Building Forensics Tools That Last | Brian Carrier (Autopsy, Sleuth Kit)

About this episode

Brian Carrier discusses the evolution of digital forensics tools and the balance between open source and commercial software.

Josh Mason and Wade Wells sit down with Brian Carrier, the creator of Sleuth Kit and Autopsy, two of the most widely used digital forensics tools in the world. They dig into how Brian got his start in the early days of computer forensics, how open source shaped his career, and what he’s building now with Cyber Triage. From stories about government funding and tool rewrites to the evolving balance between open source and commercial software, this episode is packed with insight for blue teamers, DFIR pros, and anyone who cares about investigation tooling that actually works. Watch to hear: The 25-year evolution of Sleuth Kit & Autopsy How Cyber Triage simplifies investigations for SOCs The tradeoffs between open source and commercial tools What Brian sees next in AI-driven forensics ⏱️ Timestamps: 00:00 Introduction and Guest Introduction 00:15 Brian Carrier's Journey with Sleuth Kit and Autopsy 02:06 Evolution and Funding of Autopsy 06:52 Open Source vs. Commercial Software 10:16 Future Roadmap and Innovations 14:16 Autopsy and Cyber Triage for Blue Teamers 16:24 Challenges in EDR and SOC Analysis 16:41 Investigative Process and Clues 17:18 Handling Noisy Data in EDR 17:49…

People in this episode

Hosts: Josh Mason, Wade Wells

Guest: Brian Carrier

Topics covered

• digital forensics
• open source software
• commercial tools
• investigation tooling
• AI-driven forensics

Keywords

• forensics tools
• Sleuth Kit
• Autopsy
• Cyber Triage
• open source
• commercial software
• blue teamers
• DFIR
• investigations

Mentioned in this episode

Organizations: Sleuth Kit, Autopsy, Cyber Triage

More episodes of Simply Defensive

• S6:E3 - Tom Dejong - Inside the BHIS SOC: Triage, Curiosity, and Career Growth · May 4, 2026 · 31 min
• S6E2: John Hammond on Security Research, Storytelling, Deception, and Getting Hired in Cybersecurity · March 17, 2026 · 39 min
• From Blue Team Challenges to AI Innovations: A Conversation with Jason Haddix · February 24, 2026 · 32 min
• From Pre-Law to FLARE: How Josh Stroschein Became Google's Malware Analyst · December 1, 2025 · 40 min
• Building Zero Trust Tools: Inside ThreatLocker with Product Manager Yuriy Tsibere · November 24, 2025 · 36 min
• Cyber Insurance Explained: What Blue Teams Need to Know Before an Incident · November 17, 2025 · 33 min