Autopsy - Forensic Acquisition Tool | Digital Forensics Investigation | Autopsy Tutorial

Поделиться
HTML-код
  • Опубликовано: 21 ноя 2024

Комментарии • 65

  • @srinathkarli
    @srinathkarli 11 месяцев назад +1

    Hi, Your explanantion so cool and user friendly. Keep it up.

  • @teconmedia
    @teconmedia 10 месяцев назад +1

    Wonderful video ❤
    Please can you do a video on how to check device geo-location when on the Internet

  • @koszegimatyas
    @koszegimatyas Год назад +2

    This is a very nice and short tutorial, I like it very much' Thanks for sharing!

  • @yoyee8004
    @yoyee8004 21 день назад +1

    So you have to have the psychical device in order to investigate it?

  • @polinaviswanathan3089
    @polinaviswanathan3089 23 дня назад

    Hi, thank you so much for the video:)

  • @DyverWeb
    @DyverWeb 10 месяцев назад +1

    Thank you, is a excelent video

    • @FreeEduHub
      @FreeEduHub  9 месяцев назад +1

      You are welcome!

  • @SamGoldberg-s1v
    @SamGoldberg-s1v 2 месяца назад

    Great Video is there any way we can use aff for the data source input previously it was possible to do the same with aff too can you please help pe regarding this file format
    I have tried many tools but not satisfied with any can you guide please.

    • @FreeEduHub
      @FreeEduHub  2 месяца назад

      Autopsy does not natively support the AFF (Advanced Forensic Format) for data source input anymore. However, you can still work with AFF files by first converting them into a format that Autopsy supports, such as E01 or RAW. You can use tools like FTK Imager or X-Ways Forensics to convert AFF images into these formats. Once converted, you can load the file into Autopsy as a data source.

  • @EpicFace7589
    @EpicFace7589 7 месяцев назад +1

    Thank you

    • @FreeEduHub
      @FreeEduHub  7 месяцев назад +1

      you are most welcome

  • @Death_User666
    @Death_User666 2 года назад +1

    lets say i had a customer would i need to download this on their machine or can I take an image and work on my own machine?

    • @FreeEduHub
      @FreeEduHub  2 года назад +2

      Its safe to take image of the machine and then work on it independently.
      The most important thing is that evidence must not be altered by any means

  • @jakemullins4002
    @jakemullins4002 Год назад +1

    Is this what DHS/ICE forensic agents use? Or is their some other one

    • @FreeEduHub
      @FreeEduHub  Год назад +1

      there are lots of premium versions available out there but Autopsy is top of the range when it comes to open source. You can buy plugins for additional functionality

  • @danamohammed4986
    @danamohammed4986 2 года назад +1

    Is autopsy related to device security? I have to do a presentation about cybersecurity tool

    • @FreeEduHub
      @FreeEduHub  2 года назад

      No, it helps in investigation and to recover the foot prints
      You can follow lectures on our website for cybersecurity

    • @danamohammed4986
      @danamohammed4986 2 года назад

      @@FreeEduHub thanks

    • @tasha9650
      @tasha9650 2 года назад

      This is old & answered but I’m in this class and just wanted to elaborate that it’s for Digital Forensic and Investigation Response. (DFIR)…

  • @SuperRayhan10
    @SuperRayhan10 10 месяцев назад

    Any online compiler available?

    • @FreeEduHub
      @FreeEduHub  10 месяцев назад

      no, forensics is always on machines

  • @maheshkumarkamble8132
    @maheshkumarkamble8132 8 месяцев назад

    Hi, i have corrupted hard drive . Would autopsy able to recover the data ? Can autopsy able recover deleted photo from Android phone ? How can we do it ? Would you make video for that or any article or link . I will be very grateful.

    • @FreeEduHub
      @FreeEduHub  8 месяцев назад

      it can recover deleted items
      For android there are different software
      I will make a video on recovery of android data as well

  • @harshb7002
    @harshb7002 2 года назад +1

    How can use a plugin in autopsy? How to run it?

    • @FreeEduHub
      @FreeEduHub  2 года назад

      Start Autopsy
      Select the Tools > Plugins menu from the main menu bar
      Select the Downloaded tab in the Plugins window
      Click Add Plugins… located in the top left of the pane and browse to the location of the plugin (.nbm) file on your computer (the location where you unzipped the downloaded zip file)
      Select the module you wish to install in the Plugins window and click the Install button on the bottom left of the window

  • @kwenamoloto3320
    @kwenamoloto3320 2 года назад +1

    Very informative

    • @FreeEduHub
      @FreeEduHub  2 года назад +2

      Glad you think so!
      Thanks for visiting

  • @mrwood3724
    @mrwood3724 11 месяцев назад

    Hi, my question is, if the drive is encrypted would the Autopsy software work?

