Autopsy: Open Source Digital Forensics Basics Part 1

Autopsy is a free and open source digital forensics platform with many features comparable to those found in the leading commercial tools.  It can be installed on Windows, macOS, and Linux operating systems.  This is part 1 in our 2-part webinar series focused on using Autopsy to perform digital forensic examinations.

This webinar will start by be walking through setting up a new case and exploring effective tool usage.  Attendees will then learn digital forensics best practices and methods for quickly locating items of evidentiary value, based on the results of the following processes:

 Compute a MD5 verification hash of an evidence file
 File Hashing | Notable HDB | Irrelevant HDB
 File Signature Analysis
 Data Carving | File System Recovery
 Extract EXIF Metadata
 Keyword Searches
 Display results in various viewer components

Attendees should be familiar with the basic inner workings of digital forensics, as this webinar series will not delve into explaining how each ingest module works.  A deeper dive into Autopsy and other digital forensic suites, is covered in our DF201 Intermediate Digital Forensic Analysis: Automated Forensic Tools (IDFA – AFT) course.

Presented by: JD Nickolas, NW3C