Overview
Autopsy is a free, open-source program that lets investigators examine a copy of a computer drive or phone and look at deleted files, web history, photos, and timelines. Digital forensics expert Brian Carrier first built it in 2001 as an easier, point-and-click way to use command-line forensic tools, and today it runs on top of his free toolkit, The Sleuth Kit. Because its code is open, anyone can read it, check how it works, and learn from it. Tens of thousands of police and company investigators around the world use it, and military examiners use it too. Because it is free, new learners can practice the same methods the professionals use.
Why It Matters
Autopsy put professional-level forensic tools within reach of anyone, not just labs that can afford expensive software. Its open design lets other analysts check how it works, which helps when evidence is questioned. It follows the standard digital forensics practice of examining a copy, leaving the original untouched, and showing your steps. Because other developers can write add-on modules for it, it shows how a community can build tools together. For anyone who wants to try digital forensics, it is a professional tool you can learn without paying.
