ravyn13/agp-autopsy-plugin

AGP-Autopsy-Plugin

Dataset

It is inside results folder.

Installing

Open the Python module library folder using "Tools", "Python Plugins". Copy the module folder into there(which contains ForensicAF.py and SearchResults.xls) and Autopsy should identify and use it next time it loads modules.

Running the Module

Step 1: Select tools->Run Ingest Module

Step 2: Select Artifact Genome Project

Step 3: Select whether you want to run it for file artifacts, or Registry Artifacts. And you can also select Whether you want to export files, that is the resulted files will be exported into report folder. Also you can select the number of levels you can traverse ( for ex. /path/1/2/3/4/ , you can traverse 2 levels that is options it tries /path/1/2/3/4 and 1/2/3/4 and 2/3/4)

Step 4: After running, results should be available in html format

Step 5: Check inside the module folder in python plugins, for the report and results.