Free Workshop: Investigating Insider Threats — February 20-27

Autopsy

Open Source Digital Forensics

What is Autopsy?

Autopsy® is the premier end-to-end open-source digital forensics platform. Maintained by Sleuth Kit Labs with the core features you expect in commercial forensic tools, Autopsy is a fast, thorough, and efficient hard drive investigation solution that evolves with your needs.

Integration Actions

Cyber Triage integrates with Autopsy in the following ways:

  • You can open a Cyber Triage incident from within Autopsy.

Open Cyber Triage Incidents

What Is It?

This integration allows a user to use Autopsy to do a deep dive into the data collected from Cyber Triage. Because Cyber Triage is optimized for triage and ease of use, it does not have all of the same digital forensics features as Autopsy.

Sometimes, investigators start with Cyber Triage and realize that a host played a big role in an intrusion and they want to scour it for all evidence. This integration allows them to pivot to Autopsy to do that deeper dive.

This integration will evolve with each release and not all features are currently supported.  The User Manual has the latest list of features that are supported.

Requirements

This integration works with:

  • Autopsy 4.21.0 or later
  • Cyber Triage 3.8.0 or later
  • Cyber Triage Standard or Standard Pro
How To Use It

Refer to the Cyber Triage User Guide for instructions on using this integration.

Visit Site