Autopsy Forensics

While skill, knowledge, and experience are the most important building blocks of a forensic examiner, having a competent tool is really helpful. This chapter provides an introduction to AutopsyAutopsy which is one such tool. AutopsyAutopsy is a multi-platform open-sourceOpen-source tool which is heavily used by both law enforcement and companies when conducting forensic examinationsExamination. This chapter starts with outlining how to create a case in AutopsyAutopsy before describing the AutopsyAutopsy interface. Then, the true power of AutopsyAutopsy is discussed, ingest modulesIngest module. Ingest modulesIngest module can be described as scripts which automatically runs various forensic tasks. In addition to describing the default ingest modulesIngest module, the chapter also describes how AutopsyAutopsy can be further extended by installing third-party modules. In summary, this chapter provides you with the knowledge you need to start using AutopsyAutopsy forensics efficiently.