Introduction to Autopsy

Brian Carrier
Basis Technology


Autopsy is the most popular end to end open source digital forensics tool. It has been built to be easy to use and extensible so that the open source community can build on top of its capabilities.

This talk will cover the basics of using Autopsy so that you can later download it and try it in your investigations. You’ll learn the core features (such as hash sets and web artifacts) and high-level concepts about advanced features (such as multi-user cases and communications analysis). Organizations around the world are using Autopsy as either their primary analysis tool or their secondary tool to confirm their findings. Learn more about using Autopsy.

About Brian Carrier

Brian leads the digital forensics team at Basis Technology, which builds software for incident response, digital forensics, and custom mission needs. He is the author of the book File System Forensic Analysis and developer of several open-source digital forensics analysis tools, including The Sleuth Kit and Autopsy. Brian has a Ph.D. in computer science from Purdue University and worked previously for @stake as a research scientist and the technical lead for their digital forensics lab and incident response team. Brian is the chairperson for the Open Source Digital Forensics Conference (OSDFCon) and involved with many conferences, workshops and technical working groups, including the Annual DFRWS Conference and the Digital Investigation Journal.