The Sleuth Kit and Autopsy - Revision history

Anonymoususer852: Fix/update links. Added references to supported file system image formats for easier tracking, and streamlined these. Streamlined Supported file systems. Added Links section.

2025-08-16T02:50:30Z

Fix/update links. Added references to supported file system image formats for easier tracking, and streamlined these. Streamlined Supported file systems. Added Links section.

Jsummers: DEFAULTSORT

2015-07-03T20:31:05Z

DEFAULTSORT

Jsummers: Added categories

2015-06-27T19:16:39Z

Added categories

Dan Tobias: Add standard navigational header

2012-11-08T08:13:54Z

Add standard navigational header

Pidge: Created page with "[http://www.sleuthkit.org/sleuthkit/ The Sleuth Kit] (TSK) is a C library and a set of command line tools for forensic analysis of filesystems and disk images. [http://www.sle..."

2012-11-01T07:03:14Z

Created page with "[http://www.sleuthkit.org/sleuthkit/ The Sleuth Kit] (TSK) is a C library and a set of command line tools for forensic analysis of filesystems and disk images. [http://www.sle..."

New page

[http://www.sleuthkit.org/sleuthkit/ The Sleuth Kit] (TSK) is a C library and a set of command line tools for forensic analysis of filesystems and disk images. [http://www.sleuthkit.org/autopsy/ Autopsy] is a graphical front end for TSK and provides some additional features on top of it, including extracting and searching the text contents from multiple file formats over an entire image.

Supported disk and file system image formats
* raw (i.e. dd)
* Expert Witness (i.e. EnCase)
* AFF

Supported file systems:
* [[NTFS]]
* [[FAT]]
* [[UFS 1]]
* [[UFS 2]]
* [[EXT2]]
* [[EXT3]]
* [[HFS]]
* [[ISO 9660]] / CDFS (Compact Disc File System)

@@ Line 24: / Line 24: @@
 * [[ISO 9660]] / CDFS (Compact Disc File System)
 [[Category:Software]]
 [[Category:Forensics and Law Enforcement]]

← Older revision		Revision as of 19:16, 27 June 2015
Line 23:		Line 23:
	* [[HFS]]		* [[HFS]]
	* [[ISO 9660]] / CDFS (Compact Disc File System)		* [[ISO 9660]] / CDFS (Compact Disc File System)
		+
		+	[[Category:Software]]
		+	[[Category:Forensics and Law Enforcement]]

← Older revision		Revision as of 08:13, 8 November 2012
Line 1:		Line 1:
		+	{\|
		+	\|[[Software]]
		+	\| >
		+	\|[[File rendering/interaction software]]
		+	\| >
		+	\|[[The Sleuth Kit and Autopsy]]
		+	\|}
		+
	[http://www.sleuthkit.org/sleuthkit/ The Sleuth Kit] (TSK) is a C library and a set of command line tools for forensic analysis of filesystems and disk images. [http://www.sleuthkit.org/autopsy/ Autopsy] is a graphical front end for TSK and provides some additional features on top of it, including extracting and searching the text contents from multiple file formats over an entire image.		[http://www.sleuthkit.org/sleuthkit/ The Sleuth Kit] (TSK) is a C library and a set of command line tools for forensic analysis of filesystems and disk images. [http://www.sleuthkit.org/autopsy/ Autopsy] is a graphical front end for TSK and provides some additional features on top of it, including extracting and searching the text contents from multiple file formats over an entire image.

@@ Line 7: / Line 7: @@
 |}
-[http://www.sleuthkit.org/sleuthkit/ The Sleuth Kit] (TSK) is a C library and a set of command line tools for forensic analysis of filesystems and disk images. [http://www.sleuthkit.org/autopsy/ Autopsy] is a graphical front end for TSK and provides some additional features on top of it, including extracting and searching the text contents from multiple file formats over an entire image.
+[https://www.sleuthkit.org/sleuthkit/ The Sleuth Kit] (TSK) is a C library and a set of command line tools for forensic analysis of filesystems and disk images. [https://www.sleuthkit.org/autopsy/ Autopsy] is a graphical front end for TSK and provides some additional features on top of it, including extracting and searching the text contents from multiple file formats over an entire image.
 Supported disk and file system image formats
-* raw (i.e. dd)
+* raw disk image (i.e. dd)
-* Expert Witness (i.e. EnCase)
+* [[Expert Witness]] (i.e. EnCase)<ref>[http://wiki.sleuthkit.org/index.php?title=Reference_Documents Reference documents - SleuthKitWiki]</ref>
-* AFF
+* [[Advanced Forensics Format]] (AFF)<ref>[http://wiki.sleuthkit.org/index.php?title=Reference_Documents Reference documents - SleuthKitWiki]</ref>
 Supported file systems:
-* [[NTFS]]
+* [[ext2]], [[ext3]], [[ext4]] (Traditional [[Linux]] File System)
-* [[FAT]]
+* [[FAT]], [[ExFAT]] (File Allocation Table, Extended File Allocation Table)
-* [[UFS 1]]
+* [[HFS]] (Apple ''variant'' File System)
-* [[UFS 2]]
-* [[EXT2]]
-* [[EXT3]]
 * [[HFS]]
 * [[ISO 9660]] / CDFS (Compact Disc File System)
 {{DEFAULTSORT:Sleuth Kit and Autopsy, The}}
 [[Category:Software]]
 [[Category:Forensics and Law Enforcement]]