# Latest

**URL:** https://sleuthkit.discourse.group/latest.md?page=1

[Latest](https://sleuthkit.discourse.group/latest.md) · [Categories](https://sleuthkit.discourse.group/categories.md)

**Page:** 2

---

## [I can't run a case from my usb](https://sleuthkit.discourse.group/t/i-cant-run-a-case-from-my-usb/5463)

<div class="topic-metadata">

**Author:** [@Conrad\_Paterson](https://sleuthkit.discourse.group/u/Conrad_Paterson)\
**Replies:** 1\
**Last updated:** [May 22, 2025, 2:32pm UTC](https://sleuthkit.discourse.group/t/i-cant-run-a-case-from-my-usb/5463 "2025-05-22T14:32:40Z")

</div>

I have the initial images on my usb, and ingested them to have the output on the usb as well. The desktop I was working on did the ingest and I was able to view the output and go through it. But when I took the usb away …

---

## [Multi-user Cluster Autopsy Experience](https://sleuthkit.discourse.group/t/multi-user-cluster-autopsy-experience/5446)

<div class="topic-metadata">

**Author:** [@Black\_Thanos](https://sleuthkit.discourse.group/u/Black_Thanos)\
**Replies:** 0\
**Last updated:** [May 12, 2025, 5:04pm UTC](https://sleuthkit.discourse.group/t/multi-user-cluster-autopsy-experience/5446 "2025-05-12T17:04:43Z")

</div>

Greetings! As the title states I’m looking for any user of the Multi-user Cluster Autopsy Experience Before I start trying to cost and assess the lift implementing the multi-user functionality, I have a few questions, …

---

## [Corrupted PST files](https://sleuthkit.discourse.group/t/corrupted-pst-files/5435)

<div class="topic-metadata">

**Author:** [@VanAwful](https://sleuthkit.discourse.group/u/VanAwful)\
**Replies:** 1\
**Last updated:** [April 30, 2025, 5:03pm UTC](https://sleuthkit.discourse.group/t/corrupted-pst-files/5435 "2025-04-30T17:03:59Z")

</div>

Can autopsy help with corrupted PST files found in a drive image? Or would another tool be required?

---

## [Configuration of bing Machine Translation](https://sleuthkit.discourse.group/t/configuration-of-bing-machine-translation/5429)

<div class="topic-metadata">

**Author:** [@Todd\_Telle](https://sleuthkit.discourse.group/u/Todd_Telle)\
**Replies:** 0\
**Last updated:** [April 21, 2025, 12:14pm UTC](https://sleuthkit.discourse.group/t/configuration-of-bing-machine-translation/5429 "2025-04-21T12:14:48Z")

</div>

Can an example be provided of how to configure bing translation in the machine translation settings? The confg screen only allows the auth key to the API, but it does not allow to enter the necessary API endpoint, or oth…

---

## [Suggestion box for Forensic Examinations ](https://sleuthkit.discourse.group/t/suggestion-box-for-forensic-examinations/5428)

<div class="topic-metadata">

**Author:** [@Brandon\_Taylor](https://sleuthkit.discourse.group/u/Brandon_Taylor)\
**Replies:** 0\
**Last updated:** [April 21, 2025, 12:14pm UTC](https://sleuthkit.discourse.group/t/suggestion-box-for-forensic-examinations/5428 "2025-04-21T12:14:41Z")

</div>

To make sorting files in application be more robust, since during investigations you’ll find various file types. another category should be to sort by file extensions

---

## [Multiple instance on the same PC](https://sleuthkit.discourse.group/t/multiple-instance-on-the-same-pc/5427)

<div class="topic-metadata">

**Author:** [@Philippe\_Jarlov](https://sleuthkit.discourse.group/u/Philippe_Jarlov)\
**Replies:** 0\
**Last updated:** [April 21, 2025, 12:14pm UTC](https://sleuthkit.discourse.group/t/multiple-instance-on-the-same-pc/5427 "2025-04-21T12:14:29Z")

</div>

Hello, What is the best solution for opening several instances of Autopsy on the same Windows system, in order to work on several cases at the same time? Thank you very much Philippe

---

## [Sleuthkit 4.14.0 error: use of undeclared identifier 'libewf\_handle\_read\_random'](https://sleuthkit.discourse.group/t/sleuthkit-4-14-0-error-use-of-undeclared-identifier-libewf-handle-read-random/5419)

