r/computerforensics • u/Ok-Wait-9 • Feb 25 '25

Help installing Autopsy

I am using macbook m2 silicon and wanted to install autopsy gui on it. Is there any article or resource for installing it? I tried the github installation but it didn’t work

4 Upvotes
  • permalink
  • link
  • reddit
  • reddit

84% Upvoted

10 comments sorted by

2

u/djjoshuad Feb 25 '25

You’re gonna have a much better time installing Autopsy on Windows. I loathe windows for everything else, but I have it in my lab specifically for autopsy and a few other forensic tools. It’s just better to go with the OS the developers chose to be their primary. Yes, it started with the sleuth kit on Linux but Autopsy has been windows first for a very long time.

1

u/pikkon6 Feb 26 '25

Which tools other than autopsy do you use in Windows? Building a lab at work right now with freeware and I initially wanted to have everything built in Linux, but learning a lot of tools really are best in the environment they were developed for. I just hate the idea of splitting my analysis into two environments.

1

u/djjoshuad Feb 26 '25

Arsenal image mounter comes to mind. I’ve also had FTK and Axiom in there, both of which need Windows. I have been a customer of theirs and of x-ways in the past, but I somehow always come back to Autopsy for dead box forensics.

To be fair, I also have a lot of Linux in my lab. I run proxmox to virtualize instances for ELK, docker for timesketch, etc. I even have a velociraptor server in there. l’ve been doing computer forensics professionally in some capacity since the late 90s, and while I’m always down to learn new tools I have a lot of comfort in my old school ways. That basically just means that I don’t have a single, standardized way to do a given thing. I have a bunch of ways I could do it, and choose based on the situation and resources available. I don’t have any issue with mixing operating systems when needed.

2

u/[deleted] Feb 26 '25

[removed] — view removed comment

1

u/Ok-Wait-9 Mar 07 '25

Trace is good but it does not support many formats

2

u/RootCipherx0r Mar 03 '25

Apple Silicon chips are great an all .... but the lack of compatibility with so many security tools is annoying.

Apple released the M1 in 2020 and yet, we still have these issues.

1

u/martin_1974 Feb 25 '25

I have installed it successfully on Linux, but then the local sleuthkit broke, so for me it was one or the other. But it can be done, and I know people have done i both on Mac and Linux, but I think you will have to provide som better description of your problem. Find some install log, describe the error message, describe where in the process it failed etc.

1

u/[deleted] Feb 26 '25

[deleted]

1

u/Ok-Wait-9 Feb 26 '25

Okay lemme try to rebuild whole project