# Autopsy Feature Requests

**URL:** https://sleuthkit.discourse.group/c/autopsy/autopsy-feature-requests/8.md

[Latest](https://sleuthkit.discourse.group/latest.md) · [Categories](https://sleuthkit.discourse.group/categories.md)

---

## [About the Autopsy Feature Requests category](https://sleuthkit.discourse.group/t/about-the-autopsy-feature-requests-category/69)

<div class="topic-metadata">

**Author:** [@carrier](https://sleuthkit.discourse.group/u/carrier)\
**Replies:** 0

</div>

Used to discuss Autopsy feature requests. The GitHub tracker is a better place to record these so that developers can learn about them.

---

## [Report Generating](https://sleuthkit.discourse.group/t/report-generating/68)

<div class="topic-metadata">

**Author:** [@Chaminda\_Lakmal](https://sleuthkit.discourse.group/u/Chaminda_Lakmal)\
**Replies:** 10\
**Last updated:** [June 6, 2026, 6:43pm UTC](https://sleuthkit.discourse.group/t/report-generating/68 "2026-06-06T18:43:48Z")

</div>

can you add the report in pdf format

---

## [Multiple BitLocker partitions in one image](https://sleuthkit.discourse.group/t/multiple-bitlocker-partitions-in-one-image/5555)

<div class="topic-metadata">

**Author:** [@Dominik](https://sleuthkit.discourse.group/u/Dominik)\
**Replies:** 0\
**Last updated:** [April 19, 2026, 8:20am UTC](https://sleuthkit.discourse.group/t/multiple-bitlocker-partitions-in-one-image/5555 "2026-04-19T08:20:07Z")

</div>

I have an image created from a laptop with two BitLocker encrypted partitions; recovery key for both partitions is present. When adding this .E01 to Autopsy, it asks for the expected identifiers, and positively checks i…

---

## [Dark Mode for less eye strain?](https://sleuthkit.discourse.group/t/dark-mode-for-less-eye-strain/2923)

<div class="topic-metadata">

**Author:** [@NZKshatriya](https://sleuthkit.discourse.group/u/NZKshatriya)\
**Replies:** 7\
**Last updated:** [March 21, 2026, 4:27pm UTC](https://sleuthkit.discourse.group/t/dark-mode-for-less-eye-strain/2923 "2026-03-21T16:27:46Z")

</div>

Would it be possible get to get a dark mode option, or at least have the program follow what theme has been selected for Windows?

---

## [Incorporation of MediaInfo into ingesting](https://sleuthkit.discourse.group/t/incorporation-of-mediainfo-into-ingesting/5503)

<div class="topic-metadata">

**Author:** [@mtoomey](https://sleuthkit.discourse.group/u/mtoomey)\
**Replies:** 0\
**Last updated:** [August 4, 2025, 3:31pm UTC](https://sleuthkit.discourse.group/t/incorporation-of-mediainfo-into-ingesting/5503 "2025-08-04T15:31:46Z")

</div>

This is my first post so bear with me. In some casework I perform, I come across images and videos that have a the normal created/modified dates with EXIF data identifying the device utilized. I utilize MediaInfo to iden…

---

## [Paid support for Autopsy](https://sleuthkit.discourse.group/t/paid-support-for-autopsy/5413)

<div class="topic-metadata">

**Author:** [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Replies:** 4\
**Last updated:** [April 13, 2025, 6:49pm UTC](https://sleuthkit.discourse.group/t/paid-support-for-autopsy/5413 "2025-04-13T18:49:46Z")

</div>

I am looking to see what interest there would be if paid support was offered as well as new development for Autopsy. Would people be interested in this and support it monetarily? Just trying to gage interest and see if…

---

## [Trouble with excel report on 4.22](https://sleuthkit.discourse.group/t/trouble-with-excel-report-on-4-22/5412)

<div class="topic-metadata">

**Author:** [@Fabrice](https://sleuthkit.discourse.group/u/Fabrice)\
**Replies:** 0\
**Last updated:** [March 27, 2025, 2:22pm UTC](https://sleuthkit.discourse.group/t/trouble-with-excel-report-on-4-22/5412 "2025-03-27T14:22:41Z")

</div>

Hi there! trying to do an excel report, it failed with this: Error generating report: java.lang.NoSuchFieldError: Factory I installed so, open jdk17, but it does the same… the other reports runs well. Autopsy 4.22 …

---

## [Adding VHDX to Supported Image Formats](https://sleuthkit.discourse.group/t/adding-vhdx-to-supported-image-formats/5337)

<div class="topic-metadata">

**Author:** [@pcoleman](https://sleuthkit.discourse.group/u/pcoleman)\
**Replies:** 3\
**Last updated:** [January 24, 2025, 3:33am UTC](https://sleuthkit.discourse.group/t/adding-vhdx-to-supported-image-formats/5337 "2025-01-24T03:33:25Z")

