The Sleuth Kit (Paperback)

High Quality Content by WIKIPEDIA articles! The Sleuth Kit (TSK) is a library and collection of Unix- and Windows-based tools and utilities to allow for the forensic analysis of computer systems. It was written and maintained by digital investigator Brian Carrier. TSK can be used to perform investigations and data extraction from images of Windows, Linux and Unix computers. The Sleuth Kit is normally used in conjunction with its custom front-end application, Autopsy, to provide a user friendly interface. An alternative, newer interface is PTK Forensics. Several other tools also use TSK for file extraction.