Joshua I. James
by Joshua I. James
~1 min read

Tags

Autopsy 4 is a very powerful digital forensic investigation tool. Today, we are going to extract file and meta-data from a disk image (mobile phone) to use in external programs. We also briefly introduce Autopsy’s timeline feature.

This video shows how to export file metadata as TSV with human-readable fields, or as a body file. I usually export as a body file for analysis.