Autopsy Plugins

A small collection of the author's own Autopsy Python plugins. Each is distributed as a ZIP with a SHA-256 for integrity. Drop the Python module into Autopsy's python_module folder.

Checks URLs against URLhaus. Version 1.11 avoids accumulation when run multiple times and simplifies copy-paste to a text file.

Similar to URLcheck, but uses your own Pi-hole as the reference to flag sites worth digging into. Version 1.0 — still under development and test.

An experimental plugin (v1.0 / detection logic v4.2) for identifying malware behaviours using a generic approach.