sleuthkit/sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
C
Issues
- 0
`tsk_recover` for individual folders
#2922 opened by HT-7 - 0
Show overlapping files
#2921 opened by HT-7 - 0
- 6
New release?
#2909 opened by greateggsgreg - 2
cc1plus: warning: unrecognized command line option ‘-Wno-unused-command-line-argument’
#2911 opened by joachimmetz - 0
- 0
Add a `fls -r --skip-orphan-files` option.
#2902 opened by HT-7 - 0
- 0
Find orphaned FAT directories despite missing boot sector.
#2900 opened by HT-7 - 0
HFS: Wrong calculation of the real hfs_thread size.
#2899 opened by bbkot - 0
- 1
sleuthkit-java_4.12.0-1_amd64.deb conflicts with official debian sleuthkit package
#2822 opened by miguel-negrao - 2
Missing tsk_lvm.hpp
#2881 opened by lewis1625 - 2
INSTALL.txt - Incomplete documentation
#2885 opened by angry-bender - 0
gpu support coming?
#2872 opened by nyck33 - 0
Multiple memory leaks
#2867 opened by john-8998 - 0
Update tsk/tsk_config.h.in
#2862 opened by aberenguel - 2
exFAT: volume label directory entry reading failure on drives formatted without a label by mkfs.exfat
#2857 opened by jengbou - 0
Ext4: does libtsk support the meta_bg feature?
#2855 opened by joachimmetz - 2
Error: Transaction test error: file /usr/bin/ils from install of sleuthkit-4.12.0-100.el8.x86_64 conflicts with file from package irods-icommands-4.3.0-1.x86_64
#2852 opened by AGI-chandler - 0
How to check whether the desc member variable of the TSK_VS_INFO struct is available?
#2849 opened by typeryougishiki - 0
NTFS: General file system error (tsk_fs_dir_add: Directory too large to process (addr: 39))
#2841 opened by joachimmetz - 0
NTFS: Error in metadata structure (fs_attr_idx->nrd.allocsize value out of bounds)
#2840 opened by joachimmetz - 0
considering adding a signature to the bodyfile format
#2786 opened by joachimmetz - 1
- 0
- 2
- 3
Whole directory tree may be lost with TSK-4.11.1 java AddImageProcess.run()
#2723 opened by lfcnassif - 1
Where is the pool layer documentation?
#2748 opened by joachimmetz - 8
Is sleuthkit still active?
#2736 opened by sashashura - 1
- 0
Typo in ntfs_dent.cpp
#2824 opened by john-8998 - 2
How to install if `configure` file is missing?
#2811 opened by emonigma - 2
Ext2/3/4, NTFS: issues with allocated orphan files
#2813 opened by msuhanov - 1
- 1
- 3
- 2
warning: pointer used after ‘void operator delete` in callback-cpp-style.cpp
#2805 opened by joachimmetz - 3
SEGV in APFSBtreeNodeIterator<APFSJObjBtreeNode> APFSJObjBtreeNode::find<unsigned long, ...
#2804 opened by joachimmetz - 3
OOB read in APFSJObject::add_entry
#2802 opened by joachimmetz - 1
compiler -Wuse-after-free warning
#2758 opened by joachimmetz - 2
Hundreds of thousands of files missed because of an unexpected SID S-1-5-17 causing StringIndexOutOfBoundsException
#2765 opened by lfcnassif - 2
Sleuthkit-4.11.1 java library (or some of its dependencies) seems to be messing java system properties
#2718 opened by lfcnassif - 2
- 0
[tsk_recover] Recover files from harddrive image -> Unsupported file system type (hfs_load_extended_attrs: Unsupported record type: (32)) ( - hfs_load_attrs A)
#2784 opened by M4xTheMan - 0
- 0
istat does not determine long file name for FAT-12, FAT-16 and FAT-32 (inconsistent with exFAT)
#2741 opened by joachimmetz - 0
- 0
APFS: istat "Device ID" not provided
#2721 opened by joachimmetz - 2
HFS+/HFSX: istat yields "Error reading file data fork" for block or character device and FIFO file entry
#2720 opened by joachimmetz