About The Sleuth Kit
A C library and collection of open source command line tools for the forensic analysis of file systems like NTFS, FAT, EXT2FS, and FFS. It allows investigation of disk images and can be incorporated into larger digital forensics tools.
The Sleuth Kit (TSK) is an open-source digital forensics toolkit from Sleuth Kit Labs. It consists of a C library and a collection of command-line tools designed for in-depth analysis of disk images and file systems. TSK is a foundational engine that powers many other forensic tools, including the popular graphical interface Autopsy. It is aimed at digital investigators, law enforcement, and incident responders who need to perform detailed, low-level analysis of file systems such as NTFS, FAT, and ExtFS. As an open-source project, it is free to download and use. Support is available through community forums, with commercial training and support offered separately by Sleuth Kit Labs.
Pros & Cons
- Completely open source and free to use for forensic analysis.
- Provides a foundational C library for building custom forensic tools.
- Supports a variety of common file systems for broad compatibility.
- Serves as the underlying engine for the widely-used Autopsy GUI forensic tool.
- The command-line interface can be challenging for users without a technical background.
- Lacks a native graphical user interface; requires a separate tool like Autopsy for visual analysis.
- Official support is primarily community-based, with paid options for dedicated support.
Features
Key features
Analyzes volume and file system data from disk images.
Provides a collection of utilities for direct investigation of digital evidence.
Core functionality can be incorporated into larger custom digital forensics applications.
Natively analyzes NTFS, FAT, EXT2FS, and FFS file systems.
Freely available for use and integration into other forensic tools.
Pricing
Countries & Languages
Interface languages
No reviews yet
Be the first to drop a review
Alternatives to The Sleuth Kit
GeoShield
GeoShield is a policing software from GeoShield that provides solutions for command staff and crime…
CRIMEWATCH
CRIMEWATCH is a public safety platform that connects law enforcement agencies with their communities.
Rave 911 Suite
Rave 911 Suite is a public safety software from Rave Mobile Safety that provides capable…
Recoveryfix PST Password Recovery
Recoveryfix PST Password Recovery is an exceptionally reliable, lightweight tool built to handle a specific…
Spot something wrong or outdated?
Suggest a correction — a reviewer verifies every change.
About The Sleuth Kit
A C library and collection of open source command line tools for the forensic analysis of file systems like NTFS, FAT, EXT2FS, and FFS. It allows investigation of disk images and can be incorporated into larger digital forensics tools.
The Sleuth Kit Details
The Sleuth Kit's In-App Market Place
Does The Sleuth Kit have an in-app market place?
Yes
How many Mini-Apps in the marketplace?
0
Mini Apps
Pricing Options
Accepted Payment Currencies
Pros & Cons
- Completely open source and free to use for forensic analysis.
- Provides a foundational C library for building custom forensic tools.
- Supports a variety of common file systems for broad compatibility.
- Serves as the underlying engine for the widely-used Autopsy GUI forensic tool.
- The command-line interface can be challenging for users without a technical background.
- Lacks a native graphical user interface; requires a separate tool like Autopsy for visual analysis.
- Official support is primarily community-based, with paid options for dedicated support.
The Sleuth Kit's Support Options
Documentation
https://www.sleuthkit.org/sleuthkit/docs.phpCommunity Forums
http://forum.sleuthkit.org/The Sleuth Kit's Alternatives
GeoShield
GeoShield is a policing software from GeoShield that provides solutions for command staff and crime…
CRIMEWATCH
CRIMEWATCH is a public safety platform that connects law enforcement agencies with their communities.
Rave 911 Suite
Rave 911 Suite is a public safety software from Rave Mobile Safety that provides capable…
Recoveryfix PST Password Recovery
Recoveryfix PST Password Recovery is an exceptionally reliable, lightweight tool built to handle a specific…
