Learning Android Forensics - Second Edition

Creating a case in Autopsy

Upon opening Autopsy, the user will be prompted to create New Case, Open Recent Case, or Open Case:

We will be creating a new case. Follow these steps:

1. After filling in the Case Name field, the Next button will become available:

2. An optional Case Number and Examiner can be entered:

3. Selecting Finish will bring up the Select Type of Data Source To Add screen. Choose the Disk Image of VM File option:

4. Click Next ...