<div class="topic-metadata">

**Author:** [@Marius\_Schamschula](https://sleuthkit.discourse.group/u/Marius_Schamschula)\
**Replies:** 0\
**Last updated:** [April 16, 2025, 12:44pm UTC](https://sleuthkit.discourse.group/t/sleuthkit-4-14-0-error-use-of-undeclared-identifier-libewf-handle-read-random/5419 "2025-04-16T12:44:20Z")

</div>

I’m getting libtool: compile: ccache /usr/bin/clang -DHAVE\_CONFIG\_H -I. -I../../tsk -I../.. -I./../.. -I/opt/local/include -isysroot/Library/Developer/CommandLineTools/SDKs/MacOSX14.sdk -D\_THREAD\_SAFE -pthread -Wall -W…

---

## [Paid support for Autopsy](https://sleuthkit.discourse.group/t/paid-support-for-autopsy/5413)

<div class="topic-metadata">

**Author:** [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Replies:** 4\
**Last updated:** [April 13, 2025, 6:49pm UTC](https://sleuthkit.discourse.group/t/paid-support-for-autopsy/5413 "2025-04-13T18:49:46Z")

</div>

I am looking to see what interest there would be if paid support was offered as well as new development for Autopsy. Would people be interested in this and support it monetarily? Just trying to gage interest and see if…

---

## [Trouble with excel report on 4.22](https://sleuthkit.discourse.group/t/trouble-with-excel-report-on-4-22/5412)

<div class="topic-metadata">

**Author:** [@Fabrice](https://sleuthkit.discourse.group/u/Fabrice)\
**Replies:** 0\
**Last updated:** [March 27, 2025, 2:22pm UTC](https://sleuthkit.discourse.group/t/trouble-with-excel-report-on-4-22/5412 "2025-03-27T14:22:41Z")

</div>

Hi there! trying to do an excel report, it failed with this: Error generating report: java.lang.NoSuchFieldError: Factory I installed so, open jdk17, but it does the same… the other reports runs well. Autopsy 4.22 …

---

## [Blank screen on Launch](https://sleuthkit.discourse.group/t/blank-screen-on-launch/346)

<div class="topic-metadata">

**Author:** [@holr](https://sleuthkit.discourse.group/u/holr)\
**Replies:** 4\
**Last updated:** [March 22, 2025, 6:48pm UTC](https://sleuthkit.discourse.group/t/blank-screen-on-launch/346 "2025-03-22T18:48:29Z")

</div>

Hello, Hope some have suggestions! I installed autopsy 4.13.0 on a Windows 10 system and when I launch it, it displays a blank, grey screen (as in the attached image). In prior versions, it has always had a popup wind…

---

## [Data Source Processor for automated ingest](https://sleuthkit.discourse.group/t/data-source-processor-for-automated-ingest/5410)

<div class="topic-metadata">

**Author:** [@imcconell15](https://sleuthkit.discourse.group/u/imcconell15)\
**Replies:** 0\
**Last updated:** [March 20, 2025, 3:16pm UTC](https://sleuthkit.discourse.group/t/data-source-processor-for-automated-ingest/5410 "2025-03-20T15:16:19Z")

</div>

Hello, I have automated ingestion running on my Autopsy cluster but so far it interprets every image I give it as an “Unallocated Space Image File” instead of a Disk Image file. It seems to be an issue with the data sou…

---

## [Autopsy 4.22.0 crashes on creating new case folder](https://sleuthkit.discourse.group/t/autopsy-4-22-0-crashes-on-creating-new-case-folder/5409)

<div class="topic-metadata">

**Author:** [@shmagles](https://sleuthkit.discourse.group/u/shmagles)\
**Replies:** 0\
**Last updated:** [March 20, 2025, 3:16pm UTC](https://sleuthkit.discourse.group/t/autopsy-4-22-0-crashes-on-creating-new-case-folder/5409 "2025-03-20T15:16:13Z")

</div>

The entire program immediately crashes on creating a new case. OS: Windows 11 Virtual Machine through VBox. 3 cores, 8GB ram I have no idea how to get the program to run properly, any ideas?

