CINXE.COM
The Sleuth Kit (TSK) & Autopsy: Open Source Digital Forensics Tools
<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>The Sleuth Kit (TSK) & Autopsy: Open Source Digital Forensics Tools</title> <!-- Bootstrap CSS --> <link href="/bootstrap/css/bootstrap.min.css" rel="stylesheet"> <!-- Plugins CSS --> <!--<link href="/plugins/font-awesome/css/font-awesome.min.css" rel="stylesheet">--> <!--<link href="/plugins/owl-carousel/owl.carousel.css" rel="stylesheet"> <link href="/plugins/owl-carousel/owl.transitions.css" rel="stylesheet"> <link href="/plugins/owl-carousel/owl.theme.css" rel="stylesheet"> --> <!--<link href="/plugins/lightbox/css/lightbox.css" rel="stylesheet">--> <!-- Theme CSS --> <link href="/css/style-theme.css" rel="stylesheet"> <!-- <link href="css/style-theme.min.css" rel="stylesheet"> --> <link href="/css/style-colours.css" rel="stylesheet"> <!-- <link href="css/style-colours.min.css" rel="stylesheet"> --> <link href="/css/style-mixedcolours.css" rel="stylesheet"> <!-- <link href="css/style-mixedcolours.min.css" rel="stylesheet"> --> <!-- loader --> <link href="/css/loader.css" rel="stylesheet"> <!--<script src="/plugins/pace/pace.min.js"></script>--> <!-- Custom Theme CSS --> <link href="/css/styles.css" rel="stylesheet"> <!-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries --> <!-- WARNING: Respond.js doesn't work if you view the page via file:// --> <!--[if lt IE 9]> <script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script> <script src="https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js"></script> <![endif]--> </head> <body class="background-light twlsky-orange isolated-sections"> <!-- Page Outer Container --> <div class="outer-container clearfix"> <!-- =========== Header =========== --> <header class="clearfix"> <!--<div class="logo"> <a href="index.html"><img src="images/design/logo.png" alt="TWILLI Sky" id="logo_dark"></a> </div>--><!-- .logo --> <div id="main-menu-container" class="clearfix"> <div id="mobile-menu-icon" class="btn btn-outline-inverse visible-xs"><span class="glyphicon glyphicon-th"></span></div> <ul id="main-menu"> <!-- Home --> <li class="menu-item current-menu-ancestor"> <a href="/index.php">Home</a> </li> <!-- Autopsy --> <li class="menu-item"><a href="/autopsy/">Autopsy</a> <ul class="sub-menu"> <li class="menu-item"><a href="/autopsy/features.php">Features</a></li><li class="menu-item"><a href="/autopsy/download.php">Download</a></li><li class="menu-item"><a href="http://www.autopsy.com/training" target="_blank">Training</a></li><li class="menu-item"><a href="/autopsy/docs.php">Documents</a></li><li class="menu-item"><a href="/autopsy/history.php">History</a></li><li class="menu-item"><a href="/autopsy/licenses.php">Licenses</a></li> </ul> </li> <!-- Sleuth Kit Menu --> <li class="menu-item"><a href="/sleuthkit/">The Sleuth Kit</a> <ul class="sub-menu"> <li class="menu-item"><a href="/sleuthkit/desc.php">File Systems</a></li><li class="menu-item"><a href="/sleuthkit/download.php">Download</a></li><li class="menu-item"><a href="/sleuthkit/docs.php">Documents</a></li><li class="menu-item"><a href="/sleuthkit/history.php">History</a></li><li class="menu-item"><a href="/sleuthkit/licenses.php">Licenses</a></li> </ul> </li> <li class="menu-item"> <a href="/proj.php">Other Projects</a> <ul class="sub-menu"> <li class="menu-item"><a href="/tsk_hadoop/index.php">Hadoop</a></li><li class="menu-item"><a href="/mac-robber/index.php">mac-robber</a></li> </ul> </li> <li class="menu-item"> <a href="/support.php">Support</a> <ul class="sub-menu"> <li class="menu-item"><a href="http://www.autopsy.com/category/blog/">Blog (www.autopsy.com)</a></li> <li class="menu-item"><a href="http://forum.sleuthkit.org/">Forum (forum.sleuthkit.org)</a></li> <!--<li class="menu-item"><a href="http://X">E-mail</a></li>--> </ul> </li> <li class="menu-item"> <a href="/about.php">About</a></li> </ul><!