ANALYSING FORENSIC IMAGE WITH AUTOPSY
ABOUT AUTOPSY
STEP
Launch the autopsy application

CASE DETAILING
Enter case name
Select Directory to store
Click "Next"

Examiner Detail
Enter the case number
Enter examiner details
Click "Finish"

SELECT HOST
Tick "Generate new host name based on data source name"
Click "Next"

SELECT DATA SOURCE TYPE
Select "Disk Image or VM file"
click "Next"

SELECT DATA SOURCE
Select the path to image to be analysed
Set time zone
Leave sector size as "Auto Detect"

CONFIGURE INGEST
Ensure everything is selected
Click "Next"

DATA SOURCE ADDITION
Wait for this process to complete
Click "Finish"