https://bitbucket.org/controlsfx/controlsfx/src/default/license.txt?fileviewer=file-view-default

JFXtras JavaFX GUI library
- Web page: http://jfxtras.org/
- License: https://github.com/JFXtras/jfxtras#license

Mustache.java templating system
- Web page: https://github.com/spullara/mustache.java
- License: https://github.com/spullara/mustache.java/blob/master/LICENSE

Joda-Time date and time library
- Web page: http://www.joda.org/joda-time/
- License: http://www.joda.org/joda-time/license.html

TwelveMonkeys ImageIO plugins
- Web page: https://github.com/haraldk/TwelveMonkeys
- License: https://github.com/haraldk/TwelveMonkeys#license


EMBEDDED RESOURCES

This section lists other resources, such as icons, that are used by Autopsy.   

FAMFAMFAM Silk Icons v1.3
- Web page: http://www.famfamfam.com/lab/icons/silk/
- License: http://creativecommons.org/licenses/by/3.0/

Fugue Icons v3.5.6
- Web page: http://p.yusukekamiyamane.com/
- License: http://creativecommons.org/licenses/by/3.0/

WebHostingHub Glyphs
- Web page: http://www.webhostinghub.com/glyphs/
- License: http://creativecommons.org/licenses/by/3.0/

Splashy Icons (free as in free) 
- Web page: http://splashyfish.com/icons/