-- #main-menu --> </div><!-- #menu-container --> </header> <!-- =========== Page Body Inside Content =========== --> <div class="inside-body-content-container clearfix"> <!-- End: Header --> <!-- =========== Section 1 =========== --> <div class="container-fluid horizontal-section-container clearfix"> <div class="row"> <div class="col-sm-8"> <div id="home-intro-paragraph" class="section-container main-page-content clearfix"> <div class="section-content clearfix"> <p><div align="center"><h1>Open Source Digital Forensics</h1></div></p> <div class="col-sm-6"> <div id="home-intro-paragraph" class="section-container clearfix"> <div align="center"><a href="/autopsy/"><img src="picts/renzik_sm.jpg" border=0 height="160"></a></div> <p><a href="/autopsy/">Autopsy®</a> is an easy to use, GUI-based program that allows you to efficiently analyze hard drives and smart phones. It has a plug-in architecture that allows you to find add-on modules or develop custom modules in Java or Python.</p> </div> </div> <div class="col-sm-6"> <div id="home-intro-paragraph" class="section-container clearfix"> <div align="center"><a href="/sleuthkit/"><img src="picts/hash3_v1_sm.jpg" border=0 height="160"></a></div> <p><a href="/sleuthkit/">The Sleuth Kit®</a> is a collection of command line tools and a C library that allows you to analyze disk images and recover files from them. It is used behind the scenes in Autopsy and many other open source and commercial forensics tools.</p> </div> </div> <div class="col-sm-12"> <div class="section-content clearfix"> <p> These tools are used by thousands of users around the world and have <a href="/support.php">community-based</a> e-mail lists and forums. Commercial training, support, and custom development is available from <a href="http://www.autopsy.com">Sleuth Kit Labs</a>. <p align="left"> <a href="https://twitter.com/sleuthkit" class="twitter-follow-button" data-show-count="false">Follow @sleuthkit</a> <script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script> </p> </div> </div> </div><!-- section content --> </div><!-- .section-container --> <!-- End: Website Intro Paragraph --> </div><!-- --> <div class="col-sm-4"> <!-- Latest News --> <div id="sidebar-news" class="section-container clearfix"> <div class="section-header with-icon"> <div class="icon"><span class="glyphicon glyphicon-bullhorn"></span></div> <h5 class="text">Latest News <a type="application/rss+xml" href="rss.xml"><img border=0 src="/picts/rss.png"></a></h5> </div><!-- .section-header --> <div class="section-content clearfix"> <ul class="vertical-simple-list w-dates"> <!-- list item HERE --> <li class="item clearfix"><div class="item-content"> <div class="date"><div class="day">11</div><div class="month">Mar</div></div> <div class="text"><a href="/autopsy">Autopsy 4.22.0 released</a></br> BitLocker and side-by-side Cyber Triage.</div> </div></li> <li class="item clearfix"><div class="item-content"> <div class="date"><div class="day">11</div><div class="month">Mar</div></div> <div class="text"><a href="/sleuthkit">Sleuth Kit 4.13.0 released</a></br> BitLocker and experimental XFS and BtrFS.</div> </div></li> <li class="item clearfix"><div class="item-content"> <div class="date"><div class="day">29</div><div class="month">Aug</div></div> <div class="text"><a href="/autopsy">Autopsy 4.21.0 released</a></br> Inline keyword search and malware scanner.</div> </div></li> <li class="item clearfix"><div class="item-content"> <div class="date"><div class="day">29</div><div class="month">Aug</div></div> <div class="text"><a href="/sleuthkit">Sleuth Kit 4.12.1 released</a></br> Bug fixes and Java updates.</div> </div></li> <!-- Below are not for specific cal entries --> </ul><!-- .vertical-simple-list --> </div><!-- .section-content --> </div><!-- .section-container --> <!-- End: Latest News --> </div> </div><!