Email Analysis:Parses MBOX format messages, such as Thunderbird.LNK File Analysis:Identifies short cuts and accessed documents.Registry Analysis:Uses RegRipper to identify recently accessed documents and USB devices.Web Artifacts :Extracts web activity from common browsers to help identify user activity.Keyword Search :Text extraction and index searched modules enable you to find files that mention specific terms and find regular expression patterns.Timeline Analysis :Displays system events in a graphical interface to help identify activity.
You can even use it to recover photos from your camera’s memory card for case investigation.
It can be used by law enforcement, military, and corporate examiners to investigate what exactly happened on a computer. Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools.