  • @olawunmiolakunle6856
    @olawunmiolakunle6856 3 года назад +1

    Good Job Bro. Thank you very much

    • @FreeEduHub
      @FreeEduHub  3 года назад +1

      You are welcome
      Thanks for visiting

    • @olawunmiolakunle6856
      @olawunmiolakunle6856 3 года назад +1

      @@FreeEduHub Please I would really appreciate if you can tell me how an investigation log book is done or I can have your email so we can talk better. God bless you

  • @ParthShethia
    @ParthShethia 6 месяцев назад

    I can see delted files but how do i downlod all the deleted data in one click ?

    • @FreeEduHub
      @FreeEduHub  6 месяцев назад

      you will have to select the files, check their health, give a destination path and then recover

    • @ParthShethia
      @ParthShethia 6 месяцев назад

      ⁠@@FreeEduHubhow to check their health ? and what does it mean

    • @FreeEduHub
      @FreeEduHub  6 месяцев назад

      it shows the health status of files, if its in good health to be recovered

    • @ParthShethia
      @ParthShethia 6 месяцев назад +1

      @@FreeEduHub okay

  • @HungNguyen-bk1jn
    @HungNguyen-bk1jn Год назад

    In the part Data artifacts, I don't know why it not have all the information about Web (Download, history, search,...). Can you help me?

    • @FreeEduHub
      @FreeEduHub  Год назад +1

      it really depends if internet was used on the device or not. Secondly on free version without plugins the information is a bit limited. If you will add the plugins it would perform much better. But for the understanding its more than enough

    • @HungNguyen-bk1jn
      @HungNguyen-bk1jn Год назад

      @@FreeEduHub When using autopsy, do I need an internet connection?

    • @FreeEduHub
      @FreeEduHub  Год назад

      no you dont

    • @HungNguyen-bk1jn
      @HungNguyen-bk1jn Год назад +1

      Tnanks!!!@@FreeEduHub

  • @1bbnuuu
    @1bbnuuu Год назад

    anyone know why sha and md5 didn't showing on the page?

    • @FreeEduHub
      @FreeEduHub  11 месяцев назад

      make sure you are not using paid plugins

  • @brandfinestgraphics9063
    @brandfinestgraphics9063 2 года назад

    sorry. found it. but it says, can't be downloaded securely

    • @FreeEduHub
      @FreeEduHub  2 года назад

      make sure you are typing in the correct address
      www.autopsy.com/download/

  • @blasterahmes3775
    @blasterahmes3775 3 года назад +1

    Hi Bro, could you provide a video explaining how autopsy extracts data from the forensics image?

    • @FreeEduHub
      @FreeEduHub  2 года назад

      i think its part of the video, i will review and if its not there i will make a separate video on it
      thanks for visiting and thanks for your feedback

    • @blasterahmes3775
      @blasterahmes3775 2 года назад

      @@FreeEduHub No Bro, I am not talking about extracting the files from autopsy. My bad I worded it that way. What I meant was could you make a video on how autopsy does what it does? Like how does it recover deleted files? How does it use sleuthkit commands, etc.

    • @FreeEduHub
      @FreeEduHub  2 года назад

      @@blasterahmes3775 Beauty of Autopsy is that we don't run any commands in it like any linux forensics software. It has its own way of recovering deleted files. Its a GUI of sleuthkit , thus you can say its an easy interface of sleuthkit

  • @brandfinestgraphics9063
    @brandfinestgraphics9063 2 года назад

    The downloading website is not true. It's demanding money.

    • @FreeEduHub
      @FreeEduHub  2 года назад +1

      make sure you are typing in the correct address
      www.autopsy.com/download/

  • @simmithapad8202
    @simmithapad8202 Год назад +3

    PLease do not use bg music

    • @FreeEduHub
      @FreeEduHub  Год назад

      it helps in covering background noise :)

    • @iskiiwizz536
      @iskiiwizz536 5 месяцев назад

      ​@FreeEduHub we do not care about this

  • @vijaymp6930
    @vijaymp6930 4 месяца назад

    Download mobile possible

    • @FreeEduHub
      @FreeEduHub  4 месяца назад

      there are different tools for mobile

    • @vijaymp6930
      @vijaymp6930 4 месяца назад

      Yes ​@@FreeEduHub

  • @natrajr1473
    @natrajr1473 6 месяцев назад

    Hi, Excellent video and your explanation is super clear. I would like to ask some doubts with certain scenarios. Please share your email address. Thanks!

    • @FreeEduHub
      @FreeEduHub  6 месяцев назад

      you can reach us via our telegram link