| Key | Value |
|---|---|
| MD5 | E06F78231803AD364940D183DE52980A |
| PackageArch | x86_64 |
| PackageDescription | The Sleuth Kit (previously known as TASK) is a collection of UNIX-based command line file system forensic tools that allow an investigator to examine NTFS, FAT, FFS, EXT2FS, EXT3FS and ExFAT file systems of a suspect computer in a non-intrusive fashion. The tools have a layer-based design and can extract data from internal file system structures. Because the tools do not rely on the operating system to process the file systems, deleted and hidden content is shown. When performing a complete analysis of a system, command line tools can become tedious. The Autopsy Forensic Browser is a graphical interface to the tools in The Sleuth Kit, which allows one to more easily conduct an investigation. Autopsy provides case management, image integrity, keyword searching, and other automated operations. |
| PackageMaintainer | daviddavid <daviddavid> |
| PackageName | sleuthkit |
| PackageRelease | 1.1.mga7 |
| PackageVersion | 4.6.6 |
| SHA-1 | 516845ABD16124D2AE98126A1B154A5601FFD490 |
| SHA-256 | 847213ECA9546581B32D096990721A5A88864C6561DEFCA08B7EC9924A8E4433 |
| hashlookup:children-total | 101 |
| hashlookup:trust | 50 |
The searched file hash includes 101 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./usr/bin/blkcalc |
| FileSize | 15472 |
| MD5 | 252831BD79A1045A00643E183BF71DFF |
| SHA-1 | 06D5DAD029088E0659C23067F911E26420359857 |
| SHA-256 | 25893D0B6AF064CC05EFA8D48EB9164D585F0168BA48BCDF4BD0EEA386E379D9 |
| SSDEEP | 192:G+JiBYkw6E3RKj81fYhKc48FuXg5yrXvjDRRr7J8kSiDPy8Q5WVGCo:biBbWWejDbrGkSiDPyc |
| TLSH | T17B62C917DB069677C29C4A7424DB0A3D31B7E4B4B2E38F2F1A1C65350E523449F26F8A |
| Key | Value |
|---|---|
| FileName | ./usr/bin/mmcat |
| FileSize | 15504 |
| MD5 | 12B6C956DC7CF333545EA4A423E83C48 |
| SHA-1 | 08D353FCAF3E58AE1141431A422A4AF96B8D6E2B |
| SHA-256 | D5026EFDF5A4CA3598BD89AC5D911F6EF03B76F5A97964F8597247C8332EA0B7 |
| SSDEEP | 192:G+reAD/wGQBn757ENRKj8DqfYhKc48FuXg5ycVuHwzhqjcObDdxTkrqoTt+Hp6Dx:8i/wGQ5754NN5qY6I7TtvZ |
| TLSH | T19462A8C7A705863BC67C4A7005FB1974317BD470F6E18F3B1D5862361E827988F2B69A |
| Key | Value |
|---|---|
| CRC32 | EDE2A25C |
| FileName | usr/share/licenses/sleuthkit/IBM-LICENSE |
| FileSize | 11954 |
| MD5 | 59F236B2177829954041B10E30E306D2 |
| OpSystemCode | 362 |
| ProductCode | 10153 |
| RDS:package_id | 310361 |
| SHA-1 | 0A22CBB9E9C0509F99EB8DBBC027BD1920A7C858 |
| SHA-256 | C44DDAB37556DEC46DB7D443004B3479B298EF0518938C1449794292F2FD7765 |
| SSDEEP | 192:7+m23s6Eq5CKxxnLhaBSwGfsHnSAFMNu5DK09Btw:79R4r7LhaBSw8428W8Q |
| SpecialCode | |
| TLSH | T1A23263B3730C23B259C302668B975ED1E21AE91E3279116634AC915D3B9AE34C37F768 |
| db | nsrl_legacy |
| insert-timestamp | 1727023974.8422046 |
| nsrl-sha256 | rds241-sha256.zip |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/bin/ffind |
| FileSize | 15480 |
| MD5 | AE75D115997B2619805AE5DFD2161CEE |
| SHA-1 | 0B28D4BF83046C55A07B47029A521147E85749CC |
| SHA-256 | B457BB903A88ED6F752CB2703E5D87BFC6860525C3DB2E12382C9124BD733EA9 |
