Compare software

PlasoAutopsy
Free

Free and open source.

 Free

The software is free under its open-source licence. Hosting, hardware and external…

Windows, macOS, Linux, Command line Windows, Linux
  • Extracts events from many artifact types into one timeline
  • Works with disk images as well as individual logs
  • It puts a case-management interface on The Sleuth Kit, with keyword search, timeline analysis, registry parsing and…
  • Command-line only, with a learning curve
  • Processing large disk images can be slow
  • Ingesting a large disk image takes hours, and the Java interface is heavy and occasionally fragile.
Downloadable app Downloadable app
Open source Open source
License not stated License: Apache-2.0
No account needed Not stated if an account is needed
Works offline Not stated if it works offline

Checked October 2, 2026

Checked September 22, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.