[sleuthkit-users] "Proper" install method for TSK on Ubuntu

[Tom Y. <to...@ya...>]

Hello,
I wanted to find out if anyone has or knows of a write up on the proper way
to install TSK on an Ubuntu system. I'm not talking about using the
packages (because they are behind in terms of releases), I mean building
from the Source Release packages on the Github site.

The reason I'm asking is there seems to be a step I'm missing. The last
three version of Ubuntu I've run (all LTS) I've never been able to run
srch_strings on it. It ALWAYS core dumps. Even if I run it against a text
file.

Then recently I was using F-Response (my Tactical license) to connect to a
VM running on my Ubuntu Host (Windows Guest). I had a raw image of the
guest mounted, but when I tried to do an fls on it (I was looking for a
specific file), it core dumped.

I'm at the point that I'm wonder if there's an installation step that I'm
doing wrong, some library I might be missing, or something else. No matter
which way I've installed it, apt for all the packages (even libewf, libaff,
etc), or using apt for libewf, libaff, etc and then installing from the
release source, or even a git pull from the Github site, I end up with the
same result.

I'm getting ready to build a new Linux Forensic laptop (Ubuntu 18.04) so I
wanted to get the kinks out of my install process (and I'd rather not run
the SIFT installer on top of it).

Thanks.....
Tom

PGP Key ID - B32585D0