Official account for The Sleuth Kit and Autopsy open source digital forensics tools.
Joined March 2012
- Tweets230
- Following2
- Followers6.2K
- Likes32
Autopsy release webinar happening today at 11 Eastern. See the new keyword search and malware scanning module in action! And ask Brian any questions.
attendee.gotowebinar.com/reg…
The Sleuth Kit 4.12.1 is out. Mostly bug fixes on the C++ side (from Luis Nassif and Joachim Metz) and some Java changes motivated by Autopsy & Cyber Triage.
github.com/sleuthkit/sleuthk…
sleuthkit retweeted
Autopsy 4.21.0 is out with index-less keyword searching, a Cyber Triage malware scanning module, and lots of #DFIR updates.
👀👀AUTOPSY IS ALIVE. 👀👀
Blog post: autopsy.com/4-21-0-release-w…
Webinar On Sept 12: register.gotowebinar.com/reg…
The Sleuth Kit 4.12.0 is also out. Major new feature there is LVM support on Linux from @joachimmetz and limited logical folder support.
sleuthkit.org/sleuthkit/down…
Autopsy 4.20.0 is out after a 1-year delay!!! Learn about the new features (including a new pipeline and more Jython modules), why it's been quiet for a year, and what's in store for 2023.
autopsy.com/autopsy-4-20-0-i…
sleuthkit retweeted
ResponderCon: Investigating Ransomware agenda is up and registration is open! Great submissions and we decided to add a 2nd track. 16 talks. 1 day. Very exciting! Sept 13.
Learn case studies, tools, artifacts, process, and more.
respondercon.io/agenda/
sleuthkit retweeted
We have a new Director of Training position open for Cyber Triage and Autopsy. Come join us to build and teach incident response and forensics (#DFIR) courses in-person and online. You'll also get to impact new features.
cybertriage.com/about/career…
sleuthkit retweeted
2 Days Left to submit a talk to the biggest (and only) DFIR-specific Ransomware Investigation event! Lots of great submissions already.
One gap is a talk from a victim their lessons. Topics on attack vectors, deployment mechanisms, etc. encouraged.
cyberrespondercon.com/call-f…
Autopsy 4.19.3 is out with Log4J fix (and Solr 8.11.0 upgrade).
This was a manual build and only the 64-bit version was made. The next major release will have more options and will have Solr 8.11.1.
autopsy.com/download/
The embedded version of Solr in Autopsy uses Log4j2. Blog post is up with steps on disabling the vulnerable feature.
autopsy.com/autopsy-and-log4…
sleuthkit retweeted
Want some #OSDFCon glory without a full, technical talk? Submit a short video and we'll play it during the breaks.
Examples:
"You might be in DFIR if ____"
"I hate it when tools ___"
"I love it when tools ___"
Tips and tricks
Tik Tok Dances
Due Nov 28
osdfcon.org/2021-event/video…
sleuthkit retweeted
2 weeks until #OSDFCon (Dec 1). It's time for you to register and put it on your calendar and for me to start working on Autopsy slides. Con is virtual and free.
osdfcon.org/
Swag this year has Hash as a super hero!
Autopsy 4.19.2 is out. Continued UI enhancements to the Analysis Result vs Data Artifact concept and several bug fixes.
github.com/sleuthkit/autopsy…
Also out is a corresponding TSK release with fixes from @joachimmetz, Joel Uckelman, and Kim Stone.
sleuthkit retweeted
New post about Azure with Cyber Triage / Autopsy databases. TLDR: Similar to Google. Cheaper and Faster than AWS. ☁️ ☁️ ☁️
Post has a summary of all three providers if you are looking to put your #DFIR lab in the cloud.
cybertriage.com/2021/cyber-t…
sleuthkit retweeted
We finished our Google Cloud testing and found it was faster and cheaper than AWS for PostgreSQL. ☁️💰☁️💰
Results apply to both Autopsy and Cyber Triage. Blog has GCP basics, results, and CT setup.
cybertriage.com/2021/cyber-t…
@googlecloud
The options in this "forensics in the cloud" post are also relevant to Autopsy (since it uses the same DB as Cyber Triage).
Our first cloud database post is up about @awscloud. We get a lot of requests about how to run Cyber Triage and Autopsy in the cloud, so we did some experiments with CT.
Learn about your #DFIR database options and our test results.
cybertriage.com/2021/cyber-t…
sleuthkit retweeted
After a crazy long delay, the #OSDFCon agenda is out!
There's talks on live DFIR, event logs, Autopsy updates, memory, EDR, and much more! We moved to Dec 1 and it's entirely virtual.
Agenda: osdfcon.org/2021-event/2021-…
Register for free:
osdfcon.org/2021-event/2021-…
One week left for the 2021 Autopsy Module competition!
💰 Cash Prizes. 💰
Python or Java. Make modules to flag various files or extract out artifacts!
osdfcon.org/2021-event/2021-…
sleuthkit retweeted
Cyber Triage is pushing code back into Autopsy!
New blog post is up on the re-unification that will happen in a couple of weeks when CT 3 is released.
cybertriage.com/2021/cyber-t…
Autopsy point release is out to fix a database connection leak and an OS Account viewer prioritization bug. You can get 4.19.1 from autopsy.com/download