Главная
Study mode:
on
1
Autopsy Data Artifacts
2
Exploring the Windows 10 disk image
3
Autopsy: Data Artifacts
4
Installed Programs
5
Metadata
6
Operating System Information
7
Recent Documents
8
Recycle Bin
9
Run Programs
10
Run Programs - Verify with additional evidence
11
Autopsy analysis procedure overview
12
Shell Bags
13
USB Device Attached
14
Web Accounts
15
Web Bookmarks
16
Web Cache
17
Web Cookies
18
Web Downloads
19
Web Form Autofill
20
Web History
21
Web Search
22
Autopsy: Analysis Results
23
Encryption Suspected
24
EXIF Metadata
25
Extension Mismatch Detected
26
Interesting Files
27
Keyword Hits
28
Previously Unseen
29
User Content Suspected
30
Web Account Type
31
Web Categories
32
Artifacts and Results Overview
33
Bookmarked items review
34
Generate an artifact report based on bookmarks
35
Example full Autopsy report
36
How to use an Autopsy report
37
Conclusions
Description:
Explore the powerful features of Autopsy 4.19+ in this comprehensive 34-minute mini-course on data artifacts, analysis results, and reporting. Learn how to conduct a full digital forensic investigation using this free, open-source toolkit. Dive into the Windows 10 disk image analysis, examining installed programs, metadata, operating system information, recent documents, and more. Discover how to reconstruct software installation and usage, such as nmap, during forensic analysis. Master the process of generating artifact reports and understand how to utilize them in your final investigation report. Gain insights into various web-related artifacts, encryption detection, EXIF metadata, and keyword hits. Perfect for digital forensic investigators looking to enhance their skills with Autopsy's comprehensive toolset.

Data Artifacts, Analysis Results and Reporting in Autopsy

DFIRScience
Add to list
0:00 / 0:00