# Install sleuthkit Forensic toolkit. Version 4.15.0 via Homebrew; verified 2026-04-15. ## Install ```sh sudo av install brew:sleuthkit ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install sleuthkit ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install sleuthkit ``` Evidence: MacPorts ports tree: sysutils/sleuthkit/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add sleuthkit ``` Evidence: Alpine Linux edge package indexes: sleuthkit from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install libtsk-dev ``` Evidence: Debian stable package indexes: libtsk-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install sleuthkit ``` Evidence: Fedora Rawhide package metadata: sleuthkit from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#sleuthkit ``` Evidence: nixpkgs package indexes: pkgs/by-name/sl/sleuthkit/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S sleuthkit ``` Evidence: Arch Linux sync databases: sleuthkit from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install libtsk23 ``` Evidence: openSUSE Tumbleweed package metadata: libtsk23 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install main/sleuthkit ``` Evidence: Scoop official bucket manifest trees: bucket/sleuthkit.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id Nvidia.ICAT -e ``` Evidence: Windows Package Manager source index: Nvidia.ICAT from https://cdn.winget.microsoft.com/cache/source.msix ## Package Facts - **Package key:** brew:sleuthkit - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 4.15.0 - **Source summary:** Forensic toolkit - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** IPL-1.0 AND CPL-1.0 AND GPL-2.0-or-later - **Source archive:** - **Last updated:** 2026-04-15T21:33:00Z - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - blkcalc (cli) - blkcat (cli) - blkls (cli) - blkstat (cli) - fcat (cli) - fiwalk (cli) - fls (cli) - fsstat (cli) - hfind (cli) - icat (cli) - ifind (cli) - ils (cli) - img_cat (cli) - img_stat (cli) - istat (cli) - jcat (cli) - jls (cli) - jpeg_extract (cli) - mactime (cli) - mmcat (cli) - mmls (cli) - mmstat (cli) - pstat (cli) - sigfind (cli) - sorter (cli) - srch_strings (cli) - tsk_comparedir (cli) - tsk_gettimes (cli) - tsk_imageinfo (cli) - tsk_loaddb (cli) - tsk_recover (cli) - usnjls (cli) - blkcalc (alias) - blkcat (alias) - blkls (alias) - blkstat (alias) - fcat (alias) - fiwalk (alias) - fls (alias) - fsstat (alias) - hfind (alias) - icat (alias) - ifind (alias) - ils (alias) - img_cat (alias) - img_stat (alias) - istat (alias) - jcat (alias) - jls (alias) - jpeg_extract (alias) - mactime (alias) - mmcat (alias) - mmls (alias) - mmstat (alias) - pstat (alias) - sigfind (alias) - sorter (alias) - srch_strings (alias) - tsk_comparedir (alias) - tsk_gettimes (alias) - tsk_imageinfo (alias) - tsk_loaddb (alias) - tsk_recover (alias) - usnjls (alias) ## Dependencies - afflib - libewf - libpq - openjdk - openssl@3 - sqlite ## Build Dependencies - ant ## Install Behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-06-10 - Package-manager version: 4.15.0 - Package-manager updated: 2026-04-15 - Local data status: ok - Upstream repository: https://github.com/sleuthkit/sleuthkit - info: No cached GitHub release or tag data was available. ## セキュリティノート broad file, network, media, or database tool signal. - **Geiger risk:** blue / medium - broad file, network, media, or database tool signal ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** sleuthkit - **Version Scheme:** 0 - **Revision:** 0 - **Conflicts With:** ffind - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - libtsk-dev - 4.12.1+dfsg-3: normalized package name match | Debian stable package indexes: libtsk-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | library for forensics analysis (development files) | http://www.sleuthkit.org/sleuthkit - Debian apt - libtsk19t64 - 4.12.1+dfsg-3: normalized package name match | Debian stable package indexes: libtsk19t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | library for forensics analysis on volume and filesystem data | http://www.sleuthkit.org/sleuthkit - Debian apt - sleuthkit - 4.12.1+dfsg-3: normalized package name match | Debian stable package indexes: sleuthkit from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | tools for forensics analysis on volume and filesystem data | http://www.sleuthkit.org/sleuthkit - Nix - sleuthkit: normalized package name match | nixpkgs package indexes: pkgs/by-name/sl/sleuthkit/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - libtsk-dev - 4.12.1+dfsg-1.1ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: libtsk-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | library for forensics analysis (development files) | http://www.sleuthkit.org/sleuthkit - Ubuntu