Hello,
Can anyone point me to some good documentation on the Autopsy tool? Are there any books out there? I have read the documentation on the website and searched Amazon books but can't really find a lot of detailed reading.
Thanks,
Alain
I've not read it yet, but I noticed that the Linux Magazine ran a feature the other month on it, the TCT and other Forensic type things …
http//
( This one is ancient - but I'm sure you might find a more up to date version … )
UPDATED
I've got the copy on my desk now - it is January, 2008 - Issue 165 of "LINUX Journal" - American Edition. The article is "Introduction to Forensics" and starts on page 54. It is written by Kyle Rankin, who writes for O'Reilly on Linux topics.
Some good documentation for Autospy can be found at the Sleuthkit site. There is a wiki, and lots of good documentation there…
