The Sleuth Kit (TSK) is a library and collection of command line tools that allow you to investigate volume and file system data.