Brian Carrier – Page 2 – WindowsTechs.com

Autopsy 4.6 Includes New Communications Viewers, Encryption Detection, and More.

Posted on February 26, 2018 by Brian Carrier

The latest release (4.6.0) of Autopsy introduces many new features and fixes and this post will give a high-level overview of the notable ones. We’ll dive into details in the coming weeks with additional posts. Communications: As part of our work with DHS S&T, we’ve been improving the infrastructure in Autopsy to store and display […] Continue reading Autopsy 4.6 Includes New Communications Viewers, Encryption Detection, and More.→

Triage Media With Autopsy 4.4.0

Posted on June 8, 2017 by Brian Carrier

With the new Autopsy 4.4.0 release, we introduced some new triage features that help you more quickly answer some questions about a hard drive or smart phone. The goal of this blog is to give you an overview of the features. I’m going to cover when and how to use these features. When To Triage […] Continue reading Triage Media With Autopsy 4.4.0→

Autopsy 4.1.0 Release

Posted on July 21, 2016 by Brian Carrier

Autopsy 4.1.0 has been released after a long drought. So, it has a longer list of features than usual. You can download it from sleuthkit.org. Here is a quick summary of biggish features: New list view in the timeline module. This view adds to the existing counts view (bar charts) and details view (clusters of […] Continue reading Autopsy 4.1.0 Release→

Python Autopsy Module Tutorial #3: The Report Module

Posted on September 17, 2015 by Brian Carrier

It’s time for the final Python tutorial in this series and just in time to give you a chance to write something for the OSDFCon Autopsy Module Competition. In our last two blog posts, we built Python Autopsy file ingest modules that analyzed the data sources as they were added to cases. In our third […] Continue reading Python Autopsy Module Tutorial #3: The Report Module→