Skip to content

@sleuthkit The Sleuth Kit

Change the repository type filter

All

    Repositories list

    18 repositories

    • sleuthkit

      Public
      The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
      incident-responseforensicsntfssleuthkittct
      C++
      •608•2.6k•340•25•Updated Nov 13, 2024Nov 13, 2024

    • autopsy_addon_modules

      Public
      Repo to store compiled modules or links to 3rd party add-on modules.
      Python
      •134•443•2•0•Updated Nov 8, 2024Nov 8, 2024

    • sleuthkit_test_data

      Public
      Holds images and other test data for sleuthkit
      0•0•0•0•Updated Oct 18, 2024Oct 18, 2024

    • autopsy

      Public
      Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
      forensicsjava
      Java
      •595•2.4k•349•13•Updated Sep 17, 2024Sep 17, 2024

    • scalpel

      Public
      Scalpel is an open source data carving tool. It is not being actively maintained.
      Shell
      •99•627•32•4•Updated Mar 27, 2024Mar 27, 2024

    • governance

      Public
      0•0•0•0•Updated Mar 25, 2024Mar 25, 2024

    • sevenzipjbinding

      Public
      7-Zip-JBinding
      C++
      •
      Other
      •51•0•0•0•Updated Nov 24, 2020Nov 24, 2020

    • yara-java

      Public
      Java bindings for Yara
      C
      •
      Apache License 2.0
      •25•0•0•0•Updated Oct 23, 2020Oct 23, 2020

    • libewf_64bit

      Public
      Copy of the libewf source code that is configured for a 64-bit MS Visual Studio build.
      C
      •
      GNU Lesser General Public License v3.0
      •27•15•2•0•Updated Aug 17, 2020Aug 17, 2020

    • libvmdk_64bit

      Public
      64-bit / VS 2015 version of libvmdk (https://github.com/libyal/libvmdk)
      C
      •13•5•0•0•Updated Aug 12, 2020Aug 12, 2020

    • libvhdi_64bit

      Public
      64-bit / VS 2015 version of libvhdi (https://github.com/libyal/libvhdi)
      C
      •
      GNU Lesser General Public License v3.0
      •15•5•0•0•Updated Aug 12, 2020Aug 12, 2020

    • libewf-legacy

      Public
      Legacy version of libewf
      C
      •
      GNU Lesser General Public License v3.0
      •5•1•0•0•Updated Aug 11, 2020Aug 11, 2020

    • libvmdk

      Public
      Library and tools to access the VMware Virtual Disk (VMDK) format
      C
      •
      GNU Lesser General Public License v3.0
      •65•4•0•0•Updated Aug 10, 2020Aug 10, 2020

    • Autopsy-WindowsRegistryContentViewer

      Public archive
      Willi Ballenthin's module to view the registry as a content viewer. This has been moved into part of the core Autopsy release and is no longer needed as an add-on module.
      Java
      •
      Apache License 2.0
      •13•8•0•0•Updated Sep 6, 2019Sep 6, 2019

    • Autopsy-WindowsRegistryIngestModule

      Public
      Will Ballenthin's module to extract all registry key/values as files during ingest. He is no longer maintaining it and we made some minor updates.
      Java
      •
      Apache License 2.0
      •10•6•0•0•Updated Feb 15, 2019Feb 15, 2019

    • JavaStixBindings

      Public
      We needed some jaxb bindings for STIX for an Autopsy module. This is temporary code until the official MITRE Java bindings are published.
      Java
      •
      Other
      •2•4•0•0•Updated Jan 30, 2015Jan 30, 2015

    • sleuthkit.github.com

      Public
      website
      1•3•0•0•Updated May 2, 2014May 2, 2014

    • hadoop_framework

      Public
      This is a prototype system that uses Hadoop to process hard drive images.
      Java
      •21•51•1•0•Updated Oct 1, 2012Oct 1, 2012