Autopsy 4.13.0 on MacOS Catalina not working

nonoti · January 13, 2020, 4:12pm

I’ve followed the instructions here:

sleuthkit/autopsy/blob/develop/Running_Linux_OSX.txt

This document outlines how to run a packaged version of Autopsy on Linux or OS X.  It does not cover how to compile it from source or the Windows installer. 


* Prerequisites *

The following need to be done at least once. They do not need to be repeated for each Autopsy release.

- Install testdisk for photorec functionality
-- Linux:  % sudo apt-get install testdisk
-- OS X: % brew install testdisk

- Install the BellSoft Java 8 JRE and JavaFX 8 distribution and set JAVA_HOME.
  * The BellSoft distribution bundles OpenJDK and OpenJFX. Other distributions we have tried either don't
    bundle OpenJFX (AdoptOpenJDK) or don't include all necessary binaries (Amazon Corretto).
-- Linux:
    1. Install BellSoft Java 8
       % wget -q -O - https://download.bell-sw.com/pki/GPG-KEY-bellsoft | sudo apt-key add -
       % echo "deb [arch=amd64] https://apt.bell-sw.com/ stable main" | sudo tee /etc/apt/sources.list.d/bellsoft.list
       % sudo apt-get update
       % sudo apt-get install bellsoft-java8

This file has been truncated. show original

But when I tried to run sh unix_setup.sh I get the following error;
> Checking prerequisites and preparing Autopsy:
>
> ---------------------------------------------
> -n Checking for PhotoRec…
> found in /usr/local/bin
> -n Checking for Java…
> found in /Library/Java/JavaVirtualMachines/liberica-jdk-1.8.0_232/Contents/Home
> -n Checking for Sleuth Kit Java bindings…
> ERROR: sleuthkit-4.7.0.jar not found in /usr/share/java/ or /usr/local/share/java/.
> Please install the Sleuth Kit Java bindings file.
> See https://github.com/sleuthkit/sleuthkit/releases.

From what I can see, the problem is that brew install sleuthkit OR building sleuthkit on brew installs Sleuthkit 4.6.7 not 4.7.0.

But I can’t seem to find how to get 4.7.0 installed on the Mac?

downey · January 13, 2020, 5:39pm

Until TSK 4.8.0 is released and a brew package is available for it the only way to get this to work on MacOS is to build TSK yourself.

nonoti · January 13, 2020, 5:52pm

Thanks, i did build it and it worked.

However i now have no GUI when autopsy starts

mdp · January 25, 2020, 8:10pm

I am having the same issue. How would you go about building TSK yourself?

Topic		Replies	Views
Autopsy 4.14.0 on kali Linux and Java 1.8.0_242-b07 Autopsy on Linux / macOS	22	10577	April 15, 2020
Wrong package of java in the Linux install instructions Autopsy on Linux / macOS	3	2095	April 14, 2020
Troubleshooting startup Autopsy on Linux / macOS	3	1793	January 30, 2024
Install Issue on Linux (Ubuntu 20.04) Autopsy Help	2	1444	August 13, 2020
Autopsy on OSX 10.15 Catalina not working Autopsy on Linux / macOS	5	1897	April 18, 2020

Autopsy 4.13.0 on MacOS Catalina not working

Related topics