Greg DiCristofaro 552668ca8b fixes
2021-09-27 18:32:33 -04:00
..
2021-09-27 18:32:33 -04:00
2021-04-23 10:57:50 -04:00

Overview

The installation process requires some prerequisites, Sleuthkit, and installing Autopsy itself. If using Windows, there is a pre-built installer bundling all dependencies that can be found in the Autopsy downloads section or in the Releases section on GitHub.

Installing Prerequisites

On OS X

A script to install these dependencies that can be found here.

  • Using Homebrew, install dependencies that have formulas:
    brew install ant automake libtool afflib libewf libpq testdisk imagemagick gstreamer gst-plugins-base gst-plugins-good imagemagick
    
  • You will also need to install Java 8 and JavaFX to run autopsy. We recommend Liberica OpenJDK which can be installed by tapping this third-party dependency:
    brew tap bell-sw/liberica
    
  • Then, you can install this dependency using brew:
    brew install --cask liberica-jdk8-full
    
  • You will need to set this Java to JAVA_HOME with something like:
    export JAVA_HOME=$(/usr/libexec/java_home -v 1.8) && \
    echo 'export JAVA_HOME=$(/usr/libexec/java_home -v 1.8)' | tee ~/.bash_profile
    
  • and properly link it to the OpenJDK location:
    OPEN_JDK_LN=/usr/local/opt/openjdk && \
    rm $ && \
    ln -s $JAVA_HOME $OPEN_JDK_LN
    
  • Finally, you can verify this version of Java with:
    echo "/usr/local/opt/openjdk now is:"
    ls -l /usr/local/opt/openjdk 
    echo "Java Version is:"
    java -version
    

On Linux (Ubuntu / Debian-based)

A script to install these dependencies that can be found here.

  • You will need to include some repositories in order to install this software. One way to do that is to uncomment lines in your sources.list:
    sudo sed -Ei 's/^# deb-src /deb-src /' /etc/apt/sources.list
    
  • Use apt to install dependencies:
    sudo apt -y install \
    libpq-dev \
    ant build-essential autoconf libtool git-core automake git zip wget \
    libheif-dev libde265-dev libmagickcore-dev imagemagick \
    testdisk libafflib-dev libewf-dev libvhdi-dev libvmdk-dev \
    libgstreamer1.0-0 gstreamer1.0-plugins-base gstreamer1.0-plugins-good gstreamer1.0-plugins-bad \
    gstreamer1.0-plugins-ugly gstreamer1.0-libav gstreamer1.0-doc gstreamer1.0-tools gstreamer1.0-x \
    gstreamer1.0-alsa gstreamer1.0-gl gstreamer1.0-gtk3 gstreamer1.0-qt5 gstreamer1.0-pulseaudio
    
  • You will also need to install Java 8 and JavaFX to run autopsy. We recommend Liberica OpenJDK which can be installed as follows:
    pushd /usr/src/ && \
    wget -q -O - https://download.bell-sw.com/pki/GPG-KEY-bellsoft | sudo apt-key add - && \
    echo "deb [arch=amd64] https://apt.bell-sw.com/ stable main" | sudo tee /etc/apt/sources.list.d/bellsoft.list && \
    sudo apt update && \
    sudo apt -y install bellsoft-java8-full && \
    popd
    
  • Then, you will need to set this Java to JAVA_HOME with something like:e
    export JAVA_HOME=/usr/lib/jvm/bellsoft-java8-full-amd64 && \
    echo 'export JAVA_HOME=/usr/lib/jvm/bellsoft-java8-full-amd64' | tee ~/.profile
    
  • Finally, you can verify this version of Java with:
    echo "Java Version is:"
    java -version
    

Install Sleuthkit

Install Sleuthkit from Source

A script to install these dependencies on Unix-like systems (i.e. OS X, Linux) that can be found here.

  • Please ensure you have all the prerequisites installed on your system (see the directions here).
  • If you don't have a copy of the repository on your local machine, clone it (this requires git):
    git clone https://github.com/sleuthkit/sleuthkit.git
    
  • If you want to build source from a particular branch or tag (i.e. develop or release-4.11.0), check out that branch:
    git checkout <YOUR BRANCH HERE> && git pull
    
  • Then, with the sleuthkit repo as your working directory, you can build with:
    ./bootstrap && ./configure && make
    
  • If the output from make looks good, then install:
    sudo make install
    

Install Autopsy

Create Autopsy Zip File from Source

In most instances, you should download the Autopsy Zip file from the Autopsy downloads section or in the Releases section on GitHub, but if you have a special use case you can do the following. Please make sure you have the prerequisites installed and have installed Sleuthkit.

  • If you haven't already, clone the repo:
    git clone https://github.com/sleuthkit/autopsy.git
    
  • With the autopsy repo as your working directory, you can run:
    ant clean && ant build && ant build-zip
    
  • The zip file should be created within the dist folder of the Autopsy repository and will have the version in the name (i.e. autopsy-4.18.0.zip).

Install Autopsy from Zip File

These instructions are for Unix-like systems like OS X and Linux. If you are on Windows, there is an installer that can be downloaded from the Autopsy downloads section or in the Releases section on GitHub. Please make sure you have the prerequisites installed and have installed Sleuthkit. A script to perform these steps can be found here.

  • Download the zip file from the Autopsy downloads section or in the Releases section on GitHub. You can also create a zip file from source using these directions.
  • If you downloaded the zip file, you can verify the zip file with the Sleuthkit key and the related .asc file found in the Releases section on GitHub. For instance, you would use autopsy-4.18.0.zip.asc with autopsy-4.18.0.zip. Here is an example where $ASC_FILE is the path to the .asc file and $AUTOPSY_ZIP_PATH is the path to the autopsy zip file:
    mkdir -p ${VERIFY_DIR} && \
    pushd ${VERIFY_DIR} && \
    wget https://sleuthkit.org/carrier.asc && \
    gpg --homedir "${VERIFY_DIR}" --import https://sleuthkit.org/carrier.asc && \
    gpg --homedir "${VERIFY_DIR}" --keyring "${VERIFY_DIR}/pubring.kbx" ${ASC_FILE} ${AUTOPSY_ZIP_PATH} && \
    rm -r ${VERIFY_DIR}
    popd
    
  • Extract the zip file to a location where you would like to have Autopsy installed.
  • With the extracted folder as the working directory, you can run the following commands to perform setup:
    chown -R $(whoami) . && \
    chmod u+x ./unix_setup.sh && \
    ./unix_setup.sh
    
  • At this point, you should be able to run Autopsy with the command ./autopsy from within the bin directory of the extracted folder.

TODO

  • align scripts with README
  • open cv issues on linux?
  • stalling when not running autopsy as sudo?
  • troubleshooting from Running_Linux_OSX.txt
  • setup development environment guide
  • do we need all these dependencies and are these all of the dependencies we need?
  • other installation steps