Download

TSK can be downloaded as source code that you must compile (the .tar.gz file) or as Windows executables (the .zip file). For both archive files, GPG signatures exist. Downloads are from SourceForge.net.

• Download Version 2.52 (April 10, 2008)
• Current version has been tested with:
  • AFFLIB: 3.1.3
  • libewf: libewf-20070512
• Download Previous Versions and change logs
• My GPG Key: local copy or MIT's server

The Sleuth Kit can be used with The Autopsy Forensic Browser, which can be downloaded here. The Sleuth Kit must be installed before Autopsy.

Note that the Windows executables cannot yet be used with Autopsy. The Cygwin version must be used.

Refer to the SleuthKitWiki for Packages and Add-ons.

Bugs

A list of open and closed bugs in The Sleuth Kit can be found on the Source Forge site. This public database was motivated by a thread on the cftt at yahoogroups.com e-mail list regarding public databases of bugs in digital investigation tools. When a general database of bugs is created, and maintained by the digital investigation community, it will be linked here.

Announcements

Announcements of new releases are sent to the sleuthkit-announce and sleuthkit-users e-mail lists.