autopsy
Digital forensics platform for analyzing disk images and investigating filesystems. tldr-pages
On Windows
Windows
Launch the Autopsy graphical interface
autopsy64.exeCreate a new case and specify the base directory to store case files
autopsy64.exe --createCase --caseName case_name --caseBaseDir path\to\base_directoryAdd a data source to an existing case
autopsy64.exe --caseDir path\to\case_directory --addDataSource --dataSourcePath path\to\sourceGenerate a report for an existing case
autopsy64.exe --caseDir path\to\case_directory --generateReportsList all data sources in an existing case
autopsy64.exe --caseDir path\to\case_directory --listAllDataSources