Forensics

The Sleuth Kit

Command-line forensic tools and libraries for analyzing disk images and filesystems.

forensicsdiskfilesystemimageclievidence

Best For

Good for learning the lower-level tools behind many disk-forensics workflows.

Responsible Use

Use this tool only in owned environments, classroom labs, CTFs, or engagements where you have explicit written permission. Keep notes focused on findings, risk, and remediation.

Official Resource

https://sleuthkit.org/