⚡ TL;DR
What
File system analysis tools
Who
DFIR, Forensics
Catch
CLI only
Verdict
⭐⭐⭐⭐ Recommended
🎯 The Problem It Solves
DFIR, Forensics need file system analysis tools. This tool solves that problem simply and effectively.
🔧 How It Works
Install Sleuth Kit and follow the quick start steps below to get results in minutes.
🚀 Installation & Quick Start
Installation
apt install sleuthkitQuick Start
- apt install sleuthkit
- fls -r /dev/sda1
- icat /dev/sda1 inode
✅ Pros
- •File system
- •Analysis
- •CLI tools
❌ Cons
- •CLI only
- •Learning curve
💬 Practitioner Verdict
"Foundation of forensics tools."
— Emmanuel, Security Reviewer
📊 Specifications
- Language
- C/Python
- License
- MIT
- Platform
- Linux, macOS, Windows
- Kill Chain
- Multiple
- MITRE ATT&CK
- T1003, T1059
💰 Pricing Reality
Free (OSS).
👥 Community Health
Stars2,500
Forks312
Contributors50
Health Score5.5/10
🏷️ Tags
Open Source