Autopsy User Documentation  3.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
Installation

Installation

Download Autopsy from the website:

http://sleuthkit.org/autopsy/download.php

The current version of Autopsy 3 runs only on Microsoft Windows. We have gotten it to run on other platforms, such as Linux and OS X, but we do not have it in a state that makes it easy to distribute and find the needed libraries.

The Windows installer is self-contained and will place everything in the needed places. Simply follow the standard prompts for installation.

Optimizing Performance

After installing Autopsy, there are several hardware-based things that we suggest you do to optimize performance:

1) Change the number of parallel pipelines used at run time. The default is two pipelines, but this can be increased if you are running on a system with several cores. To do this:

threadcount.PNG

2) When making a case, use different drives to store the case and the images. The case directory is where the SQLite database and keyword search index are stored. This allows the maximum amount of data to be read and written at the same time.

3) We have had best performance using either local solid state drives or fibre channel-attached SAN storage.


Copyright © 2012-2015 Basis Technology. Generated on Mon Oct 19 2015
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.