The Sleuth Kit is a collection of open source file system forensics tools that allow one to view allocated and deleted data from NTFS, FAT, FFS, and EXT2FS images. The Autopsy Forensic Browser provides a graphical interface to The Sleuth Kit.
Release Date:
2009-02-03
Topics:
Licenses:
Ratings and Reviews
- Thumbs up: 5
- Thumbs down: 1
-
Thumbs up
This is "the" base tools all foresic analysts should be conversant with.
Project Feed
-
Tracker comment added
carrier commented on the Time zone on HFS+ volume creation date artifact -
Tracker comment added
carrier commented on the blks -A not working artifact -
Tracker comment added
carrier commented on the unable to read file's content for a file on NTFS system artifact -
Tracker artifact added
carrier created the Allow libewf/afflib location to be specified artifact -
Tracker comment added
oncer82 commented on the unable to read file's content for a file on NTFS system artifact -
Tracker comment added
jbmetz commented on the nt2unixtime truncates time artifact -
Tracker comment added
carrier commented on the Partition Table Sanity Checking artifact -
Tracker comment added
carrier commented on the Add sector size autodetect code artifact -
Tracker comment added
carrier commented on the unable to read file's content for a file on NTFS system artifact -
Tracker artifact added
oncer82 created the unable to read file\'s content for a file on NTFS system artifact
Rate and Review
Related Projects
-
-
Revealer Toolkit
the Revealer Toolkit is a framework and simple scripts for computer forensics. It uses Brian Carrier's The Sleuth Kit as the backbone, as well as other free tools.Additional information: http://code.google.com/p/revealertoolkit
-
The Sleuth Kit Actions
About SourceForge
Develop Software
Copyright © 2009 Geeknet, Inc. All rights reserved. Terms of Use
