Ravi Sir's Cyber Security Cards › Revision Cards
Autopsy and The Sleuth Kit
Autopsy and The Sleuth Kit The Sleuth Kit is a set of forensic command-line tools. Autopsy is its graphical front-end. Both come with Kali. Create a case, add the disk image, and Autopsy lists files and deleted files, and extracts pictures, web history and documents. It lets an investigator browse e

Read card text
What this card says
What it is
The Sleuth Kit is a set of forensic command-line tools. Autopsy is its graphical front-end. Both come with Kali.
How it works
Create a case, add the disk image, and Autopsy lists files and deleted files, and extracts pictures, web history and documents.
Why it matters for security
It lets an investigator browse evidence and build a timeline without changing the original.
Learn more in the lesson: 28.5 Autopsy and The Sleuth Kit