| SSDEEP | 192:G+YbSayywUEmRKj81fYhKc48FuXg5yrXxNxcRqn8Q7XhfQCU8o:gSxyC3kNxcZQBQCU |
| TLSH | T12C62B883E706CA7BC29D42745497023462BBD4B8D2BA8B2F195C73741F52B445E2BB8F |
| Key | Value |
|---|---|
| FileName | ./usr/lib/.build-id/83/650c871f82bd9dc107b569f2a6e2c5527cbbcf |
| FileSize | 26 |
| MD5 | CE9285F534CD785C8EC2E6654CA842E5 |
| SHA-1 | 0E4AC7732378F2599AFEE34D536A35E5A65B2C0E |
| SHA-256 | 52480A96AAC7BC016E318084E8F7D46EFB3A6D33628C7B1F94FA39E29AB1F5F7 |
| SSDEEP | 3:gCDNkPJWn:XGPY |
| TLSH |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man1/blkcalc.1.xz |
| FileSize | 1184 |
| MD5 | 2E5DD1F96B2D8DEFFEDA6B49FB253DBF |
| SHA-1 | 0F5C50267472180CE574F0693D617B4E5D169B19 |
| SHA-256 | E6FF0454F00F470583C13A1E638BA0BC9E3AAC48CB63681D7896261D678C5B27 |
| SSDEEP | 24:DWrRPdv3HoB63c7kXVUrsz6xLbqsfs+c9gp9xdWdi:DWrRN4B6sAXvGLjlHX |
| TLSH | T1E621D7353CB0B0EC1F628045F2495169BF30B010610914AA6EE5F898E25ACEA983A8AE |
| Key | Value |
|---|---|
| FileName | ./usr/lib/.build-id/5a/c37c9a877725354b4fb45d1b5420943d5c2b5f |
| FileSize | 25 |
| MD5 | C2ADE0DE5EDEF67AD14F66668DDBAE0D |
| SHA-1 | 14FC741E8CE8914A71353648995C630E65DD8707 |
| SHA-256 | 29C9D74BEB411BB118513FC0ACAA10A08CD62AA6FF5356DB1A3C9EACE2AF6745 |
| SSDEEP | 3:gCDNnY:XpY |
| TLSH |
| Key | Value |
|---|---|
| CRC32 | D08FC5A8 |
| FileName | ./usr/share/tsk/sorter/linux.sort |
| FileSize | 1354 |
| MD5 | EED0140F5868B1BB38A94A65C216554D |
| OpSystemCode | 362 |
| ProductCode | 187172 |
| RDS:package_id | 222721 |
| SHA-1 | 17F4A8F996A0EEA5CBBB8EA32587EF1E472A52D3 |
| SHA-256 | 5A8F178EF1FAA2EC850B78C737C4702A3165B54EE226A221621FC8DBABE97076 |
| SHA-512 | BDB1EDE8DDBB4EBD46D5CDD60BE4413117A807C8D5BE84F9EF899F7757A753AF204390D26290C75302CF3177A1B5738FCDE3CD47702650072EF4B030A54D471D |
| SSDEEP | 12:L8gXCouYXNDGk95BKRkz1qJ7GkmcJ99CErPKPCtxgDvDemKDBgGksRZhDTo4RT4I:RPGOBEo11E79HrPeqxgXeJBDzZJLVz |
| SpecialCode | |
| TLSH | T18521443DAA3EA3A55757853059C770CC2789F2763C67988170EECC28B194DACE10E69A |
| db | nsrl_modern_rds |
| insert-timestamp | 1727098745.0619192 |
| mimetype | text/plain |
| source | snap:1jpaHwMu3A1dzSSPwEuJy7u7Y3cd4Y4m_5 |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| CRC32 | D1430703 |
| FileName | usr/share/licenses/sleuthkit/GNUv2-COPYING |
| FileSize | 18112 |
| MD5 | 1C4C603B49B20CA5F2A761096E8DAF2E |
| OpSystemCode | 362 |
| ProductCode | 13794 |
| SHA-1 | 1CE079E0F8DC769E01E53AE8D7A44FC751354CF1 |
| SHA-256 | 92C4E3BA17E2167E0E7B7779E5C975C75684080C006A80F9D76055C7FF6FA67A |
| SSDEEP | 384:WEUwi5rRL67cyV12rPd34FomzM2/R+qWo7mSUd:W7FCExGFzeqf7mSUd |
| SpecialCode | |
| TLSH | T1C982A42E7B4503F205C202A16A4F68DFE32AD479723E11553859C1AD236FE35C3BFA99 |
| db | nsrl_modern_rds |
| insert-timestamp | 1646989388.9967375 |
| source | NSRL |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/lib/.build-id/55/6c6f6e16a7894decafa3b79e38a63de46b3f50 |
| FileSize | 32 |
| MD5 | EDAED86CB44D12E12FC7F3AFFF8F3659 |
| SHA-1 | 1D82B11629B0EA358CD9D72C5F40AAB9B2D32405 |
| SHA-256 | F64CC0338D667D167828FD84B5D6A345DE0F46CFD8CAC3C8AB35231C4FA0A4E7 |
| SSDEEP | 3:gCDN5+on:XPVn |
| TLSH |