---

## [Autopsy 4.21 not running on MacOS Sequoia](https://sleuthkit.discourse.group/t/autopsy-4-21-not-running-on-macos-sequoia/5394)

<div class="topic-metadata">

**Author:** [@dgreg](https://sleuthkit.discourse.group/u/dgreg)\
**Replies:** 1\
**Last updated:** [March 17, 2025, 10:00pm UTC](https://sleuthkit.discourse.group/t/autopsy-4-21-not-running-on-macos-sequoia/5394 "2025-03-17T22:00:41Z")

</div>

Hi All, Hope you are well. I am currently getting this error after running bin/autopsy in my terminal after the installation: Unrecognized option: --add-opens=java.base/java.lang=ALL-UNNAMED Error: Could not create t…

---

## [How to add Bitlocker Encryption Key](https://sleuthkit.discourse.group/t/how-to-add-bitlocker-encryption-key/5401)

<div class="topic-metadata">

**Author:** [@ArgyllA](https://sleuthkit.discourse.group/u/ArgyllA)\
**Replies:** 1\
**Last updated:** [March 17, 2025, 1:30pm UTC](https://sleuthkit.discourse.group/t/how-to-add-bitlocker-encryption-key/5401 "2025-03-17T13:30:41Z")

</div>

Hi folks, apologies, done the usual searching on this and coming up dry… the online docs and search results suggest that if Autopsy encounters a Bitlocker protected volume, it should ask for the password/recovery key, …

---

## [Can't generate excel report in 4.22](https://sleuthkit.discourse.group/t/cant-generate-excel-report-in-4-22/5405)

<div class="topic-metadata">

**Author:** [@RY4NSK](https://sleuthkit.discourse.group/u/RY4NSK)\
**Replies:** 0\
**Last updated:** [March 17, 2025, 1:15pm UTC](https://sleuthkit.discourse.group/t/cant-generate-excel-report-in-4-22/5405 "2025-03-17T13:15:52Z")

</div>

Hi All, I am trying to generate as excel report, however whenever i try to do so i get this error Error generating report: java.lang.NoSuchFieldError: Factory I am able to generate other reports with no issue e.g. htm…

---

## [Apache Commons Text CVE-2022-42889](https://sleuthkit.discourse.group/t/apache-commons-text-cve-2022-42889/3733)

<div class="topic-metadata">

**Author:** [@mp2](https://sleuthkit.discourse.group/u/mp2)\
**Replies:** 3\
**Last updated:** [March 13, 2025, 6:06pm UTC](https://sleuthkit.discourse.group/t/apache-commons-text-cve-2022-42889/3733 "2025-03-13T18:06:07Z")

</div>

Hello all, our EDR reports this vulnerability in the following 3 files: c:\\program files\\autopsy-4.20.0\\autopsy\\solr\\server\\solr-webapp\\webapp\\web-inf\\lib\\commons-text-1.6.jar c:\\program files\\autopsy-4.20.0\\autopsy\\s…

---

## [Autopsy 4.21 not running on MacOS Sonoma 14.4.1](https://sleuthkit.discourse.group/t/autopsy-4-21-not-running-on-macos-sonoma-14-4-1/4296)

<div class="topic-metadata">

**Author:** [@rtbomfim](https://sleuthkit.discourse.group/u/rtbomfim)\
**Replies:** 3\
**Last updated:** [March 11, 2025, 1:26pm UTC](https://sleuthkit.discourse.group/t/autopsy-4-21-not-running-on-macos-sonoma-14-4-1/4296 "2025-03-11T13:26:44Z")

</div>

Hi, all. I’m installed Autopsy on MacOS using MacPorts and installation was sucessfully but, when I try to run the application, I receive the following message below: Unrecognized option: --add-opens=java.base/java.lan…

---

## [Multi-User installation](https://sleuthkit.discourse.group/t/multi-user-installation/5390)

<div class="topic-metadata">

**Author:** [@DepecheMode](https://sleuthkit.discourse.group/u/DepecheMode)\
**Replies:** 2\
**Last updated:** [March 10, 2025, 1:37pm UTC](https://sleuthkit.discourse.group/t/multi-user-installation/5390 "2025-03-10T13:37:53Z")

</div>

Using Multi-User installation, is it possible to use multiple autopsy clients to speed up analyses? Each client runs different modules.

