Vladimir,
@Da wrote:
Thank you. Interesting functionality, it is possible to integrate this function with Maltego?
Autopsy will export a number of its reports into external formats, for example an XLS structured spreadsheet. There's no reason that you can't export it into a Maltego case file, CE, or any of the other commercial products. I can't think of a scenario that would make that particularly interesting. There are two reasons. First is the format of the data, and second is the licensing models.
(1) Although Maltego and Autopsy are both billed as "forensic tools", they appear to approach them in slightly different ways. Maltego seems to like structured data much better, and as such its forensic capacity seems more like a litigation support/discovery data translation/visualization tool. Autopsy on the other hand is a graphical interface for a collection of tools purpose built to extract activity and content information from digital artifacts of evidence that may be structured or unstructured. You can import Autopsy reports into Maltego but I can't think of a scenario where that's going to provide you useful information.
(2) Maltego has a licensing model that limits the records processed/visualized for community versions, requiring you to purchase a commercial version for large data sets. On the other hand Autopsy naively supports linking into an external database and the ability to process and visualize records and support multiple users is only limited by the database you feed it with. You could easily exceed the maximum number of records in community versions of Maltego's products with Autopsy, for the same low price of free.
If there is some module, feature, or report you think should be instituted in Autopsy, they take community suggestions in the form of "trouble tickets". They also publish their plugin system so the community can write one themselves and list in on the main Autopsy web site.
Sincerely,
Eric B.
