How to Install and Uninstall sleuthkit Package on Ubuntu 16.04 LTS (Xenial Xerus)

Last updated: April 29,2024

1. Install "sleuthkit" package

This guide covers the steps necessary to install sleuthkit on Ubuntu 16.04 LTS (Xenial Xerus)


    
        
            $
        

        
            
                sudo apt update
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt install
            
                        
                sleuthkit
            
                    
    
    Copied

2. Uninstall "sleuthkit" package

Learn how to uninstall sleuthkit on Ubuntu 16.04 LTS (Xenial Xerus):


    
        
            $
        

        
            
                sudo apt remove
            
                        
                sleuthkit
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt autoclean && sudo apt autoremove
            
                    
    
    Copied

3. Information about the sleuthkit package on Ubuntu 16.04 LTS (Xenial Xerus)

Package: sleuthkit
Priority: optional
Section: universe/admin
Installed-Size: 1091
Maintainer: Ubuntu Developers
Original-Maintainer: Debian Forensics
Architecture: amd64
Version: 4.2.0-3
Depends: libafflib0v5 (>= 3.7.6), libc6 (>= 2.14), libewf2 (>= 20090606), libgcc1 (>= 1:4.1.1), libstdc++6 (>= 5.2), libtsk13 (>= 4.2.0), perl, file, libdate-manip-perl
Suggests: autopsy, mac-robber
Conflicts: tct
Filename: pool/universe/s/sleuthkit/sleuthkit_4.2.0-3_amd64.deb
Size: 243374
MD5sum: af7455e5d0b351c16fdf347f9e8384cc
SHA1: 74b88bfbe17eabdc603cfeed5a619afe90f774ca
SHA256: 41d9be8d4af5e8a1804ac6ad653ebaf23d29ffa7481bf2873ff39193a2ae3a5f
Description-en: tools for forensics analysis on volume and filesystem data
The Sleuth Kit, also known as TSK, is a collection of UNIX-based command
line file and volume system forensic analysis tools. The filesystem tools
allow you to examine filesystems of a suspect computer in a non-intrusive
fashion. Because the tools do not rely on the operating system to process the
filesystems, deleted and hidden content is shown.
.
The volume system (media management) tools allow you to examine the layout of
disks and other media. You can also recover deleted files, get information
stored in slack spaces, examine filesystems journal, see partitions layout on
disks or images etc. But is very important clarify that the TSK acts over the
current filesystem only.
.
The Sleuth Kit supports DOS partitions, BSD partitions (disk labels), Mac
partitions, Sun slices (Volume Table of Contents), and GPT disks. With these
tools, you can identify where partitions are located and extract them so that
they can be analyzed with filesystem analysis tools.
.
Currently, TSK supports several filesystems, as NTFS, FAT, exFAT, HFS+, Ext3,
Ext4, UFS and YAFFS2.
.
This package contains the set of command line tools in The Sleuth Kit.
Description-md5: aca4cf399f20d5cd832f48c7e7f247bd
Homepage: http://www.sleuthkit.org/sleuthkit
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Origin: Ubuntu