Autopsy installation

gistfile1.sh

#!/bin/bash

#Step 1: 

sudo apt-get install testdisk -y
sudo sed -Ei 's/^# deb-src /deb-src /' /etc/apt/sources.list
sudo apt-get update -y
sudo apt-get install build-essential autoconf libtool git-core -y
sudo apt-get build-dep imagemagick libmagickcore-dev libde265 libheif -y

cd /usr/src/ 

sudo git clone https://github.com/strukturag/libde265.git 
sudo git clone https://github.com/strukturag/libheif.git 

cd libde265/ 
sudo ./autogen.sh 
sudo ./configure 
sudo make 
sudo make install 

cd /usr/src/libheif/ 
sudo ./autogen.sh 
sudo ./configure 
sudo make 
sudo make install 

cd /usr/src/ 
sudo wget https://www.imagemagick.org/download/ImageMagick.tar.gz 
sudo tar xf ImageMagick.tar.gz 

cd ImageMagick-7*
sudo ./configure --with-heic=yes 
sudo make 
sudo make install 

sudo ldconfig  



wget -q -O - https://download.bell-sw.com/pki/GPG-KEY-bellsoft | sudo apt-key add -
echo "deb [arch=amd64] https://apt.bell-sw.com/ stable main" | sudo tee /etc/apt/sources.list.d/bellsoft.list
sudo apt-get update -y
sudo apt-get install bellsoft-java8-full -y

# Step 2 
sudo nano /etc/environment 
JAVA_HOME=/usr/lib/jvm/bellsoft-java8-full-amd64 
source /etc/environment

# Step 3 
reboot

# Step 4 
cd /home/$USER/Downloads
wget --no-check-certificate --content-disposition https://github.com/sleuthkit/sleuthkit/releases/download/sleuthkit-4.10.2/sleuthkit-java_4.10.2-1_amd64.deb
 sudo dpkg --force-all -i sleuthkit-java_4.10.2-1_amd64.deb
sudo dpkg -x sleuthkit-java_4.10.2-1_amd64.deb sleuthkit
sudo cp -r sleuthkit/usr/* /usr/

wget --no-check-certificate --content-disposition https://github.com/sleuthkit/autopsy/releases/download/autopsy-4.18.0/autopsy-4.18.0.zip
sudo apt-get install unzip -y
unzip autopsy-4.18.0.zip

cd autopsy-4.18.0
sh unix_setup.sh

cd bin/
./autopsy 

Kali Tools for forensics

sudo apt --fix-broken install -y

# Install binwalk 

sudo apt-get install  binwalk -y 

# Install hashdeep
sudo apt install hashdeep

# Install magicrescue
sudo apt-get install  magicrescue -y

# Install scalpel 
sudo apt-get install scalpel -y 

# Install Scrounge-NTFS
sudo apt-get install -y scrounge-ntfs -y

# Install Guymager
sudo apt-get install -y guymager

# Install  python-pdfminer
sudo apt install python-pdfminer

# Install imgcat 
sudo apt install snapd -y
sudo snap install imgcat

# Install Icat 
sudo apt-get install libimlib2-dev

Python tools for forensic

sudo apt install python3.8 
sudo pip install --upgrade pip
sudo pip install pdfid
sudo pip install pdfreader
sudo pip install peepdf 

Enable shell command Logging

add follwoing in .bashrc

set -o history
shopt -s histappend
export HISTCONTROL=
export HISTIGNORE=
export HISTFILE=~/.bash_history export HISTFILESIZE=-1
export HISTSIZE=-1
export HISTTIMEFORMAT="%F-%R "