-- .row --> </div><!-- .container-fluid --> <!-- End: Section 1 --> <!-- =========== Section 2 =========== --> <!-- <div class="container-fluid horizontal-section-container clearfix"> <div class="row"> <div class="col-sm-6"> <div id="home-intro-paragraph" class="section-container featured-text clearfix"> <h2>Autopsy</h2> <p>Autopsy is XYZ. </p> <p><a href="about.html" class="btn btn-outline-inverse btn-lg">find out more</a></p> </div> </div> <div class="col-sm-6"> <div id="home-intro-paragraph" class="section-container featured-text clearfix"> <h2>The Sleuth Kit</h2> <p>TSK is XYZ. </p> <p><a href="about.html" class="btn btn-outline-inverse btn-lg">find out more</a></p> </div> </div> </div> </div>--> <!-- End: Section 2 --> <!-- =========== Section 3 =========== --> <!-- <div class="container-fluid horizontal-section-container clearfix"> <div class="row"> <div class="col-xs-12"> <div id="home-latest-news" class="section-container clearfix"> <p align="center"><a href="http://www.osdfcon.org"><img src="picts/osdf2015-banner.png" width=600 alt="Attend the 6th Annual Open Source Digital Forensics Conference." border="0"></a><br /> October 28, 2015 at the Westin Washington Dulles in Herndon, VA.</p> </div> </div> </div> </div> --> <div class="container-fluid horizontal-section-container clearfix"> <div class="row"> <div class="col-sm-6"> <div id="home-intro-paragraph" class="section-container clearfix" align="center"> <!--<p><a href="http://www.cafepress.com/sleuthkit/"><img src="picts/shirt1.jpg" width="150" height="150" border="0"></a><br> (Merchandise!)</p>--> </div> </div> <div class="col-sm-6"> <div id="home-intro-paragraph" class="section-container clearfix" align="center"> <p><a href="http://www.digital-evidence.org/fsfa/"> <img src="./picts/fsfa-pict2.jpg" border=0></a></p> </div> </div> </div> </div> <!-- =========== Section 4 =========== --> <!-- <div class="container-fluid horizontal-section-container clearfix"> <div class="row"> <div class="col-sm-12"> <div id="home-latest-posts" class="section-container clearfix"> <!-- <a href="blog.html" class="section-header with-icon"> <div class="icon"><span class="fa fa-pencil"></span></div> <h5 class="text">Latest News</h5> </a> <div class="section-content"> <div class="horizontal-news-list row equal-height clearfix"> </div> </div> </div> </div> </div> </div> <!-- End: Section 4 --> <!-- begin footer --> </div><!-- .inside-body-content-container --> <!-- End: Page Body Inside Content --> </div><!-- .outer-container --> <!-- End: Page Outer Container --> <!-- Beneath Footer --> <div id="beneath-footer" class="center-container clearfix"> <!-- left --> <div class="col-sm-6 beneath-footer-left"> <div class="text"> © 2003-2023 Brian Carrier </div> </div> <!-- right --> <!-- <div class="col-sm-6 beneath-footer-right"> <ul class="social-media-icons clearfix"> <li><a href="#" target="_blank" title="Twitter"><i class="fa fa-twitter"></i></a></li> </ul> </div> --> </div><!-- #beneath-footer --> <!-- go to top --> <div id="go-to-top" onclick="scroll_to_top(this.event);" title="Go to top"><span class="glyphicon glyphicon-chevron-up"></span></div> <!-- Jquery and Bootstrap JS --> <!-- <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script> --> <script src="/js/jquery.min.js"></script> <script src="/bootstrap/js/bootstrap.min.js"></script> <!-- Easing - for transitions and effects --> <script src="/js/jquery.easing.1.3.js"></script> <!-- Plugins --> <script src="/js/detectmobilebrowser.js"></script> <!--<script src="/plugins/owl-carousel/owl.carousel.min.js"></script> - <script src="/plugins/lightbox/js/lightbox.min.js"></script> <script src="/plugins/masonry/masonry.pkgd.min.js"></script> --> <!-- Custom functions for this theme --> <script src="/js/functions.js"></script> <!-- <script src="js/functions-min.js"></script> --> <script src="/js/initialise-functions.js"></script> </body> </html>