sleuthkit/sleuthkit

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

Language: C

Observed star growth

Latest OpenPulse observation: 2026-10-18 22:53 UTC

GitHub topics

• forensics
• incident-response
• ntfs
• sleuthkit
• tct

View source repository on GitHub