Home Projects Blog Wiki Support About Contact
  

The Sleuth Kit
     
File Systems
     
Plug-in Framework
     
Download
     
Documents
     
History
     
Licenses
  

Autopsy
  

Sleuth Kit Hadoop
  

mac-robber
  

Case Studies
  




Get The Sleuth Kit at SourceForge.net. Fast, secure and Free Open Source software downloads

Overview

The Sleuth Kit® (TSK) is a library and collection of command line tools that allow you to investigate disk images. The core functionality of TSK allows you to analyze volume and file system data. The plug-in framework allows you to incorporate additional modules to analyze file contents and build automated systems. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.