Autopsy

The Sleuth Kit's graphical front end for forensic examinations: ingesting a disk image, recovering files, building timelines, keyword search and organizing findings as a case. Interviewers ask because it is the open-source baseline for a documented, repeatable investigation.