Autopsy Evidence Locker

I don't use Autopsy, but I do use Google

http//www.linuxjournal.com/article/9922
http//www.sleuthkit.org/autopsy/help/index.html

h

It depends on where you have installed autopsy on your system in my case there is a config file at

'/Users/rbailey/Desktop/forensic utilities/autopsy-2.21/conf.pl'

It contains the following configuration;

# Autopsy configuration settings

# when set to 1, the server will stop after it receives no
# connections for STIMEOUT seconds.
$USE_STIMEOUT = 0;
$STIMEOUT = 3600;

# number of seconds that child waits for input from client
$CTIMEOUT = 15;

# set to 1 to save the cookie value in a file (for scripting)
$SAVE_COOKIE = 1;

$INSTALLDIR = '/Users/rbailey/Desktop/forensic utilities/autopsy-2.21/';

# System Utilities
$GREP_EXE = '/usr/bin/grep';
$FILE_EXE = '/usr/bin/file';
$MD5_EXE = '/sbin/md5';
$SHA1_EXE = '';

# Directories
$TSKDIR = '/usr/local/bin/';
$NSRLDB = '';
$LOCKDIR = '/Users/rbailey/Desktop/evidence';

Just change the path in the $LOCKDIR to where you want it.

It depends on where you have installed autopsy on your system in my case there is a config file at

'/Users/rbailey/Desktop/forensic utilities/autopsy-2.21/conf.pl'

……..

Just change the path in the $LOCKDIR to where you want it.

Very clear. Thank you.

as far as i remember TSK and autopsy are pretty outdated in the ubuntu repository aren't they?

i generally go for the sources.