Autopsy Forensic Browser http://www.sleuthkit.org/autopsy http://autopsy.sourceforge.net Brian Carrier [carrier@sleuthkit.org] Installation ----------------------------------------------------------------------------- 1. Install The Sleuth Kit (see README for download locations). It wll be the most convenient if symlinks are made from the specific version directory (i.e. sleuthkit-1.00) to a generic one (i.e. sleuthkit). 2. Untar the Autopsy file. 3. Run 'make'. It will try to locate the grep and strings utilities. If any are not found, it will prompt you for the location. It will also prompt for the directory where The Sleuth Kit was installed. 4. The install script will ask if you have the NIST National Software Reference Library (NSRL). If you do, you will need to enter the path of it. The NSRL is available from www.nsrl.nist.gov. 5. You will be prompted for the Evidence Locker location. This is the base directory where all cases will be stored. You must create this directory on your own. Live Analysis ------------------------------------------------------------------------------ Type 'make live' or run the 'make-live-cd' script to build the 'live-cd' directory. The 'live-cd' directory can be burned to a CD. ------------------------------------------------------------------------------ Brian Carrier [carrier@sleuthkit.org] March 19, 2004 CVS Date: $Date: 2005/01/17 23:24:20 $