[sleuthkit-users] Just put Autopsy through its paces - couple snags

[Joseph H. <hyl...@is...>]

Hello fellow sleuths!

I just finished my final report for my last digital forensics class.  I
am slated to graduate in June from Edmonds Community College with my
degree in Cyber Defence and Digital Forensics.

I mainly used Autopsy, RegRipper, and Log2Timeline for my final
project.  It worked well except for these issues:

1.  I could not display image thumbnails.  At all.  Every time I would
try, Autopsy would throw the following error:

java.lang.NoClassDefFoundError: Could not initialize class
org.sleuthkit.autopsy.coreutils.ImageUtils
	at
org.sleuthkit.autopsy.corecomponents.ThumbnailViewChildren.isSupported(
ThumbnailViewChildren.java:224)

[rest of output cut]

2.  The same thing would happen when I would try to generate a report
when I had bookmarked images.

3.  I had trouble extracting certain files, most notably HTML documents
and mail messages.  When I would try, I would get the familiar "Save
File" window, but the "file type" would just change to HTML or whatever
the file type was and the file wouldn't save.  I could extract other
files, e.g., registry files, with no problem.

Because of these issues, I had to use the ancient version of FTK that
we were provided with to get those files.

I checked and libboost is installed.  

I am running Autopsy version 4.9.1 on Caine 10.

Any help would be appreciated.


-- 
"Far better it is to dare mighty things, to win glorious triumphs, even
though checkered by failure, than to take rank with those poor spirits
who neither enjoy much nor suffer much, because they live in the gray
twilight that knows neither victory nor defeat."

-- Theodore Roosevelt, "The Strenuous Life."