summaryrefslogtreecommitdiff
path: root/system/sleuthkit/README
diff options
context:
space:
mode:
Diffstat (limited to 'system/sleuthkit/README')
-rw-r--r--system/sleuthkit/README4
1 files changed, 4 insertions, 0 deletions
diff --git a/system/sleuthkit/README b/system/sleuthkit/README
index 5d6c74064d..0f95ef37e4 100644
--- a/system/sleuthkit/README
+++ b/system/sleuthkit/README
@@ -9,3 +9,7 @@ the command line tools can be directly used to find evidence.
Sleuthkit can optionally use libewf (for Expert Witness files)
and afflib (for Advanced Forensic Format files).
+
+Note: If you are building TSK for use with Plaso or the DFVFS, it is
+strongly recommended that you build libewf support into TSK by
+installing libewf first.