Building Forensics Tools That Last | Brian Carrier (Autopsy, Sleuth Kit)

Josh Mason and Wade Wells sit down with Brian Carrier, the creator of Sleuth Kit and Autopsy, two of the most widely used digital forensics tools in the world. They dig into how Brian got his start in the early days of computer forensics, how open source shaped his career, and what he’s building now with Cyber Triage.

From stories about government funding and tool rewrites to the evolving balance between open source and commercial software, this episode is packed with insight for blue teamers, DFIR pros, and anyone who cares about investigation tooling that actually works.

Watch to hear:

The 25-year evolution of Sleuth Kit & AutopsyHow Cyber Triage simplifies investigations for SOCsThe tradeoffs between open source and commercial toolsWhat Brian sees next in AI-driven forensics

⏱️ Timestamps:

00:00 Introduction and Guest Introduction

00:15 Brian Carrier's Journey with Sleuth Kit and Autopsy

02:06 Evolution and Funding of Autopsy

06:52 Open Source vs. Commercial Software

10:16 Future Roadmap and Innovations

14:16 Autopsy and Cyber Triage for Blue Teamers

16:24 Challenges in EDR and SOC Analysis