---

## [time clues in data source](https://sleuthkit.discourse.group/t/time-clues-in-data-source/5389)

<div class="topic-metadata">

**Author:** [@Carla\_Vieira](https://sleuthkit.discourse.group/u/Carla_Vieira)\
**Replies:** 0\
**Last updated:** [March 10, 2025, 12:37pm UTC](https://sleuthkit.discourse.group/t/time-clues-in-data-source/5389 "2025-03-10T12:37:36Z")

</div>

Hi everyone! I am working (studying) on a case that has some puzzling dates. The disk image is from a USB drive date 2017. The files of interest were modified in 2002 (I would say written and saved then) and created in …

---

## [I need help with my notes please](https://sleuthkit.discourse.group/t/i-need-help-with-my-notes-please/5388)

<div class="topic-metadata">

**Author:** [@Koq](https://sleuthkit.discourse.group/u/Koq)\
**Replies:** 0\
**Last updated:** [March 10, 2025, 12:37pm UTC](https://sleuthkit.discourse.group/t/i-need-help-with-my-notes-please/5388 "2025-03-10T12:37:23Z")

</div>

Hi, Do you have any idea, can Samsung notes be recovered, please ?

---

## [phyton ingest model start to run than stops do you have an ingestion module that works? ](https://sleuthkit.discourse.group/t/phyton-ingest-model-start-to-run-than-stops-do-you-have-an-ingestion-module-that-works/5373)

<div class="topic-metadata">

**Author:** [@Ad\_lab](https://sleuthkit.discourse.group/u/Ad_lab)\
**Replies:** 1\
**Last updated:** [February 24, 2025, 12:38pm UTC](https://sleuthkit.discourse.group/t/phyton-ingest-model-start-to-run-than-stops-do-you-have-an-ingestion-module-that-works/5373 "2025-02-24T12:38:22Z")

</div>

all gpts dropped the ball so it is a long shot . I have an ingest model placed to the AppData\\Roaming\\autopsy\\python\_modules\\student\_investigation Windows 11( or linux ubuntu)autopsy 4.21.0 Mode LastWr…

---

## [Unable to add data to text index](https://sleuthkit.discourse.group/t/unable-to-add-data-to-text-index/5366)

<div class="topic-metadata">

**Author:** [@grzesiug](https://sleuthkit.discourse.group/u/grzesiug)\
**Replies:** 2\
**Last updated:** [February 12, 2025, 4:06pm UTC](https://sleuthkit.discourse.group/t/unable-to-add-data-to-text-index/5366 "2025-02-12T16:06:57Z")

</div>

Recently, I’ve been getting an error message like in the screen below on every data source. Could someone explain why I’m getting it and what it means? Thank you

---

## [Is it possible to use Autopsy to recover files from Android internal memory?](https://sleuthkit.discourse.group/t/is-it-possible-to-use-autopsy-to-recover-files-from-android-internal-memory/2735)

<div class="topic-metadata">

**Author:** [@R23](https://sleuthkit.discourse.group/u/R23)\
**Replies:** 7\
**Last updated:** [February 10, 2025, 11:19pm UTC](https://sleuthkit.discourse.group/t/is-it-possible-to-use-autopsy-to-recover-files-from-android-internal-memory/2735 "2025-02-10T23:19:39Z")

</div>

I’m the IT guy at my company and I just deleted a 3GB “Msgstore db Crypt” file from the CEO’s smartphone. So I have to recover as many files as possible as quickly as possible.

---

## [Autopsy 4.21.0 Threadlock on Windows 11 - Thread Dump](https://sleuthkit.discourse.group/t/autopsy-4-21-0-threadlock-on-windows-11-thread-dump/5358)

<div class="topic-metadata">

**Author:** [@vsa77](https://sleuthkit.discourse.group/u/vsa77)\
**Replies:** 1\
**Last updated:** [February 8, 2025, 7:18pm UTC](https://sleuthkit.discourse.group/t/autopsy-4-21-0-threadlock-on-windows-11-thread-dump/5358 "2025-02-08T19:18:24Z")

</div>

Just as the title says. It was running fine, but now there’s a threadlock error in the thread dump. Here are the specifics: Device: Asus FX706-HEB Processor: 11th Gen Intel(R) Core™ i5-11400H @ 2.70GHz 2.69 GHz RAM:…

