Learn

Achievements

Capture The Flag

Autopsy in Action – Part 1

COURSE LESSON

Continue your learning

Sign in to access your enrolled courses, or view the course details before enrolling.

Sign in View course
Disk and File System Forensics with Autopsy

This part walks you through loading evidence and using core features to begin your forensic analysis. You’ll analyze metadata, deleted files, and recent user activity within a Windows or Linux image.

Key topics:

  • Adding disk images or logical files

  • Viewing file system structure and metadata

  • Recovering deleted files and folders

  • Identifying user documents and recent files