Windows Forensics Cookbook
上QQ阅读APP看书,第一时间看更新

Getting ready...

Go to The Sleuth Kit's website again, but now choose Autopsy, and after that, Download. The most recent version at the time of writing is 4.3.0. Both 32- and 64-bit versions are available; you should choose the right one according to your system (we have already shown you how to collect this piece of information in one of the previous recipes). You will be redirected to SourceForge, and the downloading process will start automatically. In our case, the file we downloaded is named autopsy-4.3.0-64bit.msi. All you need now is to double-click it and follow the installation instructions, which are quite straightforward. Once the installation process is complete, you are ready to go.