Examiners add a disk image and run ingest modules that find deleted files, web history, and keyword hits. Timelines and hash databases help organize findings. Plug-ins extend it.
It is used by law enforcement, corporate investigators, and students. Reports must be validated before use in court.
Magnet AXIOM and Cellebrite are commercial alternatives. Autopsy suits forensic scientists with limited budgets.
// alternatives to Autopsy see all →
// related tools in Cybersecurity
Burp Suite
Web application security testing toolkit
Metasploit
Penetration testing framework with a large library of exploits
Nmap
Open-source network scanner for host and service discovery
Recorded Future
Threat intelligence platform for security teams
Tenable
Vulnerability management and exposure assessment platform