Re: [sleuthkit-users] Autopsy...

[Greg F. <gre...@gm...>]

There is no such thing as a court approved tool.

Testifying experts are approved.  Their choice of tools reflects on
them, but even then the tool is the minor player.

For instance many think a Ghost image is unacceptable, but in the
hands of someone that knows how to use it and explain it, then Ghost
Images can be used as a tool by a testifying expert.

On the hand, an untrained person using FTK or EnCase doesn't suddenly
become an expert just because they use a tool often used by testifying
experts.

Greg

On Thu, Oct 16, 2014 at 9:26 AM, Frederick Haggerty
<fre...@gm...> wrote:
> Hello,
>
> I have been using Autopsy (windows version) for about a year or so and I
> really enjoy it and I try to
> stay up-to-date by subscribing to this mailing list.  I was hoping to attend
> the Open Source Digital
> Forsensics Conference in November but due my schedule I don't think I'll
> make it but will look to take some Autopsy training in the near future.
>
> The question I want to ask the users is regarding using Autopsy on an actual
> case.
>
> Is Autopsy a recommended/allowable tool to use on an actual court case (in
> the eyes or the courts) if I am requested to help?
>
> If such a list exists can someone provide me point me in the direction of
> court approved tools that could be used?
>
> Thanks in advance for all your help.
>
> -Frederick
>
> ------------------------------------------------------------------------------
> Comprehensive Server Monitoring with Site24x7.
> Monitor 10 servers for $9/Month.
> Get alerted through email, SMS, voice calls or mobile push notifications.
> Take corrective actions from your mobile device.
> http://p.sf.net/sfu/Zoho
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>