</div>

All, It may have been suggested already, but could VHDX be added as a supported image format in Autopsy? VHD is quite useful, but as things progress, many Windows functions and apps default to creating VHDX files before…

---

## [Autopsy 4.21.0 Installer for Windows](https://sleuthkit.discourse.group/t/autopsy-4-21-0-installer-for-windows/4349)

<div class="topic-metadata">

**Author:** [@Forensics-Guy](https://sleuthkit.discourse.group/u/Forensics-Guy)\
**Replies:** 1\
**Last updated:** [April 22, 2024, 3:41pm UTC](https://sleuthkit.discourse.group/t/autopsy-4-21-0-installer-for-windows/4349 "2024-04-22T15:41:08Z")

</div>

Would it be possible to offer an EXE installer for Autopsy vs an MSI package? I’m asking because MSI packages that get installed leave a copy of the installer in the C:\\Windows\\Installer directory. My understanding is th…

---

## [Virtual directories and recycle bin](https://sleuthkit.discourse.group/t/virtual-directories-and-recycle-bin/4030)

<div class="topic-metadata">

**Author:** [@oscarjs](https://sleuthkit.discourse.group/u/oscarjs)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 9:51pm UTC](https://sleuthkit.discourse.group/t/virtual-directories-and-recycle-bin/4030 "2023-11-14T21:51:46Z")

</div>

When the Recent Activity module is run and a folder is found in the recycle bin, and then is presented in the directory structure as a virtual directory, specify in the file metadata of that directory: “Virtual Directory…

---

## [Yara on Linux ingest](https://sleuthkit.discourse.group/t/yara-on-linux-ingest/3962)

<div class="topic-metadata">

**Author:** [@JLt](https://sleuthkit.discourse.group/u/JLt)\
**Replies:** 0\
**Last updated:** [September 27, 2023, 12:12pm UTC](https://sleuthkit.discourse.group/t/yara-on-linux-ingest/3962 "2023-09-27T12:12:17Z")

</div>

asking a question to learn/help build a work around for Yara ingestion I’m totally stupified this is not possible on Linux but only support on 64bit windows please, let me know if this can work or not at all and there’…

---

## [Add Date Stamp Support for Local Files/Archives](https://sleuthkit.discourse.group/t/add-date-stamp-support-for-local-files-archives/823)

<div class="topic-metadata">

**Author:** [@John\_Lehr](https://sleuthkit.discourse.group/u/John_Lehr)\
**Replies:** 2\
**Last updated:** [August 1, 2023, 3:17pm UTC](https://sleuthkit.discourse.group/t/add-date-stamp-support-for-local-files-archives/823 "2023-08-01T15:17:43Z")

</div>

Date Stamps are not added to the Autopsy database for local file data sources. I believe the inclusion or exclusion of date stamps for logical files should be, at the very least, optional. It should be left to the exam…

---

## [Multi-accounts and recent activity](https://sleuthkit.discourse.group/t/multi-accounts-and-recent-activity/3836)

<div class="topic-metadata">

**Author:** [@Fabrice](https://sleuthkit.discourse.group/u/Fabrice)\
**Replies:** 4\
**Last updated:** [July 6, 2023, 3:42pm UTC](https://sleuthkit.discourse.group/t/multi-accounts-and-recent-activity/3836 "2023-07-06T15:42:49Z")

</div>

Hi! We found out an issue with the recent activity module. It actually has difficulties to find results with the multi-accounts on a Windows E01. For the main account, it finds a lot of things, but for all the secondari…

---

## [Features/Requests for Next Release of Autopsy](https://sleuthkit.discourse.group/t/features-requests-for-next-release-of-autopsy/3805)

<div class="topic-metadata">

**Author:** [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Replies:** 8\
**Last updated:** [June 30, 2023, 12:26pm UTC](https://sleuthkit.discourse.group/t/features-requests-for-next-release-of-autopsy/3805 "2023-06-30T12:26:30Z")

</div>

As the next release of Autopsy will happen soon here is a preview of what changes there are: General Update Java to version 17 Update Netbeans platform Recent Activity Updates: Check For Malicious Chrome Extensions …

---

## [OST parsing feature](https://sleuthkit.discourse.group/t/ost-parsing-feature/3810)

<div class="topic-metadata">

**Author:** [@Ettore\_Diodati](https://sleuthkit.discourse.group/u/Ettore_Diodati)\
**Replies:** 2\
**Last updated:** [June 21, 2023, 12:31pm UTC](https://sleuthkit.discourse.group/t/ost-parsing-feature/3810 "2023-06-21T12:31:02Z")

</div>

Hi, it would be nice if there will be the possibility to parse OST since nowadays it’s very common to find it Thanks Ettore

