The Sleuth Kit

The Sleuth Kit® (TSK)是一个命令行数字取证工具库和工具集合，允许您调查卷和文件系统数据。该工具库可以集成到更大的数字取证工具中，命令行工具可以直接用于查找证据。「The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.」