Skip to content

@sleuthkit The Sleuth Kit

Change the repository type filter

All

    Repositories list

    18 repositories

    • sleuthkit

      Public
      The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library…
      incident-responseforensicsntfs
      incident-responseforensicsntfssleuthkittct
      C++
      •678•3k•434•24•Updated Mar 4, 2026Mar 4, 2026

    • autopsy

      Public
      Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, milita…
      javaforensics
      javaforensics
      Java
      •653•3k•371•20•Updated Oct 25, 2025Oct 25, 2025

    • sleuthkit_test_data

      Public
      Holds images and other test data for sleuthkit
      Python
      •1•2•0•0•Updated Apr 1, 2025Apr 1, 2025

    • autopsy_addon_modules

      Public
      Repo to store compiled modules or links to 3rd party add-on modules.
      Python
      •153•552•2•1•Updated Nov 8, 2024Nov 8, 2024

    • scalpel

      Public
      Scalpel is an open source data carving tool. It is not being actively maintained.
      Shell
      •109•674•39•5•Updated Mar 27, 2024Mar 27, 2024

    • governance

      Public
      0•0•0•0•Updated Mar 25, 2024Mar 25, 2024

    • sevenzipjbinding

      Public
      7-Zip-JBinding
      C++
      •
      Other
      •52•1•0•0•Updated Nov 24, 2020Nov 24, 2020

    • yara-java

      Public
      Java bindings for Yara
      C
      •
      Apache License 2.0
      •23•0•0•0•Updated Oct 23, 2020Oct 23, 2020

    • libewf_64bit

      Public
      Copy of the libewf source code that is configured for a 64-bit MS Visual Studio build.
      C
      •
      GNU Lesser General Public License v3.0
      •29•17•2•0•Updated Aug 17, 2020Aug 17, 2020

    • libvmdk_64bit

      Public
      64-bit / VS 2015 version of libvmdk (https://github.com/libyal/libvmdk)
      C
      •14•5•0•0•Updated Aug 12, 2020Aug 12, 2020

    • libvhdi_64bit

      Public
      64-bit / VS 2015 version of libvhdi (https://github.com/libyal/libvhdi)
      C
      •
      GNU Lesser General Public License v3.0
      •16•5•0•0•Updated Aug 12, 2020Aug 12, 2020

    • libewf-legacy

      Public
      Legacy version of libewf
      C
      •
      GNU Lesser General Public License v3.0
      •4•1•0•0•Updated Aug 11, 2020Aug 11, 2020

    • libvmdk

      Public
      Library and tools to access the VMware Virtual Disk (VMDK) format
      C
      •
      GNU Lesser General Public License v3.0
      •73•5•0•0•Updated Aug 10, 2020Aug 10, 2020

    • Autopsy-WindowsRegistryContentViewer

      Public archive
      Willi Ballenthin's module to view the registry as a content viewer. This has been moved into part of the core Autopsy release and is no longer needed as an add…
      Java
      •
      Apache License 2.0
      •13•8•0•0•Updated Sep 6, 2019Sep 6, 2019

    • Autopsy-WindowsRegistryIngestModule

      Public
      Will Ballenthin's module to extract all registry key/values as files during ingest. He is no longer maintaining it and we made some minor updates.
      Java
      •
      Apache License 2.0
      •10•6•0•0•Updated Feb 15, 2019Feb 15, 2019

    • JavaStixBindings

      Public
      We needed some jaxb bindings for STIX for an Autopsy module. This is temporary code until the official MITRE Java bindings are published.
      Java
      •
      Other
      •2•4•0•0•Updated Jan 30, 2015Jan 30, 2015

    • sleuthkit.github.com

      Public
      website
      2•4•0•0•Updated May 2, 2014May 2, 2014

    • hadoop_framework

      Public
      This is a prototype system that uses Hadoop to process hard drive images.
      Java
      •22•52•1•0•Updated Oct 1, 2012Oct 1, 2012