Sleuth Kit
The Sleuth Kit is a collection of open-source tools used for digital forensics. It helps investigators analyze file systems and recover data from various storage devices, such as hard drives and memory cards. The toolkit supports multiple file systems, making it versatile for different operating systems.
With the Sleuth Kit, users can examine disk images, search for deleted files, and analyze file metadata. It is commonly used by law enforcement and cybersecurity professionals to gather evidence in criminal investigations or to assess data breaches. The tools are command-line based, allowing for detailed and customizable analysis.