January 2020
Intermediate to advanced
448 pages
11h 42m
English
The Autopsy GUI is divided into three main sections. These sections display details relating to the system and specific files. When Autopsy has completed processing a new case or opening an existing case, the analyst will see the following window:

As shown in the previous screenshot, Autopsy is divided into three main panes. The first of these is the left-hand pane, which contains the data sources and file structure, as well as search results. Clicking on the plus (+) sign expands the results, while clicking on the minus (-) sign collapses them. This allows the analyst to access the system at a high level, and also to drill ...
Read now
Unlock full access