Autopsy / The Sleuth Kit
About Autopsy / The Sleuth Kit
Leading open-source digital forensics platform combining Autopsy GUI with The Sleuth Kit command-line library. Analyzes disk images, local drives, and file folders across NTFS, FAT, ExFAT, HFS+, Ext2-4, and UFS file systems. Features multi-user collaborative cases, graphical timeline analysis, keyword search, web artifact extraction, registry analysis via RegRipper, and hash filtering. Extensible Java and Python plugin architecture. Used by law enforcement, military, and corporate examiners worldwide at zero cost.
Why Notable
Most popular free/open-source forensic platform; multi-user collaboration; extensible plugins
