The Sleuth Kit® (TSK) is a library and collection of command linetools that allow you to investigate disk images. The core functionality of TSK allows you to analyze volume and file system data. The librarycan be incorporated into larger digital forensics tools and the command linetools can be directly used to find evidence.