Can Autopsy view the documents which are rights managed (IRM applied)
Hello,
This question is not relevant to the Online Training topic, so we will close it after this reply.
Autopsy can detect encrypted files through the “Encryption Detection” Ingest Module. Since IRM is just a form of encryption, it should be able to detect it.
Additionally, IRM may also fall into the category of an extension mismatch, depending on how IRM is implemented (if it retains the original file header information or not)