Autopsy Forensic Browser
autopsy [-c] [-C] [-d evid_locker ] [-i device filesystem mnt ] [-p port ] [addr]
The following variables can be set in conf.pl. USE_STIMEOUT When set to 1 (default is 0), the server will exit after STIME‐ OUT seconds of inactivity (default is 3600). This setting is recommended if cookies are not used. BASEDIR Directory where cases and forensic images are located. The im‐ ages must have simple names with only letters, numbers, '_', '-', and '.'. (See FILES). TSKDIR Directory where The Sleuth Kit binaries are located. NSRLDB Location of the NIST National Software Reference Library (NSRL). INSTALLDIR Directory where Autopsy was installed. GREP_EXE Location of grep(1) binary. STRINGS_EXE Location of strings(1) binary.
The Evidence Locker is where all cases and hosts will be saved
to. It is a directory that will have a directory for each case.
Each case directory will have a directory for each host.
# autopsy -p 8888 10.1.34.19
The Autopsy Forensic Browser requires The Sleuth Kit
autopsy first appeared in Autopsy v1.0.
This software is distributed under the GNU Public License.