Remerciez-le!

Remerciez @Admin pour avoir partagé cet document gratuitement, de la manière la plus simple, en partageant sur les réseaux sociaux.

Autopsy user guide AUTOPSY FORENSIC BROWSER USER GUIDE Julia Ke ?er C CAutopsy Forensic Browser User Guide Copyright Copyright ? All rights reserved License This document is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike Unported

AUTOPSY FORENSIC BROWSER USER GUIDE Julia Ke ?er C CAutopsy Forensic Browser User Guide Copyright Copyright ? All rights reserved License This document is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike Unported license Refer to http creativecommons org licenses by-nc-sa Autopsy is licensed under Apache License Version Disclaimer This document is provided to you for informational purposes only and is believed to be accurate as of the date of its publication and is subject to change without notice The author assumes no responsibility for any errors or omissions in this document and shall have no obligation to you as a result of having made this document available to you or based upon the information it contains Version Information Autopsy version Document version C CAutopsy Forensic Browser User Guide Table of Contents Figures iii Chapter ?? Introduction Organization Before you Begin Overview of Digital Forensics Chapter ?? Getting Started Using the Wizard Creating a Case Adding a Disk Image Con ?guring Disk Analysis Using a Hash Database Chapter ?? Exploring Analyzed Data Using the Data Explorer Using the Result Viewer Viewing File Contents Chapter ?? Searching File Contents Searching Using Built-in Keywords Creating and Managing Keyword Lists Saving File Locations Chapter ?? Generating Reports Creating a Basic Report Creating a Custom Report Chapter ?? Creating a Timeline Creating a Graphical Timeline Creating a Timeline Report Chapter ?? Collecting Files for Later Analysis Extracting File and Directory Contents Extracting Unallocated Disk Space Page i CAutopsy Forensic Browser User Guide Appendix A Toolbar Reference Appendix B Troubleshooting Appendix C FAQ Glossary Index Page ii CAutopsy Forensic Browser User Guide Figures Figure Autopsy Process Flow Figure Autopsy Welcome Window Figure Add Image Window Figure Con ?gure Ingest Modules Figure Autopsy Interface Window Figure The Data Explorer Panel Figure Result Viewer ?? Directory Listing Table View Figure Result Viewer ?? Directory Listing Thumbnail View Figure Result Viewer ?? Keyword Search View Figure HTML Report Figure Recent Activity Section Page iii C CChapter ?? Introduction The Autopsy Forensic Browser enables you to conduct a digital forensic investigation It is a graphical interface to The Sleuth Kit and other tools This guide covers information about using Autopsy version on Windows This manual is for users with above average computer skills who have a basic understanding of digital forensics concepts Users who are unfamiliar with the concepts may want to start with the section ??Overview of Digital Forensics ? on page Organization The manual is organized as follows ? Description of digital forensics concepts page ? Chapter ?? Getting Started Using the Wizard page ? Getting started section to help you import your disk image into Autopsy and perform the initial automated analysis ? Chapter ?? Exploring Analyzed Data page ? Overview of the user interface regions and explanation of the results of the initial automated analysis ? Procedures to help you perform the following tasks ? Search for keywords in the ?les in the disk image page ? Generate reports page ? Create timeline views page ? Extract