sleuthkit · GitHub Topics

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital...

翻译 - SleuthKit®（TSK）是命令行数字取证工具的库和集合，使您可以研究卷和文件系统数据。该库可以合并到较大的数字取证工具中，并且可以直接使用命令行工具查找证据。

sleuthkit tct ntfs forensics incident-response

C++ 2.78 k

1 天前

sumeshi / ntfsfind

An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.

ntfs raw sleuthkit Python forensics

Python 26

1 年前

shujianyang / btrForensics

Forensic Analysis Tool for Btrfs File System.

btrfs sleuthkit forensic-analysis

C++ 21

7 年前

sumeshi / ntfsdump

An efficient tool for extracting files, directories, and alternate data streams directly from NTFS image files.

raw ntfs sleuthkit Python forensics

Python 21

1 年前

wv8672 / digital-forensics-labs

A series of Linux and Windows based Forensics labs. Tools used include: FTK, EnCase, Sleuthkit, Autopsy, Volatility, etc.

forensics analysis sleuthkit volatility

5 年前

nov3mb3r / dfir

Collection of popular DFIR tools in a lightweight and fast docker image

Docker forensics volatility sleuthkit memory-analysis

Dockerfile 11

5 年前

nannib / NBTEMPOW

NBTempoW V. 2.1 is a forensic tool for making timelines from block devices image files (raw, ewf,physicaldrive, etc.). It uses TSK (The Sleuthkit) and it has been developed with Lazarus V. 1.6.2 ( Del...

forensics forensic-analysis timeline sleuthkit lazarus Windows

Pascal 8

8 年前