sleuthkit / autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
http://www.sleuthkit.org/autopsy/
2.43k stars 595 forks source link

4.20.0 - M1 mac using current instructions, results in PhotoRec not found #7727

Open enewhuis opened 1 year ago

enewhuis commented 1 year ago

./install_application.sh -z ~/Downloads/autopsy-4.20.0.zip -i ~/autospy -j $(/usr/libexec/java_home -v 1.8)

... 
Setting up application at /Users/e64/autospy/autopsy-4.20.0/...
~/autospy/autopsy-4.20.0 ~/Downloads/autopsy-4.20.0/linux_macos_install_scripts
---------------------------------------------
Checking prerequisites and preparing autopsy:
---------------------------------------------
~/autospy/autopsy-4.20.0 ~/autospy/autopsy-4.20.0
Checking for PhotoRec...ERROR: PhotoRec not found, please install the testdisk package.
Unable to setup permissions for application binaries
% brew info testdisk
==> testdisk: stable 7.1 (bottled)
Powerful free data recovery utility
https://www.cgsecurity.org/wiki/TestDisk
/opt/homebrew/Cellar/testdisk/7.1 (22 files, 1.7MB) *
  Poured from bottle on 2023-01-27 at 08:45:19
From: https://github.com/Homebrew/homebrew-core/blob/HEAD/Formula/testdisk.rb
License: GPL-2.0
enewhuis commented 1 year ago
% which photorec
/opt/homebrew/bin/photorec
enewhuis commented 1 year ago
# Verify PhotoRec was installed
echo -n "Checking for PhotoRec..."
photorec_filepath=/usr/bin/photorec
photorec_osx_filepath=/usr/local/bin/photorec
if [ -f "$photorec_filepath" ]; then
    echo "found in $(dirname $photorec_filepath)"
elif [ -f "$photorec_osx_filepath" ]; then
    echo "found in $(dirname $photorec_osx_filepath)"
else
    echo "ERROR: PhotoRec not found, please install the testdisk package."
    exit 1
fi
enewhuis commented 1 year ago

Possible quick fix in unix_setup.sh:

photorec_osx_filepath=$(which photorec)
markmckinnon commented 1 year ago

Were you able to get this working with your Fix?

enewhuis commented 1 year ago

Yes but was unable to get it running properly due to the core plug-in not loading. I've been using Wineskin for now.

lizfischer commented 1 year ago

Possible quick fix in unix_setup.sh:

photorec_osx_filepath=$(which photorec)

This fix didn't work for me. Did Wineskin work well?