Autopsy

Open source

Open-source digital forensics platform for analyzing disk images and files.

by Sleuth Kit LabsOfficial site ↗Source code ↗

Pricing: free
Free tier: true
License: open-source
Open source: Yes

Editorial review

Autopsy has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): desktopVerification pending
Desktop apps(Windows;macOS;Linux): Windows, Linux, macOSVerified

Pricing · Licensing

Free plan(true/false): trueVerification pending
License model(proprietary;open-source;source-available;dual-license): open-sourceVerification pending
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): freeVerified
Source repository(HTTPS URL): https://github.com/sleuthkit/autopsyVerified
SPDX license IDs(Apache-2.0;MIT): Apache-2.0Verification pending

Features · Product · Fit

Core capabilities(authoring;automation;analytics): end-to-end open source digital forensics platform, graphical interface to The Sleuth Kit and other digital forensics tools, fast, thorough hard drive investigation, add-on module extensibility and custom module development, investigating what happened on a computer including photo recoveryVerification pending

Support · Docs · Services

Support channels(email;ticket;chat;phone;community): training, subscription-based support, user guide documentationVerification pending

Audience · Use · Case

Best for(Neutral editorial summary): Law enforcement and corporate examiners needing a free, extensible digital forensics platform for disk investigationsVerification pending
Company-size fit(individual;SMB;mid-market;enterprise): SMB, mid-market, enterpriseVerification pending
Primary use cases(build;monitor;automate): law enforcement computer investigations, military investigations, corporate examiner investigations, file and photo recovery from mediaVerification pending
Skill level(beginner;intermediate;advanced;specialist): specialistVerification pending

Lifecycle · Versioning

Current version(1.12.3): 4.23.1Verified
Maintenance status(active;maintenance;deprecated;EOL;archived): activeVerification pending

Vendor · Maintainer

Headquarters country(US): United StatesVerification pending
Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerified

User reviews

Review policy

No published reviews yet.