---

## [Default subdirectory for Tika Temp Files (Antivirus Path Exclusion)](https://sleuthkit.discourse.group/t/default-subdirectory-for-tika-temp-files-antivirus-path-exclusion/3654)

<div class="topic-metadata">

**Author:** [@Dank](https://sleuthkit.discourse.group/u/Dank)\
**Replies:** 0\
**Last updated:** [March 26, 2023, 3:31am UTC](https://sleuthkit.discourse.group/t/default-subdirectory-for-tika-temp-files-antivirus-path-exclusion/3654 "2023-03-26T03:31:32Z")

</div>

VM Ingestion: Using Autopsy Forensics version 4.2.0 (module: Keyword Search). Windows 11 Antivirus appeared to slow down (and possibly lead to a crash) during ingest. It also caused the computer to use alot of RAM. Not …

---

## [Trouble Chrome History & Recent Activity](https://sleuthkit.discourse.group/t/trouble-chrome-history-recent-activity/3100)

<div class="topic-metadata">

**Author:** [@nika](https://sleuthkit.discourse.group/u/nika)\
**Replies:** 29\
**Last updated:** [October 6, 2022, 8:15am UTC](https://sleuthkit.discourse.group/t/trouble-chrome-history-recent-activity/3100 "2022-10-06T08:15:45Z")

</div>

I posted on Autopsy Help but so far no answer. I thought maybe that was the wrong category. I am posting here in case this will get some traction. Thank you all in advance. I recently started having trouble ingestin…

---

## [Google Chrome Bookmarks](https://sleuthkit.discourse.group/t/google-chrome-bookmarks/2221)

<div class="topic-metadata">

**Author:** [@Osinting](https://sleuthkit.discourse.group/u/Osinting)\
**Replies:** 1\
**Last updated:** [August 19, 2022, 1:23am UTC](https://sleuthkit.discourse.group/t/google-chrome-bookmarks/2221 "2022-08-19T01:23:47Z")

</div>

Hi, all, New to the forum (and DF) so go easy on me! I was using various tools, including Autopsy to review a snapshot taken by KAPE by someone else. I was specifically looking at browser bookmarks and was noticing a p…

---

## [Can Autopsy open UFED files?](https://sleuthkit.discourse.group/t/can-autopsy-open-ufed-files/409)

<div class="topic-metadata">

**Author:** [@ordipb](https://sleuthkit.discourse.group/u/ordipb)\
**Replies:** 7\
**Last updated:** [June 16, 2022, 7:02am UTC](https://sleuthkit.discourse.group/t/can-autopsy-open-ufed-files/409 "2022-06-16T07:02:01Z")

</div>

Hello. I would know if it is possible to open and display, with Autopsy, UFED files. UFED (Universal Forensic Extraction Device) is the format used par Cellebrite’s UFED Physical Analyser (include in his product UFED U…

---

## [Progress not clear](https://sleuthkit.discourse.group/t/progress-not-clear/3222)

<div class="topic-metadata">

**Author:** [@Daniel](https://sleuthkit.discourse.group/u/Daniel)\
**Replies:** 1\
**Last updated:** [June 15, 2022, 6:13pm UTC](https://sleuthkit.discourse.group/t/progress-not-clear/3222 "2022-06-15T18:13:57Z")

</div>

If possible, improve progress status notification. 2 weeks analysing files from logicalFileSet at 100 %.

---

## [Report Generation](https://sleuthkit.discourse.group/t/report-generation/3242)

<div class="topic-metadata">

**Author:** [@Rathish\_Babu](https://sleuthkit.discourse.group/u/Rathish_Babu)\
**Replies:** 3\
**Last updated:** [May 29, 2022, 4:18pm UTC](https://sleuthkit.discourse.group/t/report-generation/3242 "2022-05-29T16:18:06Z")

</div>

More options in report generation.

---

## [Le-Modul Import broken](https://sleuthkit.discourse.group/t/le-modul-import-broken/2974)

<div class="topic-metadata">

**Author:** [@Ben](https://sleuthkit.discourse.group/u/Ben)\
**Replies:** 1\
**Last updated:** [December 19, 2021, 2:25am UTC](https://sleuthkit.discourse.group/t/le-modul-import-broken/2974 "2021-12-19T02:25:48Z")

</div>

Hello, am trying to import the project vic database over the LE-MODUL into autopsy and getting a parser error all the time: log: Log of updates to Project Vic databases 2021/11/22 15:33:16 : Creating database file C…

---

## [XFS filesystem support](https://sleuthkit.discourse.group/t/xfs-filesystem-support/2743)

<div class="topic-metadata">

**Author:** [@touffman](https://sleuthkit.discourse.group/u/touffman)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 2:20pm UTC](https://sleuthkit.discourse.group/t/xfs-filesystem-support/2743 "2021-08-04T14:20:17Z")

