Sleuthkit¶

Category: Files and apps / Disk

Source: GitHub Release

Profiles: Full, Basic

File Extensions: .dd, .raw, .E01, .img, .vmdk

Tags: disk-forensics, filesystem, forensics

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.