slackbuilds/system/sleuthkit
Barry J. Grundy c806a412c9 system/sleuthkit: Updated for version 4.1.3.
Signed-off-by: Willy Sudiarto Raharjo <willysr@slackbuilds.org>
2014-02-15 23:03:15 +07:00
..
README system/sleuthkit: Updated for version 4.1.0. 2013-07-14 17:07:21 -05:00
slack-desc system/sleuthkit: Updated for version 4.0.2. 2013-03-22 07:16:40 -04:00
sleuthkit.SlackBuild system/sleuthkit: Updated for version 4.1.3. 2014-02-15 23:03:15 +07:00
sleuthkit.info system/sleuthkit: Updated for version 4.1.3. 2014-02-15 23:03:15 +07:00

README

The Sleuth Kit (TSK) is a library and collection of command line 
tools that allow you to investigate disk images. The core 
functionality of TSK allows you to analyze volume and file system 
data. The plug-in framework allows you to incorporate additional 
modules to analyze file contents and build automated systems. The 
library can be incorporated into larger digital forensics tools and 
the command line tools can be directly used to find evidence.


Sleuthkit can optionally use libewf (for Expert Witness files) 
and afflib (for Advanced Forensic Format files).