Autopsy is a computer program that performs forensic searches of computer storage volumes. It is maintained by Basis Technology Corp. and community programmers. Basis Technology Corp. sells support services and training for the program.
Autopsy hashes the files in the volume it is analyzing, unpacking compressed archives including ZIP and JAR. It extracts image metadata stored as Exif values and stores keywords in an index. Further, Autopsy parses and catalogues some email and contact file formats, flags phone numbers, email addresses, and files, as well as SQLite or PostgreSQL database stores occurrences of names, domains, phone numbers, and Windows registry files indicating past connections to USB devices. Multiple file systems can be catalogued in the same repository.
Autopsy can perform rule-based searches of indexed files, including searches for recent activity. It can generate reports in HTML or PDF format containing the results of searches. A partial image of files returned by a search can be saved in VHD format.
From the Wikipedia article “Autopsy (software)”, CC BY-SA 4.0
What is Autopsy?
Autopsy by The Sleuth Kit is open-source Windows software in the languages & sdks category. It is written in Java.
Installation and requirements
The publisher provides MSI installers for 64-bit Windows. Installation asks for administrator rights. A silent install is possible with the installer’s documented switches. An MSI package is available for deployment with Group Policy, Intune or Configuration Manager.
Updates and version history
The current version is 4.23.1, released on May 7, 2026. The version history goes back to March 30, 2021: 12 releases, all linked to the official files. That is about 2.4 releases a year.
Popularity and file types
The Chocolatey package has been downloaded 38,166 times. The source code on GitHub (sleuthkit/autopsy) has 3,402 stars. Wikipedia has an article about it in 3 of our languages. Similar programs include Go Programming Language, LLVM and Deno.
Project description on GitHub: “Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card. ”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- MSI package for managed deployment
- Documented silent install
Cons
- No native ARM64 build
- Installation needs administrator rights
In short: Autopsy is an open-source languages & sdk tool for 64-bit PCs. Administrators can deploy it unattended.
Is Autopsy safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
F0F368E10CF615A805C85248356673A00C88A5E19C3B632859A1C98569AE03B6· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the sleuthkit/autopsy repository on GitHub by the Open Source Security Foundation, last run on October 19, 2026.
- No dangerous workflows10
- Security policy10
- Static code analysis10
- Licence declared9
- Signed releases8
- Actively maintained0
- Code review0
- Restricted token permissions0
- OpenSSF Best Practices badge0
- Fuzzing0
- No binaries in the repository0
- Pinned dependencies0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 12 versions ›12 versions over 5 years · about 2.4 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 4.23.1Latest | May 7, 2026 | — | 64-bit MSI |
| 4.22.1 | April 15, 2025 | — | 64-bit MSI |
| 4.22.0 | March 11, 2025 | — | 64-bit MSI |
| 4.21.0 | August 29, 2023 | — | 64-bit MSI |
| 4.20.0 | April 11, 2023 | — | 64-bit MSI |
| 4.19.2 | December 16, 2021 | — | 32-bit MSI64-bit MSI |
| 4.19.1 | August 11, 2021 | — | 32-bit MSI64-bit MSI |
| 4.19.0 | August 6, 2021 | — | 64-bit MSI32-bit MSI |
Install from the command line
Silent install ›winget install --id SleuthKit.Autopsy -echoco install autopsy -ymsiexec /i autopsy-4.23.1-64bit.msi /qn /norestartmsiexec /x {FA56FDAD-66A0-40DB-A0E9-3F8FCBFF40B6} /qn /norestartRelated guide: How to use winget: install and update apps
Information
- Publisher
- The Sleuth Kit
- Category
- Languages & SDKs
- Licence
- Apache License 2.0
- Price
- Free
- Source code
- github.com/sleuthkit/autopsy
- Written in
- Java
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- MSI
- Version
- 4.23.1
- Released
- May 7, 2026
- Added to the catalogue
- March 30, 2021
- Versions listed
- 12
- Updates / year
- 2.4
- Chocolatey downloads
- 38,166
- Downloads on ExeAtlas
- 1
- GitHub stars
- 3,402
- GitHub forks
- 707
- Website
- autopsy.com
- winget ID
- SleuthKit.Autopsy
- Chocolatey package
- autopsy
- MSI product code
- {FA56FDAD-66A0-40DB-A0E9-3F8FCBFF40B6}
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to Autopsy
See all ›-
Go Programming Language1.27.0An open source programming language that makes it simple to build secure, scalable systems.Open source2.1M ↓ -
Open source2.8M ↓ -
Open source249.7K ↓ -
Open source3.7M ↓ -
Yarn1.22.22Yarn is a package manager that doubles down as project manager. Whether you work on one-shot projects or large monorepos, as a hobbyist or an enterprise user, we've got you covered.Open source1.9M ↓ -
Ccache4.14.1Ccache is a compiler cache. It speeds up recompilation by caching previous compilations and detecting when the same compilation is being done again.Open source2.2M ↓ -
Open source263.6K ↓ -
Open source12.5K ↓
Frequently asked questions
Is Autopsy free?
Yes. Autopsy is open-source software under the Apache License 2.0 licence.
Is Autopsy safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install Autopsy with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Can Autopsy be installed silently?
Yes. The silent install page lists the exact command for each installer, including msiexec for the MSI package.
Does Autopsy run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Where can I download an older version of Autopsy?
The versions page lists all 12 versions with links to their official installer files, back to March 30, 2021.
What are alternatives to Autopsy?
Go Programming Language, LLVM, Deno, CMake and Yarn. The alternatives page compares them.
