How to Install and Uninstall sleuthkit Package on Kali Linux

Last updated: December 23,2024

1. Install "sleuthkit" package

This guide let you learn how to install sleuthkit on Kali Linux


    
        
            $
        

        
            
                sudo apt update
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt install
            
                        
                sleuthkit
            
                    
    
    Copied

2. Uninstall "sleuthkit" package

Please follow the step by step instructions below to uninstall sleuthkit on Kali Linux:


    
        
            $
        

        
            
                sudo apt remove
            
                        
                sleuthkit
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt autoclean && sudo apt autoremove
            
                    
    
    Copied

3. Information about the sleuthkit package on Kali Linux

Package: sleuthkit
Version: 4.12.1+dfsg-0kali5
Architecture: amd64
Maintainer: Kali Developers
Installed-Size: 1674
Depends: file, libdate-manip-perl, perl:any, libafflib0v5 (>= 3.7.6), libc6 (>= 2.34), libewf2 (>= 20130416), libgcc-s1 (>= 4.2), libstdc++6 (>= 13.1), libtsk19 (>= 4.12.1+dfsg), libvhdi1 (>= 20150110), libvmdk1 (>= 20150516)
Suggests: autopsy, mac-robber
Conflicts: tct
Homepage: https://www.sleuthkit.org/sleuthkit
Priority: optional
Section: admin
Filename: pool/main/s/sleuthkit/sleuthkit_4.12.1+dfsg-0kali5_amd64.deb
Size: 358512
SHA256: c7b3e882afa375307b9f6a19fb29663975358a70c306bc47202f599820cd71cf
SHA1: e8956e5b4cbdc5317f92220f8e987db027fbde08
MD5sum: aa96177c826aa985d403a6eed9b3a507
Description: tools for forensics analysis on volume and filesystem data
The Sleuth Kit, also known as TSK, is a collection of UNIX-based command
line file and volume system forensic analysis tools. The filesystem tools
allow you to examine filesystems of a suspect computer in a non-intrusive
fashion. Because the tools do not rely on the operating system to process the
filesystems, deleted and hidden content is shown.
.
The volume system (media management) tools allow you to examine the layout of
disks and other media. You can also recover deleted files, get information
stored in slack spaces, examine filesystems journal, see partitions layout on
disks or images etc. But is very important clarify that the TSK acts over the
current filesystem only.
.
The Sleuth Kit supports DOS partitions, BSD partitions (disk labels), Mac
partitions, Sun slices (Volume Table of Contents), and GPT disks. With these
tools, you can identify where partitions are located and extract them so that
they can be analyzed with filesystem analysis tools.
.
Currently, TSK supports several filesystems, as NTFS, FAT, exFAT, HFS+, Ext3,
Ext4, UFS and YAFFS2.
.
This package contains the set of command line tools in The Sleuth Kit.
Description-md5:
Original-Maintainer: Debian Security Tools