The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

Forensic Analysis Tool for Btrfs File System.

NBTempoW V. 2.1 is a forensic tool for making timelines from block devices image files (raw, ewf,physicaldrive, etc.). It uses TSK (The Sleuthkit) and it has been developed with Lazarus V. 1.6.2 ( Delphi compatible cross-platform IDE for Rapid Application Development). It runs only in Windows. If the device image file is splitted, you can select just the first chunk.

A fork of The Sleuthkit with XFS filesystem support. See PR https://github.com/sleuthkit/sleuthkit/pull/1476 for more info.

Collection of popular DFIR tools in a lightweight and fast docker image

Forensic Inode Analysis

Recover normal and deleted files from a partition

Linux command line thumbstick file recovery script using SleuthKit

A Bash script that utilizes The Sleuth Kit to recover directories in their entirety

An interactive shell for The Sleuth Kit's fls tool.