January 2020
Intermediate to advanced
448 pages
11h 42m
English
Once Autopsy has been installed, the analyst can open a case with very little preconfiguration. The following steps will discuss the process of opening a new case:

In the preceding screenshot, an image file has been taken from a suspect system. The image has been divided into four 2 GB files. Autopsy will be able to take the four files and reconstruct the entire volume that has been imaged.
Read now
Unlock full access