Design Documents

This page contains information on the design of The Sleuth Kit (TSK) and Autopsy. The information here is intended for people who want to better understand how the tools work, to develop tools using the TSK libraries, or to add features to TSK or Autopsy.

• The Sleuth Kit Informer contains some articles on the design of TSK and Autopsy.

• FAT Implementation Notes
• ISO9660 Implementation Notes
• NTFS Implementation Notes
• Windows Implementation Notes
• YAFFS2 Implementation Notes