Re: [sleuthkit-users] What's Missing Most From Autopsy?

[Sean M. <mcl...@in...>]

> I think that it would be very useful for Autopsy to run 
> on another platform—either Linux or Mac, but probably Linux. 
> That would allow it to be used on bootable CDs without 
> requiring a full Windows environment. 

I would agree with this whole heartedly. I practical never used Windows as my primary analysis system (and when I do it is because certain tools ONLY run in Windows but those tools are becoming much less relevant to my work). 

Most of the triage and early processing is OS X or, more commonly, Linux, where I am relatively certain that the image that I am analyzing is not going to corrupt my analysis system.

Sean McLinden


-- 
NOTICE of CONFIDENTIALITY and DISCLAIMER

This transmission, including attachments, is confidential. It may also be privileged or otherwise protected by work product immunity or other legal rules. If you have received it by mistake, please let us know by e-mail to the sender, only, and delete it from your system; you may not copy this message or disclose its contents to anyone.

Unless expressly noted, above, this communication does not reflect an intention by the sender to conduct a transaction or make any agreement by electronic means. Nothing contained in this transmission shall constitute a contract or electronic signature under the ESIGN, any version of the UETA, or any other statute governing electronic transactions. 

If this transmission contains advice, the advice is based on instructions in relation to, and is provided to the addressee in connection with, the matter mentioned above. Responsibility is not accepted for reliance upon it by any other person or for any other purpose.