Autopsy Forensic Browser

Pumalite · 04-29-2007, 05:15 PM

Can an RPM built for Mandriva be used in Suse 10.2?

http://www.sleuthkit.org/autopsy/index.php

http://s158.photobucket.com/albums/t...reenshot-2.png

Want to investigate my hard drives.Thanks a lot for your help.

GrapefruiTgirl · 04-29-2007, 06:19 PM

I can't answer your question, but to be sure you get a working product, why not download an OS-independent package of Autopsy and compile it?
Just an idea.. I can't recall where I got Autopsy exactly, but I downloaded the tar.gz package.

samstar · 04-29-2007, 06:36 PM

Add this package repository for your YAST installation sources:

http://packman.iu-bremen.de/suse/10.2/

Then go to Software Management in YAST. There, you can search for and install Autopsy and Sleuthkit.

Sam

teckk · 04-29-2007, 06:37 PM

Another solution, Helix is a live CD with autopsy and other forensic tools.

http://www.e-fense.com/helix/

Pumalite · 04-29-2007, 07:34 PM

Quote:

Originally Posted by teckk

Another solution, Helix is a live CD with autopsy and other forensic tools.

http://www.e-fense.com/helix/

Well, thank you all of you guys. All your ideas are great. I found Autopsy in Smart ( I had the Packman repo ). This included sleuthkit which is necessary for Autopsy to work. Well, Smart found a conflict and I couldn't install. I found bonnie++, also in Smart, and installed fine. But I'll try Helix too. It sounds great. Thanks again.

Junior Hacker · 04-29-2007, 09:30 PM

Lots of great forensics tools in Helix, highly recommended. Lots of reading though, but worth it. Sleuthkit site: http://www.sleuthkit.org/

Pumalite · 04-30-2007, 12:39 PM

Quote:

Originally Posted by Junior Hacker

Lots of great forensics tools in Helix, highly recommended. Lots of reading though, but worth it. Sleuthkit site: http://www.sleuthkit.org/

I already downloaded it, as well as the manual. Made the disc and now I'm trying my teeth in the manual (348 pages, wow!). We'll see. Thanks for the reply.

P.S. Bonnie++ is pretty good too.