Extract a file listing with hash values & other key meta data

Hi There,

I’m new to forensics technology & to use of Autopsy.

Highly appreciate if someone can help me to find a way to extract file listing (with hash values & meta data) of an evidence using autopsy.

Thank you,

I believe one of the report modules should do what you need.
http://sleuthkit.org/autopsy/docs/user-docs/4.12.0/reporting_page.html

If you want all the files if your case, “Files-Text” or “TSK Body File” are the most likely candidates. If you want a subset like all the files in one folder, you could tag them all and then make an Excel report with only that tag selected.

1 Like