Disk image analysis tool Autopsy
Autopsy disk mirroring analysis tool
Autopsy is a disk image analysis tool preinstalled with Kali Linux. This tool can analyze disk mirrored volumes and file systems, and supports Unix and Windows systems. Autopsy is a command-line tool but provides a browser-based graphical interface. With this tool, users can easily browse directories and files in the image, even deleted files. At the same time, the tool provides powerful analysis functions, allowing users to directly analyze disk blocks, keyword search, file classification filtering. For digital forensics, the tool provides image integrity verification, file MD5 comparison, file operation schedule, and report generation capabilities.
