TSK Framework
From SleuthKitWiki
NOTE: The TSK Framework has not been included in an official release yet.
The original goal of TSK was to provide platform independent access to all types of volume and file systems. The framework expanded that goal to include application-level analysis so that there would be an open source end-to-end solution for digital investigations.
Much of the documentation for using the framework is included in the source code documentation [1]. This wiki page contains links to pages that can be updated and edited by framework users.
- Blackboard Artifact Examples