sleuthkit

Install command:
brew install sleuthkit

Forensic toolkit

https://www.sleuthkit.org/

License: IPL-1.0 AND CPL-1.0 AND GPL-2.0-or-later

Development: Pull requests

Formula JSON API: /api/formula/sleuthkit.json

Formula code: sleuthkit.rb on GitHub

Bottle (binary package) installation support provided for:

macOS on
Apple Silicon
golden gate ✅
tahoe ✅
sequoia ✅
sonoma ✅
macOS on
Intel
sonoma ✅
Linux ARM64 ✅
x86_64 ✅

Current versions:

stable ✅ 4.15.0

Depends on:

afflib 3.7.22 Advanced Forensic Format
libewf 20140817 Library for support of the Expert Witness Compression Format
openjdk 27 Development kit for the Java programming language
sqlite 3.54.0 Command-line interface for SQLite

Depends on when building from source:

ant 1.10.18 Java build tool

Conflicts with: ffind (because both install a `ffind` executable)

Binaries: blkcalc, blkcat, blkls, blkstat, fcat, ffind, fiwalk, fls, fsstat, hfind, icat, ifind, ils, img_cat, img_stat, istat, jcat, jls, jpeg_extract, mactime, mmcat, mmls, mmstat, pstat, sigfind, sorter, srch_strings, tsk_comparedir, tsk_gettimes, tsk_imageinfo, tsk_loaddb, tsk_recover, usnjls

Analytics:

30 days90 days365 days
Installs2781,0854,234
Installs (--HEAD)115
Installs on Request2751,0733,944
Installs on Request (--HEAD)115
Build Errors0