[How To] Autopsy 4: Exporting file metadata and Bodyfile creation
In this video we show how to export file metadata using Autopsy 4 on Windows. Filed metadata will be saved in two formats, a TSV 'text' file, or a body file. Both file types include information like file name and location, file time stamps and other investigation-relevant information. This information can also be used to build user activity time lines.
Bodyfile details can be found here: https://wiki.sleuthkit.org/index.php?...
Autopsy digital forensic tool: https://www.sleuthkit.org/autopsy/
LibreOffice: https://www.libreoffice.org/
🚀 Full Digital Forensic Courses → https://learn.dfir.science
010001000100011001010011011000110110100101100101011011100110001101100101
Get more Digital Forensic Science
👍 Subscribe → https://bit.ly/2Ij9Ojc
❤️ YT Member → https://bit.ly/DFIRSciMember
❤️ Patreon → / dfirscience
🕸️ Blog → https://DFIR.Science
🤖 Code → https://github.com/DFIRScience
🐦 Follow → / dfirscience
📰 DFIR Newsletter → https://bit.ly/DFIRNews
010100110111010101100010011100110110001101110010011010010110001001100101
Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Please link back to the original video. If you want to use this video for commercial purposes, please contact us first. We would love to see what you are doing.