The Sleuth Kit alternatives
6 tools in the catalogue cover the same ground as The Sleuth Kit and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- Timeline JS3freeOpen-source JavaScript timeline tool by Knight Lab that creates interactive multimedia timelines from Google Sheets or JSON data.
- Exterro FTKpaidCommercial forensic suite used in judicial work, with a free imager for creating court-admissible disk copies without altering the original.
- ICIJ DatasharefreeDocument analysis platform built by the ICIJ for the Panama Papers. Runs locally, indexes large leaked or obtained document sets, performs OCR and extracts named entities so an investigator can search across thousands of files.
- Perma.ccfreemiumHarvard-run permanent archiving service producing citable links that survive link rot.
- BrowserlingfreemiumOpens a site in a disposable remote browser. Lets you view a suspicious page without exposing your own machine or address.
- HunchlypaidBrowser extension silently capturing every visited page into a timestamped, hash-verified case file.
The Sleuth Kit
Documentation / Evidence
Open-source forensic toolkit for disk images and file systems. Recovers deleted files and rebuilds a timeline of activity, with Autopsy as its interface.
RECOMMENDED USE
Recovering deleted files and building a timeline from a disk image
Information
Video tutorials
Learn to use The Sleuth Kit
Suggested workflow
Chain these tools in order for a complete investigation
Similar tools
These tools can also help you
Timeline JS3
Documentation / Evidence CaptureOpen-source JavaScript timeline tool by Knight Lab that creates interactive multimedia timelines from Google Sheets or JSON data.
Auto-Archiver (T)
Documentation / Evidence CapturePython tool by Bellingcat to automatically archive web content (social media posts, videos, images) in a secure and verifiable way. Supports Google Sheets, CSV, and CLI; stores to S3 or Google Drive.
EZR OSINT Sidebar (T)
Documentation / Evidence CaptureChrome extension providing integrated OSINT tools in a browser sidebar; extracts and documents images, emails, IPs, and metadata from web content.
Web Page Saver
Documentation / Evidence CaptureBrowser extension for saving complete webpages as single HTML files for offline access and evidence preservation.
User reviews
Be the first to leave a review