Forensic Browser for SQLite 3.2.13 Have you ever needed to create a report from an SQLite database that is not supported by your current forensic tools, or your current forensic tool only supplies a subset of the data? Have you looked at an SQLite database and been frustrated that a date column is displayed as just a string of user unfriendly digits? Would you like to look at a blob field as a picture rather than just see 'blob' displayed in the field? Would you like to create a PDF report with just a few columns in a particular order from certain users sorted by a date field?
Would you like to do this just using drag and drop and your mouse?
Autopsy Maintainer: OS: Genre: License: Website: The Autopsy Forensic Browser ( Autopsy) is a graphical interface to the command line digital investigation analysis tools in. Together, they can analyze and disks and (, /, /). The and Autopsy are both Open Source and run on UNIX platforms. As Autopsy is -based, you can connect to the Autopsy server from any platform using a web browser. Autopsy provides a 'File Manager'-like interface and shows details about deleted data and file system structures. Current state As of 2014, Autopsy 2.24 is the last version of Autopsy that supports non-Windows platforms.
Since Autopsy 2.24 was released in 2010, it cannot support all features introduced in latest versions. Various modifications introduced in Sleuthkit since 2010 break Autopsy 2.24.
There are several known conflicts between Autopsy 2.24 and Sleuthkit 4.1.3:. Autopsy cannot normally jump through directories on HFS. Autopsy cannot handle Sun VTOC. Autopsy cannot view timelines in most cases.
Also, Ext4 file creation timestamps cannot be viewed in the Autopsy 'File Manager'-like interface. Unofficial exists to fix or 'hack around' these issues. See also. (Windows only).