Beginner Introduction to The Sleuth Kit (command line)
Channel: DFIRScience
Date: 2016-12-10

In this video we show how to use The Sleuth Kit from the command line to get information about a forensic disk image and examine a file system. We are using a physical disk image with one FAT32 partition for analysis.

The Sleuth Kit: http://www.sleuthkit.org/sleuthkit/

For a companion book, we recommend 'The Law Enforcement and Forensic Examiner's Introduction to Linux' from linuxleo.com

http://www.linuxleo.com/Docs/linuxintro-LEFE-3.78.pdf

🚀 Full Digital Forensic Courses → https://learn.dfir.science

010001000100011001010011011000110110100101100101011011100110001101100101 
Get more Digital Forensic Science
  👍 Subscribe → https://bit.ly/2Ij9Ojc
  ❤️ YT Member → https://bit.ly/DFIRSciMember
  ❤️ Patreon → https://www.patreon.com/dfirscience

🕸️ Blog → https://DFIR.Science
🤖 Code  → https://github.com/DFIRScience
🐦 Follow → https://www.twitter.com/DFIRScience
📰 DFIR Newsletter → https://bit.ly/DFIRNews
010100110111010101100010011100110110001101110010011010010110001001100101

Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Please link back to the original video. If you want to use this video for commercial purposes, please contact us first. We would love to see what you are doing.