apt - libtsk19t64 - 4.12.1+dfsg-1.1ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: libtsk19t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | library for forensics analysis on volume and filesystem data | http://www.sleuthkit.org/sleuthkit - Ubuntu apt - sleuthkit - 4.12.1+dfsg-1.1ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: sleuthkit from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | tools for forensics analysis on volume and filesystem data | http://www.sleuthkit.org/sleuthkit - apk - sleuthkit - 4.15.0-r0: normalized package name match | Alpine Linux edge package indexes: sleuthkit from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | File system and media management forensic analysis tools | http://www.sleuthkit.org/sleuthkit - apk - sleuthkit-dev - 4.15.0-r0: normalized package name match | Alpine Linux edge package indexes: sleuthkit-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | File system and media management forensic analysis tools (development files) | http://www.sleuthkit.org/sleuthkit - apk - sleuthkit-doc - 4.15.0-r0: normalized package name match | Alpine Linux edge package indexes: sleuthkit-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | File system and media management forensic analysis tools (documentation) | http://www.sleuthkit.org/sleuthkit - apk - sleuthkit-libs - 4.15.0-r0: normalized package name match | Alpine Linux edge package indexes: sleuthkit-libs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | File system and media management forensic analysis tools (libraries) | http://www.sleuthkit.org/sleuthkit - apk - sleuthkit-static - 4.15.0-r0: normalized package name match | Alpine Linux edge package indexes: sleuthkit-static from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | File system and media management forensic analysis tools (static library) | http://www.sleuthkit.org/sleuthkit - dnf - sleuthkit - 4.15.0-2.fc45: normalized package name match | Fedora Rawhide package metadata: sleuthkit from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | The Sleuth Kit (TSK) | https://www.sleuthkit.org - dnf - sleuthkit-devel - 4.15.0-2.fc45: normalized package name match | Fedora Rawhide package metadata: sleuthkit-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Development files for sleuthkit | https://www.sleuthkit.org - dnf - sleuthkit-libs - 4.15.0-2.fc45: normalized package name match | Fedora Rawhide package metadata: sleuthkit-libs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Library for sleuthkit | https://www.sleuthkit.org - pacman - sleuthkit - 4.15.0-1: normalized package name match | Arch Linux sync databases: sleuthkit from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | File system and media management forensic analysis tools | https://www.sleuthkit.org/sleuthkit ## Related Links - [Secret-risk packages](https://www.automicvault.com/ja/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/ja/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/ja/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/ja/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [openssl@3](https://www.automicvault.com/ja/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [sqlite](https://www.automicvault.com/ja/pkg/brew/sqlite/) - Runtime dependency declared by Homebrew. - [openjdk](https://www.automicvault.com/ja/pkg/brew/openjdk/) - Runtime dependency declared by Homebrew. - [libpq](https://www.automicvault.com/ja/pkg/brew/libpq/) - Runtime dependency declared by Homebrew. - [afflib](https://www.automicvault.com/ja/pkg/brew/afflib/) - Runtime dependency declared by Homebrew. - [libewf](https://www.automicvault.com/ja/pkg/brew/libewf/) - Runtime dependency declared by Homebrew. - [ant](https://www.automicvault.com/ja/pkg/brew/ant/) - Build dependency declared by Homebrew. - [foremost](https://www.automicvault.com/ja/pkg/brew/foremost/) - Shares av.db curated category or tags: cli, digital-forensics, file-recovery, forensics, security. - [bulk_extractor](https://www.automicvault.com/ja/pkg/brew/bulk-extractor/) - Shares av.db curated category or tags: cli, digital-forensics, disk-analysis, forensics, security. - [regipy](https://www.automicvault.com/ja/pkg/brew/regipy/) - Shares av.db curated category or tags: cli, digital-forensics, forensics, security. - [xmount](https://www.automicvault.com/ja/pkg/brew/xmount/) - Shares av.db curated category or tags: cli, digital-forensics, forensics, security. - [binwalk](https://www.automicvault.com/ja/pkg/brew/binwalk/) - Shares av.db curated category or tags: cli, forensics, security. - [prowler](https://www.automicvault.com/ja/pkg/brew/prowler/) - Shares av.db curated category or tags: cli, incident-response, security. ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph