Autopsy
GUI digital-forensics platform (Sleuth Kit).
KaliParrotLinuxpassive
pkg: autopsy
Autopsy provides a graphical front-end to The Sleuth Kit for disk-image analysis: file recovery, timelines, keyword search and artefacts.
Syntax
autopsy (web/GUI)
Example
autopsy # then create a case and add a disk image
Opens the case-management UI to ingest and analyse a forensic disk image.
Advantages
- Friendly GUI over powerful internals
- Timelines, hashing, keyword search
- Case/report management
Disadvantages
- Heavier than CLI tools
- Ingest can be slow
- Java/desktop footprint
Tags
#disk#dfir
Official docs: Autopsy ↗
Related commands
Frequently asked questions
What is Autopsy used for?
Autopsy provides a graphical front-end to The Sleuth Kit for disk-image analysis: file recovery, timelines, keyword search and artefacts.
What is an example Autopsy command?
A common example is: autopsy # then create a case and add a disk image — Opens the case-management UI to ingest and analyse a forensic disk image.
Is Autopsy part of Kali Linux?
Yes. Autopsy ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install autopsy.
What category of security tool is Autopsy?
Autopsy is a Forensics tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.