Forensic Analysis for Mobile Apps (FAMA) -- module for the Autopsy Forensic Browser

A forensic open-source parser module for Autopsy that allows extracting the messages, comments, posts, contacts, calendar entries and reactions from a Microsoft Teams IndexedDB LevelDB database.

Digital forensics on a complete OS data-image captured from an Apple iPhone. The collected evidence showed criminal conspiracy with intent to steal valuable artifacts from the National Gallery of Art.

Se trata de un análisis forense de un caso real, que por medio de una imagen, se obtiene una serie de datos que ayudan a una investigación.

EvtXHunt is an Autopsy plugin that is able to analyze Windows EVTX logs against a library of SIGMA rules.

Autopsy plugins meant to detect photo and video manipulations.

Converts proprietary Microsoft Outlook OST/PST files in Autopsy to EML or MBOX format.

ReversingLabs hash query plugin for Autopsy forensics platform. Requires ReversingLabs API credentials.

Scenario: Digital Forensics, completed a final report to present findings. Gathered evidence from an iPhone image file. Looking at WiFi and GPS info, photos and conversations, analyzed the evidence and created timestamps using autopsy.

Autopsy plugin that scans the Auto-Start Extensibility Points (ASEPs) and list out the potential persistences

A tool for linux devices to securely wipe their storage and make sensitive data unrecoverable.

Use Autopsy Tool in Dark Mode

Performed a forensic investigation on a digital evidence image file using Autopsy. Analyzed metadata, recovered deleted files, and documented findings.

Autopsy PDF Analyser

Exploring the unique field of digital forensics --a field dedicated to identifying, extracting, preserving, and reporting on information obtained from computer and network systems.

Memory Forensics & Malware Investigation using FTK Imager, Volatility & Autopsy

Automatic Github Workflows packager for autopsy

I conducted a digital forensics investigation using Autopsy and Wireshark to analyze a disk image and network traffic. The investigation recovered deleted files, reviewed emails and web activity, verified evidence integrity with hash values, and identified suspicious network connections, showing standard forensic analysis and reporting procedures.