autopsy

Graphical interface to Sleuth Kit investigation tools

https://www.sleuthkit.org/autopsy/index.php

/api/formula-linux/autopsy.json (JSON API)

Linux formula code on GitHub

Current versions:

stable 2.24

Depends on:

sleuthkit 4.8.0 Forensic toolkit
By default, the evidence locker is in:
    $(brew --prefix)/var/lib/autopsy
Fork me on GitHub