Re: [sleuthkit-users] Autopsy...

[Frederick H. <fre...@gm...>]

Hello Mr. Freemyer,

Thank you for the quick response.  Understood.

I've been a developer most/all my career and I've been making the
transition to digital forensics.
This is one of the questions I've been wanting to get some clarity on.
Thank you so much for
the insight.

-Frederick

On Thu, Oct 16, 2014 at 9:51 AM, Greg Freemyer <gre...@gm...>
wrote:

> There is no such thing as a court approved tool.
>
> Testifying experts are approved.  Their choice of tools reflects on
> them, but even then the tool is the minor player.
>
> For instance many think a Ghost image is unacceptable, but in the
> hands of someone that knows how to use it and explain it, then Ghost
> Images can be used as a tool by a testifying expert.
>
> On the hand, an untrained person using FTK or EnCase doesn't suddenly
> become an expert just because they use a tool often used by testifying
> experts.
>
> Greg
>
> On Thu, Oct 16, 2014 at 9:26 AM, Frederick Haggerty
> <fre...@gm...> wrote:
> > Hello,
> >
> > I have been using Autopsy (windows version) for about a year or so and I
> > really enjoy it and I try to
> > stay up-to-date by subscribing to this mailing list.  I was hoping to
> attend
> > the Open Source Digital
> > Forsensics Conference in November but due my schedule I don't think I'll
> > make it but will look to take some Autopsy training in the near future.
> >
> > The question I want to ask the users is regarding using Autopsy on an
> actual
> > case.
> >
> > Is Autopsy a recommended/allowable tool to use on an actual court case
> (in
> > the eyes or the courts) if I am requested to help?
> >
> > If such a list exists can someone provide me point me in the direction of
> > court approved tools that could be used?
> >
> > Thanks in advance for all your help.
> >
> > -Frederick
> >
> >
> ------------------------------------------------------------------------------
> > Comprehensive Server Monitoring with Site24x7.
> > Monitor 10 servers for $9/Month.
> > Get alerted through email, SMS, voice calls or mobile push notifications.
> > Take corrective actions from your mobile device.
> > http://p.sf.net/sfu/Zoho
> > _______________________________________________
> > sleuthkit-users mailing list
> > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> > http://www.sleuthkit.org
> >
>