diff options
Diffstat (limited to 'system/sleuthkit/README')
-rw-r--r-- | system/sleuthkit/README | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/system/sleuthkit/README b/system/sleuthkit/README index 0f95ef37e4..7f9001e065 100644 --- a/system/sleuthkit/README +++ b/system/sleuthkit/README @@ -1,15 +1,15 @@ -The Sleuth Kit (TSK) is a library and collection of command line -tools that allow you to investigate disk images. The core -functionality of TSK allows you to analyze volume and file system -data. The plug-in framework allows you to incorporate additional -modules to analyze file contents and build automated systems. The -library can be incorporated into larger digital forensics tools and +The Sleuth Kit (TSK) is a library and collection of command line +tools that allow you to investigate disk images. The core +functionality of TSK allows you to analyze volume and file system +data. The plug-in framework allows you to incorporate additional +modules to analyze file contents and build automated systems. The +library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. -Sleuthkit can optionally use libewf (for Expert Witness files) +Sleuthkit can optionally use libewf (for Expert Witness files) and afflib (for Advanced Forensic Format files). Note: If you are building TSK for use with Plaso or the DFVFS, it is -strongly recommended that you build libewf support into TSK by +strongly recommended that you build libewf support into TSK by installing libewf first. |