Overview
Dive into disk analysis using Autopsy in this comprehensive 53-minute tutorial from the Blue Team Training series. Learn the fundamentals of disk forensics and explore Autopsy, a powerful digital forensics platform. Follow along with a practical demonstration covering everything from downloading and setting up Autopsy to creating cases, analyzing data sources, and managing timelines. Gain insights into using FTK Imager, CFReDS, and various Autopsy features such as data artifacts, OS accounts, and tagging. Master essential skills for investigating computer incidents and extracting crucial information for digital forensics examinations.
Syllabus
Introduction
What We Will Be Covering
Prerequisites
Introduction to Disk Forensics
Introduction to Autopsy
Learning Resources
Practical Demo
Where to Download Autopsy
Obtain FTK Imager
Get Started with FTK Imager
How to use CFReDS
Creating a New Case in Autopsy
Overview of Data Sources
Overview of Views
Overview of Data Artifacts
Analysis Result in Autopsy
Overview of OS Accounts
Overview of Tags in Autopsy
Exporting Files or Information in Autopsy
Managing the Timeline in Autopsy
Conclusion
Taught by
Linode