AUTOPSY

Link for the first part of this blog:- https://careertechnologycybersecurityindia.blogspot.com/2023/08/autopsy-forensic-tool.html

Steps to use autopsy:-

Step1:-Begin by launching the Autopsy application. Select "New Case" option.

Step2:-Give any name to your case and select a base directory, then click "Next".

Step3:-Proceed by defining a case number and required details, then click "Finish".

Step4:-Select first option which says "Generate new host name based on data source name" and then click "Next".

Step5:-Select "Local Disk" option and then click "Next".

Step6:-👉Click the "Select Disk" option. Then, pick the desired disk from the displayed list. If you don't see the specific disk you're looking for, you can refresh the list once. After that click on the "OK" button.

👉Afterward, select your time zone from the dropdown menu located in the field below. Check mark the option that says "Make a VMD image", after that click on the "NEXT" button at the bottom right of the dialog box.