Assessing autopsy in digital forensics : Comprehensive functionality review and comparative study

The role of digital forensics [1] tools such as Autopsy has become increasingly critical in managing and analyzing forensic data. This paper presents a comprehensive evaluation of Autopsy, focusing on its functionalities, practical applications, and comparative analysis with other cybersecurity tools. The examination begins with an exploration of Autopsy’s core features, including case management, data recovery capabilities, ingest modules, and its handling of various digital artifacts such as images, videos, and web data. Detailed case studies, including high-profile investigations such as the BTK Killer case and the Boston Marathon bombing, illustrate how Autopsy is applied in real-world scenarios and its effectiveness in uncovering crucial evidence. A comparative analysis with other cyber tools is conducted to evaluate Autopsy’s performance and impact, identify limitations, and propose future enhancements. The objective of this paper is to provide a thorough understanding of Autopsy’s role in digital forensics and its effectiveness in diverse investigative contexts, offering valuable insights for forensic professionals and researchers.