Autopsy

The premier end-to-end open source digital forensics platform.

Visit Website →

Overview

Autopsy is a widely used open-source digital forensics platform that provides a graphical user interface to The Sleuth Kit and other forensic tools. It is used by law enforcement, military, and corporate examiners to investigate computers and mobile devices. Its plug-in architecture allows for easy extension of its capabilities.

✨ Key Features

  • Timeline Analysis for viewing system events
  • Keyword search and indexing
  • Web artifact analysis (history, bookmarks, cookies)
  • Registry analysis
  • File carving to recover deleted files
  • EXIF data extraction from multimedia files
  • Extensible with Python or Java modules

🎯 Key Differentiators

  • Completely free and open source
  • Highly extensible through a plug-in architecture
  • Strong community support
  • Built on the robust and trusted Sleuth Kit library

Unique Value: Offers a powerful, extensible, and completely free digital forensics platform, making it accessible to anyone from students to law enforcement agencies.

🎯 Use Cases (4)

Digital forensics for law enforcement Corporate investigations Incident response Educational and research purposes

✅ Best For

  • Used by thousands of professionals globally for hard drive and smartphone analysis.

💡 Check With Vendor

Verify these considerations match your specific requirements:

  • Organizations requiring dedicated, 24/7 commercial support without a separate contract.

🏆 Alternatives

EnCase Forensic FTK (Forensic Toolkit) X-Ways Forensics

Unlike commercial tools like EnCase and FTK, Autopsy is free and open-source, offering flexibility and customization at the cost of dedicated commercial support and some advanced, proprietary features.

💻 Platforms

Desktop Windows Linux macOS

✅ Offline Mode Available

🔌 Integrations

The Sleuth Kit

💰 Pricing

Contact for pricing
Free Tier Available

Free tier: The software is completely free and open source.

Visit Autopsy Website →