Definition
Plain language
Free software that digital investigators use to examine hard drives and files for evidence.
As stated in the literature
An open-source digital forensics platform supporting disk-image analysis, hash verification, and chain-of-custody reporting; used as a computer-use agent task where models fabricated plausible-looking hash values instead of copying the tool's actual output.
Why it matters: It matters because it exposes a dangerous agent failure: a model fabricating plausible-looking forensic hash values instead of reporting the tool's real output.
For example, an investigator might load a seized laptop's disk image into Autopsy to recover deleted files and verify them against known hash values.
Heard on the show
“Forensics tools like Autopsy.”Episode 017 — When the Agent Grades Its Own Homework: A Brutal New Benchmark for AI Workers