autopsy
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: References the official website for the Autopsy forensics platform (autopsy.com) for tool installation and documentation.- [COMMAND_EXECUTION]: Guides the user through the use of standard forensic command-line utilities such as the Sleuth Kit suite (mmls, fls, icat), binwalk, steghide, and sqlite3.- [PRIVILEGE_ESCALATION]: Includes instructions for installing packages via
aptand mounting specialized forensic file systems (VSS) usingsudo, which are routine administrative tasks in a forensic environment.- [DYNAMIC_EXECUTION]: Contains embedded Python scripts designed to parse local forensic artifacts like Windows registry hives and email mbox containers. These scripts are intended for local data processing and do not involve remote code execution.- [DATA_EXFILTRATION]: While the skill facilitates the discovery of sensitive information (e.g., credentials, browser history) within disk images, this is the explicit purpose of the forensic tool. No evidence was found of exfiltrating this discovered data to external servers.
Audit Metadata