---

## [SleuthkitJNI: failed to load libtsk\_jni - Linux Mint](https://sleuthkit.discourse.group/t/sleuthkitjni-failed-to-load-libtsk-jni-linux-mint/4497)

<div class="topic-metadata">

**Author:** [@dgibble](https://sleuthkit.discourse.group/u/dgibble)\
**Replies:** 2\
**Last updated:** [February 7, 2025, 7:48pm UTC](https://sleuthkit.discourse.group/t/sleuthkitjni-failed-to-load-libtsk-jni-linux-mint/4497 "2025-02-07T19:48:47Z")

</div>

WARNING: Unknown module: javafx.base specified to --add-exports WARNING: Unknown module: javafx.controls specified to --add-exports WARNING: Unknown module: javafx.controls specified to --add-opens Library not foun…

---

## [Open autopsy in linux](https://sleuthkit.discourse.group/t/open-autopsy-in-linux/5303)

<div class="topic-metadata">

**Author:** [@Waldemar\_Mozola](https://sleuthkit.discourse.group/u/Waldemar_Mozola)\
**Replies:** 1\
**Last updated:** [February 7, 2025, 7:34pm UTC](https://sleuthkit.discourse.group/t/open-autopsy-in-linux/5303 "2025-02-07T19:34:16Z")

</div>

How can l open autopsy in Linux eg. Ubuntu I think I must instal snap: sudo snap install autopsy; autopsy --nosplash

---

## [Problem with Ingest Modules](https://sleuthkit.discourse.group/t/problem-with-ingest-modules/5359)

<div class="topic-metadata">

**Author:** [@Juergen\_Habich](https://sleuthkit.discourse.group/u/Juergen_Habich)\
**Replies:** 0\
**Last updated:** [February 7, 2025, 1:10pm UTC](https://sleuthkit.discourse.group/t/problem-with-ingest-modules/5359 "2025-02-07T13:10:22Z")

</div>

:smile: installed Autopsy 4.21 as snap on Ubuntu 24. To my very bad surprise I had to notice, YARA, Android, and IOS ingest modules work only with Windows. Not good at all, because those modules are essential for me. An…

---

## [Autopsy not starting due to java error](https://sleuthkit.discourse.group/t/autopsy-not-starting-due-to-java-error/5350)

<div class="topic-metadata">

**Author:** [@TomNigel](https://sleuthkit.discourse.group/u/TomNigel)\
**Replies:** 2\
**Last updated:** [February 7, 2025, 11:17am UTC](https://sleuthkit.discourse.group/t/autopsy-not-starting-due-to-java-error/5350 "2025-02-07T11:17:12Z")

</div>

Hi, I have installed using this link on my siduction linux (debian sid type distribution): https://github.com/sleuthkit/autopsy/blob/develop/Running\_Linux\_OSX.md So I have used the prerequisites script for linux, inst…

---

## [autopsy crashes on analyzing 500GB harddrive](https://sleuthkit.discourse.group/t/autopsy-crashes-on-analyzing-500gb-harddrive/5347)

<div class="topic-metadata">

**Author:** [@TomNigel](https://sleuthkit.discourse.group/u/TomNigel)\
**Replies:** 5\
**Last updated:** [February 7, 2025, 11:12am UTC](https://sleuthkit.discourse.group/t/autopsy-crashes-on-analyzing-500gb-harddrive/5347 "2025-02-07T11:12:27Z")

</div>

Hi, I am using autopsy on my linux notebook. It has a debian type distribution installed and has KDE as an integrated desktop environment. I want to analyze a harddrive that used to be internal SATA drive that I have m…

---

## [help for first time user](https://sleuthkit.discourse.group/t/help-for-first-time-user/5344)

<div class="topic-metadata">

**Author:** [@profarcity](https://sleuthkit.discourse.group/u/profarcity)\
**Replies:** 2\
**Last updated:** [February 6, 2025, 2:23pm UTC](https://sleuthkit.discourse.group/t/help-for-first-time-user/5344 "2025-02-06T14:23:25Z")

</div>

Hi there - i am using autopsy to help diagnose any effects of a malware Powershell script that I ran on my computer. I would love to get any assistance that other more experienced users are willing to provide. For cont…

[Previous page](https://sleuthkit.discourse.group/latest.md)

[Next page](https://sleuthkit.discourse.group/latest.md?page=2)
