Difference between revisions of "Help Documents"
From SleuthKitWiki
m (Reformatted.) |
|||
| Line 2: | Line 2: | ||
==English Documents== | ==English Documents== | ||
| − | * [http://www.sleuthkit.org/informer/ The Sleuth Kit Informer] newsletter | + | * [http://www.sleuthkit.org/informer/ The Sleuth Kit Informer (www.sleuthkit.org)] newsletter |
| − | * [http://www.sleuthkit.org/sleuthkit/docs.php Sleuth Kit Documents Page] | + | * [http://www.sleuthkit.org/sleuthkit/docs.php Sleuth Kit Documents Page (www.sleuthkit.org)] |
| − | * [http://www.sleuthkit.org/autopsy/docs.php Autopsy Documents Page] | + | * [http://www.sleuthkit.org/autopsy/docs.php Autopsy Documents Page (www.sleuthkit.org)] |
* [[Licenses]] | * [[Licenses]] | ||
Revision as of 14:22, 20 March 2008
This page contains links and references to help documents that were created by The Sleuth Kit and Autopsy users.
English Documents
- The Sleuth Kit Informer (www.sleuthkit.org) newsletter
- Sleuth Kit Documents Page (www.sleuthkit.org)
- Autopsy Documents Page (www.sleuthkit.org)
- Licenses
All of the tools have a description on the main sleuthkit.org page, but the links below are for the new wiki home.
Sleuthkit is a suite of forensic analysis tools. Tools are grouped by their focus (e.g.: hash analysis, volume records, etc.). Below are all tools grouped by their particular focus area.
| Focus | Tools |
|---|---|
| Disk Tools | disk_sreset, disk_stat |
| Volume System Tools | mmls, mmstat |
| File System Tools (File Name Layer) | fls, ffind |
| File System Tools (Meta Data Layer) | icat, ifind, ils, istat |
| File System Tools (Data Layer) | dcalc, dcat, dls, dstat |
| File System Tools (File System Layer) | fsstat |
| File System Tools (Journal Layer) | jcat, jls |
| Hash Database Tools | hfind |
| Image Format Tools | img_cat, img_stat |
| Time Line Tools | mactime
|
