Monday, November 5, 2012

Autopsy & PTK

Autopsy

The Autopsy Forensic Browser is a graphical interface to the digital investigation tools in The
Sleuth Kit. Together, they allow you to investigate the file system and volumes of a computer.


PTK

PTK forensics is a computer forensic framework for the command line tools in the SleuthKit plus
much more software modules. This makes it usable and easy to investigate a system. PTK forensics
offers many features such as multi-user analysis, search and management of complex digital
investigation cases. The core component of the software is an efficient Indexing Engine performing
different preliminary analysis operations during the import phase of each piece of evidence. PTK
forensics is a complex web application based on very innovative technologies and builds an
appealing, highly dynamic and very easy to use interface. Its developers used the PHP language and
a back-end MySQL database implementing thus the LAMP structure (Linux-Apache-MySql-PHP).