Daniel, I noticed autopsy fails out of the box with: Use of uninitialized value in string at /usr/bin/autopsy line 731. ERROR: Sleuth Kit (or local) file executable missing This is caused by a missing $FILE_EXE variable in /etc/autopsy.pl I am assuming this is supposed to contain the location of the file utility (or perhaps a modified file utility, although I didn't see one installed with sleuthkit/autopsy). adding "$FILE_EXE = '/usr/bin/file';" seems to work, but I've never used this package, so...
Fixed in CVS.