Autopsy

GUI disk forensics over The Sleuth Kit — deleted files, browser artifacts, registry, keyword search, timeline.

Installation

# Windows: download MSI installer from autopsy.com (recommended)

# Linux (Kali)
sudo apt install autopsy    # CLI-only version (browser-based at localhost:9999)

# Linux GUI: requires Java + dependencies
# https://www.autopsy.com/download/

# Launch (Linux CLI version)
autopsy
# Opens: http://localhost:9999/autopsy in browser