</div>

Hi, I’ve tried to figure out how Autopsy, that I know about since a long time, could help me for a case I’m working on but I’ve faced a terrible lack of support of XFS filesystem… Is there plans to add support for this…

---

## [Problems faced while extracting multiple files to a same directory](https://sleuthkit.discourse.group/t/problems-faced-while-extracting-multiple-files-to-a-same-directory/2683)

<div class="topic-metadata">

**Author:** [@peterjx](https://sleuthkit.discourse.group/u/peterjx)\
**Replies:** 0\
**Last updated:** [June 20, 2021, 3:21am UTC](https://sleuthkit.discourse.group/t/problems-faced-while-extracting-multiple-files-to-a-same-directory/2683 "2021-06-20T03:21:12Z")

</div>

When multiple files are extracted to a directory, they are assigned a prefix number followed by the original file name. the number is the internal id. I find that the internal id for the same file in the same image varie…

---

## [Export multiple tables to one CSV](https://sleuthkit.discourse.group/t/export-multiple-tables-to-one-csv/2529)

<div class="topic-metadata">

**Author:** [@s1lvere](https://sleuthkit.discourse.group/u/s1lvere)\
**Replies:** 0\
**Last updated:** [March 26, 2021, 2:49pm UTC](https://sleuthkit.discourse.group/t/export-multiple-tables-to-one-csv/2529 "2021-03-26T14:49:38Z")

</div>

Hello everyone, When you are in the tree view, you can select a directory and export the table as a CSV file. I would like to do the same but on all the subdirectory and files but actually it seems to be impossible… an…

---

## [Date format for MAC and metadata](https://sleuthkit.discourse.group/t/date-format-for-mac-and-metadata/2399)

<div class="topic-metadata">

**Author:** [@Eric\_N](https://sleuthkit.discourse.group/u/Eric_N)\
**Replies:** 0\
**Last updated:** [January 15, 2021, 3:56pm UTC](https://sleuthkit.discourse.group/t/date-format-for-mac-and-metadata/2399 "2021-01-15T15:56:38Z")

</div>

Hi, Would it be possible to have the option to display dates in the European format DD/MM/YYYY in the GUI ? Thanks, Eric

---

## [Flag Encryption, CryptoWallet, and Cloud Programs](https://sleuthkit.discourse.group/t/flag-encryption-cryptowallet-and-cloud-programs/1928)

<div class="topic-metadata">

**Author:** [@carrier](https://sleuthkit.discourse.group/u/carrier)\
**Replies:** 0\
**Last updated:** [June 8, 2020, 7:55pm UTC](https://sleuthkit.discourse.group/t/flag-encryption-cryptowallet-and-cloud-programs/1928 "2020-06-08T19:55:23Z")

</div>

We’re going to ship with Interesting File rules to flag cloud storage, encryption, and crypto currency programs. Please review the github issues below and add other programs that you want flagged either as github comment…

---

## [Selected Row Count Number](https://sleuthkit.discourse.group/t/selected-row-count-number/1643)

<div class="topic-metadata">

**Author:** [@adeeliqbal](https://sleuthkit.discourse.group/u/adeeliqbal)\
**Replies:** 0\
**Last updated:** [May 14, 2020, 8:01pm UTC](https://sleuthkit.discourse.group/t/selected-row-count-number/1643 "2020-05-14T20:01:31Z")

</div>

I woulld like to request a new feature. While going through autopsy training Section 7: Various Small Modules (File Type, Exif, etc.) Question 1 \> BLU R1 HD? it came to my mind. I have to select all the entries and th…

---

## [Plaso export option](https://sleuthkit.discourse.group/t/plaso-export-option/1281)

<div class="topic-metadata">

**Author:** [@conma293](https://sleuthkit.discourse.group/u/conma293)\
**Replies:** 3\
**Last updated:** [April 29, 2020, 1:53pm UTC](https://sleuthkit.discourse.group/t/plaso-export-option/1281 "2020-04-29T13:53:22Z")

</div>

Is it possible to run the plaso module and export those results as a csv, as if you ran plaso and log2timeline?

---

## [Grafana and Autopsy](https://sleuthkit.discourse.group/t/grafana-and-autopsy/697)

<div class="topic-metadata">

**Author:** [@calimelo](https://sleuthkit.discourse.group/u/calimelo)\
**Replies:** 0\
**Last updated:** [April 12, 2020, 10:44am UTC](https://sleuthkit.discourse.group/t/grafana-and-autopsy/697 "2020-04-12T10:44:16Z")

</div>

Thank you for autopsy. I’d like to recommend an open source visualization tool for postgresql database. I use grafana for other purposes in the lab and after the autopsy training i thought that i could use grafana to mon…

[Next page](https://sleuthkit.discourse.group/c/autopsy/autopsy-feature-requests/8.md?page=1)
