Tech riderRev. 20 Sept 2026
The Sleuth Kit
- 1Runs onWindows, Mac, Linux
- 2CostsNot stated by the maker
- 3Evidence sourcesRaw/dd, E01/EnCase, VHD, VMDK, AFF images; NTFS, FAT, ExFAT, APFS, UFS 1/2, EXT2/3/4, HFS, ISO 9660, and YAFFS2 file systems
- 4Mobile forensicsYes
- 5Disk imagingYes
- 6Supported platformsLinux, Mac OS X, Windows, Cygwin, OpenBSD, FreeBSD, Solaris
5 lines stated Written from the maker's own pages: sleuthkit.org
Overview
The Sleuth Kit is ranked #17 of 29 in digital forensics software on Specifiction. It runs on Windows, macOS, Linux.
Compared on digital forensics software
- Evidence sources
- Raw/dd, E01/EnCase, VHD, VMDK, AFF images; NTFS, FAT, ExFAT, APFS, UFS 1/2, EXT2/3/4, HFS, ISO 9660, and YAFFS2 file systemssleuthkit.org
- Mobile forensics
- Yessleuthkit.org
- Disk imaging
- Yessleuthkit.org
- Supported platforms
- Linux, Mac OS X, Windows, Cygwin, OpenBSD, FreeBSD, Solarissleuthkit.org
Best The Sleuth Kit alternatives
See all 20 All accessCh 01 Paraben E3 Forensic Platform Free trialAndroidiOS from $58.25/mo7.7 All accessCh 02 NetworkMiner Free planLinuxMac Free to start7.2 All accessCh 03 Cellebrite Inseyets Free trialWebWindows 7.1 All accessCh 04 Plaso Free planLinuxMac Free to start7.1 All accessCh 05 Volatility 3 Free planLinuxMac Free to start7.0 All accessCh 06 Arkime Free planAPILinux Free to start6.9
Where it ranks on Specifiction
Is The Sleuth Kit yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.