Gui is not showing option for new cases etc

[Mackousko12]

Hi,

Followed the instructions listed in "Running_linux_OSX.txt" file but when I run autopsy I see GUI but no options to create case/open case etc. Could you please help as this could have brought up before by someone else as well?

Thanks

[jonas-koeritz]

Check if the "Autopsy Core" Plugin is enabled, the plugin configuration panel should be accessible even if the Core plugin is missing. The Core plugin has been initially disabled on my Arch Linux installation as well.

[Mackousko12]

Thanks Jonas. I've tried activating the core plugin and I'm getting the following error:
Activation failed: StandardModule:org.sleuthkit.autopsy.core jarFile: /Users//Downloads/autopsy-4.14.0/autopsy/modules/org-sleuthkit-autopsy-core.jar: java.lang.UnsupportedClassVersionError: org/sleuthkit/datamodel/SleuthkitJNI has been compiled by a more recent version of the Java Runtime (class file version 57.0), this version of the Java Runtime only recognizes class file versions up to 52.0"

I've tried reinstalling sleuthkit (brew reinstall sleuthkit) and reconfiguring (brew reinstall --build-from-source sleuthkit) (sh unix_setup.sh) but no luck.

Any thoughts?

Thanks.

[jonas-koeritz]

Looks like your Java version is out of date.

[Mackousko12]

I've java 8 update 251.

[jonas-koeritz]

Which Java version is Autopsy running under? There should be the running version in the About window.

[sharad1126]

@Mackousko12 I am getting the same error. The problem here I think is that the tool wants a java version <=52 and we are using the latest one.

org/sleuthkit/datamodel/SleuthkitJNI has been compiled by a more recent version of the Java Runtime (class file version 57.0), this version of the Java Runtime only recognizes class file versions up to 52.0"

If you know how to change that version to <=52, please let me know as well and then we have to run the

sh unix_setup.sh 

which should compile again with the version that is suitable.

[sharad1126]

I am using:

$echo $JAVA_HOME
/Library/Java/JavaVirtualMachines/liberica-jdk-8-full.jdk/Contents/Home

$java -version               
openjdk version "1.8.0_252"
OpenJDK Runtime Environment (build 1.8.0_252-b09)
OpenJDK 64-Bit Server VM (build 25.252-b09, mixed mode)

[sharad1126]

The sh unix_setup.sh script ran for me without issues though:

 sh unix_setup.sh 
---------------------------------------------
Checking prerequisites and preparing Autopsy:
---------------------------------------------
-n Checking for PhotoRec...
found in /usr/local/bin
-n Checking for Java...
found in /Library/Java/JavaVirtualMachines/liberica-jdk-8-full.jdk/Contents/Home
-n Checking for Sleuth Kit Java bindings...
found in /usr/local/share/java
-n Copying sleuthkit-4.8.0.jar into the Autopsy directory...
done

Autopsy is now configured. You can execute bin/autopsy to start it

[jonas-koeritz]

@Mackousko12 can you verify which Java version Autopsy is actually running under? I'm pretty sure I am on the latest Java as well. Not on macOS though.

[sharad1126]

@jonas-koeritz I am also getting the similar window like @Mackousko12 . Tried checking the logs and looks like all is good as per that.

System Info: 
  Product Version         = Autopsy 4.14.0
  Operating System        = Mac OS X version 10.15.3 running on x86_64
  Java; VM; Vendor        = 1.8.0_252; OpenJDK 64-Bit Server VM 25.252-b09; BellSoft
  Runtime                 = OpenJDK Runtime Environment 1.8.0_252-b09
  Java Home               = /Library/Java/JavaVirtualMachines/liberica-jdk-8-full.jdk/Contents/Home/jre

[Mackousko12]

@Mackousko12 can you verify which Java version Autopsy is actually running under? I'm pretty sure I am on the latest Java as well. Not on macOS though.

It's running under the following:-

Product Version: Autopsy 4.14.0
Java: 1.8.0_252; OpenJDK 64-Bit Server VM 25.252-b09
Runtime: OpenJDK Runtime Environment 1.8.0_252-b09
System: Mac OS X version 10.14.6 running on x86_64; UTF-8; en_GB (autopsy)

[theguy147]

Im having all the same isses on Archlinux (Manjaro) with:

Product Version: Autopsy 4.14.0
Java: 1.8.0_242; OpenJDK 64-Bit Server VM 25.242-b08
Runtime: OpenJDK Runtime Environment 1.8.0_242-b08
System: Linux version 5.6.5-3-MANJARO running on amd64; UTF-8; en_US (autopsy)

@jonas-koeritz what version of java are you running with then if you don't have any problems activating the autopsy core plugin?

[theguy147]

I just build sleuthkit (incl java bindings 4.9.0) and autopsy 4.15.0 from scratch (from the develop branches and using OpenJFX) and now everything works fine. At least for Arch linux users Ill try and push a PKGBUILD to the AUR to build autopsy (and sleuthkit) directly from git sources in the next days to solve this issue (hopefully) once and for all.

[slo-sleuth]

Delete your autopsy configuration folder and restart Autopsy. This problem happens when you initially start Autopsy with an improperly configured environment (i.e., you received a java error and continued without loading modules). If I recall correctly, in Linux the configuration directory is ~/.autopsy.