Home
The Sleuth Kit
Autopsy
sleuthkit.org ↗
Reference Documents
Tools and Libraries that are used by
The Sleuth Kit
(in alphabetical order)
AFFLib
(AFF image format support)
[ftp://ftp.astron.com/pub/file/ file] (detects file type)
libewf
(EnCase / Expert Witness image format support)
File Hash Databases
(in alphabetical order)
CyberAbuse Rootk(it)ID project
Hash Keeper
KnownGoods
NIST NSRL SW Fingerprint Database
RPM
Use on Linux systems with ‘-V -a’ to identify binaries that are different than the local database says
Solaris Fingerprint Database
Last modified: 2012-06-06
Quick Links
TSK Tool Overview
The Sleuth Kit
Autopsy
Developer's Guide
Blackboard
Body file
Timelines
FAT
NTFS
ExtX