👨‍🚒Autopsy

https://tryhackme.com/r/room/windowsforensics1

The User Interface

The Tree Viewer has five top-level nodes:

  • Data Sources - all the data will be organised as you would typically see it in a normal Windows File Explorer.

  • Views - files will be organised based on file types, MIME types, file size, etc.

  • Results - this is where the results from Ingest Modules will appear.

  • Tags - will display files and/or results that have been tagged

  • Reports - will display reports either generated by modules or the analyst

PreviousVolatilityNextWindows User Activity Analysis

Last updated