Home Tips & Tricks Correlate Cases and Get Intelligence

Correlate Cases and Get Intelligence


Starting with Autopsy 4.5.0, you can now determine when a file or phone number (or other artifact) was seen in a previous case. You can also be alerted when an artifact was found that was previously marked as “bad”.

These features are possible because of new infrastructure called the Central Repository. In this blog, we’ll talk about enabling the Central Repository and the corresponding Correlation Engine module.

Read more about it at Autopsy blog.

  • How to Perform Hadoop Forensics

    In this post Chiheb Chebbi shows you how to perform Hadoop forensics. You will learn about…
  • Cloud Forensics: Box

    It seems we really enjoy forensicating desktop apps for cloud services. Last week we start…
  • The Magic of Raw Data Carving

    You have used all of the utilities in your expensive forensic suite, and other programs to…
Load More Related Articles
Load More In Tips & Tricks

Leave a Reply

Your email address will not be published. Required fields are marked *