Autopsy
Premium roomLearn how to use Autopsy to investigate artefacts from a disk image. Use your knowledge to investigate an employee who is being accused of leaking private company data.
easy
60 min
45,163
To access material, start machines and answer questions login.
What is Autopsy?
Autopsy is an open-source and powerful digital forensics platform. Several features within Autopsy have been developed with funding from the Department of Homeland Security Technology. You can read more about this here (opens in new tab).
The official description (opens in new tab): "Autopsy is the premier open source forensics platform which is fast, easy-to-use, and capable of analysing all types of mobile devices and digital media. Its plug-in architecture enables extensibility from community-developed or custom-built modules. Autopsy evolves to meet the needs of hundreds of thousands of professionals in law enforcement, national security, litigation support, and corporate investigation."
Learning Objectives
- Workflow of Autopsy Tool
- Data Sources in Autopsy
- Ingest Modules in Autopsy
- User Interface and Visualization Tools in Autopsy
Starting the Machine
Let’s start the virtual machine by pressing the Start Machine button below. The machine will start in split view.
In case the is not visible, use the blue Show Split View button at the top of the page. You can also connect with the machine via your own -connected machine using the credentials below:
| Username | administrator |
| Password | letmein123! |
| IP | MACHINE_IP |
Start the virtual machine.
Ready to learn Cyber Security?
The Autopsy room is only available for premium users. Signup now to access more than 500 free rooms and learn cyber security through a fun, interactive learning environment.
Already have an account? Log in