Open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks
The Sleuth KitÂ® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data.
The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Binaries are in /opt/Sleuthkit/bin
built with AFFLIB (and S3 support) and LibEWF
Coreutils (Latest release)
e2fsprog (Latest release)
findutils (Latest release)
ddrescue (Latest release)
photorec (Latest release)