Debian 12: "Local drives were not detected. Auto-detection not supported on this OS or admin privileges required"

[superclarkk]

System Environment OS: Debian 12 (bookworm) Autopsy: autopsy-4.21.0 SleuthKit: sleuthkit-java 4.12.1 Java: update-java-alternatives -l | grep java-1.17: java-1.17.0-openjdk-amd64 1711 /usr/lib/jvm/java-1.17.0-openjdk-amd64

Problem Autopsy does not detect local disks, even using sudo.

[IrregularLogic]

I had similar issues though autopsy worked here using su rights.

autopsy has to be run as root user to access any external drive, at least that is how it (only) worked here on my debian sid system initially. This is a potential safety risc and normally no application should be run as root.

Instead:

• Install autofs from system package management (apt-get), no further config required. Reboot.
• Also check that your local user and su have group assigned to access external drives. If you are using KDE there is no GUI anymore to do that, so you need to check a command line tool or install webmin.
• also install later version of java environment. When autopsy latest version was released v17 was around. now v23 already is available. You can omit installing java 17 and instead use apt-get to install java 23. This leaves you to install the sleuthkit java package and autopsy itself, using above command to check for java path to java 23 and use that during autopsy installation.