← All tools

Sleuth Kit

https://www.sleuthkit.org

Open Source ◆ Kali Linux

Categories

Forensics

Description

Collection of command-line tools and C library for analyzing disk images. Supports NTFS, FAT, Ext2/3/4, HFS+, and more. Foundation for Autopsy GUI.

Keywords

disk forensics file system analysis deleted files disk image NTFS FAT Ext4 inode

Example Usage

fls -r image.dd
icat image.dd 12345 > recovered_file
mmls image.dd
fsstat image.dd