Autopsy User Documentation  4.5.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Recent Activity Module

What Does It Do

The Recent Activity module extracts user activity as saved by web browsers (including web searches), installed programs, and the operating system. It also runs Regripper on the Registry hive.

This allows you to see what activity has occured in the last seven days of usage, what web sites were vistied, what the machine did, and what it connected to.

Configuration

There is nothing to configure for this module.

Using the Module

Ingest Settings

There are no run-time settings for this module.

Seeing Results

Results show up in the tree under "Extracted Content".

extracted_content.PNG

Copyright © 2012-2016 Basis Technology. Generated on Thu Dec 14 2017
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.