Autopsy - TryHackMe Notes

Disk image analysis, file carving, timeline reconstruction, and log examination using Autopsy.

🖥️ Challenge / Machine Info

  • Platform: tryhackme
  • Name / Title: autopsy
  • Difficulty: Medium
  • Target OS / Environment: Forensics
  • Key Vulnerability Focus: Autopsy / Disk image forensics

Autopsy Notes

  • File Carving: Extracting deleted file footprints by scanning raw disk blocks.
  • Timeline Analysis: Rebuilding file creation, access, and modification events to map attack activities.