In this video we show how to use The Sleuth Kit from the command line to get information about a forensic disk image and examine a file system. We are using a physical disk image with one FAT32 partition for analysis. The Sleuth Kit: For a companion book, we recommend 'The Law Enforcement and Forensic Examiner's Introduction to Linux' from 🚀 Full Digital Forensic Courses → 010001000100011001010011011000110110100101100101011011100110001101100101 Get more Digital Forensic Science 👍 Subscribe → ❤️ YT Member → ❤️ Patreon → 🕸️ Blog → 🤖 Code → 🐦 Follow → 📰 DFIR Newsletter → 010100110111010101100010011100110110001101110010011010010110001001100101 Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Please link back to the original video. If you want to use this video for commercial purposes, please contact us first. We would love to see what you are doing.











