# Install sleuthkit with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget

Forensic toolkit. Version 4.15.0 via Homebrew; verified from local package data. Also installable with debian: sudo apt install libtsk-dev.

## Install

```sh
sudo av install brew:sleuthkit
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install sleuthkit
```

  Evidence: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install sleuthkit
```

  Evidence: MacPorts ports tree: sysutils/sleuthkit/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add sleuthkit
```

  Evidence: Alpine Linux edge package indexes: sleuthkit from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install sleuthkit
```

  Evidence: Debian stable package indexes: sleuthkit from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install sleuthkit
```

  Evidence: Fedora Rawhide package metadata: sleuthkit from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#sleuthkit
```

  Evidence: nixpkgs package indexes: pkgs/by-name/sl/sleuthkit/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S sleuthkit
```

  Evidence: Arch Linux sync databases: sleuthkit from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install sleuthkit
```

  Evidence: openSUSE Tumbleweed package metadata: sleuthkit from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

### Windows

- Scoop (92%):

```sh
scoop install main/sleuthkit
```

  Evidence: Scoop official bucket manifest trees: bucket/sleuthkit.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

- winget (92%):

```sh
winget install --id Flint.Fls -e
```

  Evidence: Windows Package Manager source index: Flint.Fls from https://cdn.winget.microsoft.com/cache/source.msix

## Package facts

- **Package key:** brew:sleuthkit
- **Package manager:** Homebrew
- **Version:** 4.15.0
- **Source summary:** Forensic toolkit
- **Homepage:** <https://www.sleuthkit.org/>
- **Repository:** <https://github.com/sleuthkit/sleuthkit>
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- blkcalc (alias)
- blkcat (alias)
- blkls (alias)
- blkstat (alias)
- fcat (alias)
- ffind (alias)
- fiwalk (alias)
- fls (alias)
- fsstat (alias)
- hfind (alias)
- icat (alias)
- ifind (alias)
- ils (alias)
- img_cat (alias)
- img_stat (alias)
- istat (alias)
- jcat (alias)
- jls (alias)
- jpeg_extract (alias)
- mactime (alias)
- mmcat (alias)
- mmls (alias)
- mmstat (alias)
- pstat (alias)
- sigfind (alias)
- sorter (alias)
- srch_strings (alias)
- tsk_comparedir (alias)
- tsk_gettimes (alias)
- tsk_imageinfo (alias)
- tsk_loaddb (alias)
- tsk_recover (alias)
- usnjls (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 4.15.0

## Security Notes

broad file, network, media, or database tool signal.

- **Geiger risk:** blue / medium
- broad file, network, media, or database tool signal

## Other Package-Manager Records

- Debian apt - libtsk-dev - 4.12.1+dfsg-3: normalized package name match | Debian stable package indexes: libtsk-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | library for forensics analysis (development files) | http://www.sleuthkit.org/sleuthkit
- Debian apt - libtsk19t64 - 4.12.1+dfsg-3: normalized package name match | Debian stable package indexes: libtsk19t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | library for forensics analysis on volume and filesystem data | http://www.sleuthkit.org/sleuthkit
- Debian apt - sleuthkit - 4.12.1+dfsg-3: normalized package name match | Debian stable package indexes: sleuthkit from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | tools for forensics analysis on volume and filesystem data | http://www.sleuthkit.org/sleuthkit
- Nix - sleuthkit: normalized package name match | nixpkgs package indexes: pkgs/by-name/sl/sleuthkit/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - libtsk-dev - 4.12.1+dfsg-1.1ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: libtsk-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | library for forensics analysis (development files) | http://www.sleuthkit.org/sleuthkit
- Ubuntu apt - libtsk19t64 - 4.12.1+dfsg-1.1ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: libtsk19t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | library for forensics analysis on volume and filesystem data | http://www.sleuthkit.org/sleuthkit
- Ubuntu apt - sleuthkit - 4.12.1+dfsg-1.1ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: sleuthkit from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | tools for forensics analysis on volume and filesystem data | http://www.sleuthkit.org/sleuthkit
- apk - sleuthkit - 4.15.0-r0: normalized package name match | Alpine Linux edge package indexes: sleuthkit from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | File system and media management forensic analysis tools | http://www.sleuthkit.org/sleuthkit
- apk - sleuthkit-dev - 4.15.0-r0: normalized package name match | Alpine Linux edge package indexes: sleuthkit-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | File system and media management forensic analysis tools (development files) | http://www.sleuthkit.org/sleuthkit
- apk - sleuthkit-doc - 4.15.0-r0: normalized package name match | Alpine Linux edge package indexes: sleuthkit-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | File system and media management forensic analysis tools (documentation) | http://www.sleuthkit.org/sleuthkit
- apk - sleuthkit-libs - 4.15.0-r0: normalized package name match | Alpine Linux edge package indexes: sleuthkit-libs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | File system and media management forensic analysis tools (libraries) | http://www.sleuthkit.org/sleuthkit
- apk - sleuthkit-static - 4.15.0-r0: normalized package name match | Alpine Linux edge package indexes: sleuthkit-static from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | File system and media management forensic analysis tools (static library) | http://www.sleuthkit.org/sleuthkit
- dnf - sleuthkit - 4.15.0-3.fc45: normalized package name match | Fedora Rawhide package metadata: sleuthkit from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | The Sleuth Kit (TSK) | https://www.sleuthkit.org
- dnf - sleuthkit-devel - 4.15.0-3.fc45: normalized package name match | Fedora Rawhide package metadata: sleuthkit-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Development files for sleuthkit | https://www.sleuthkit.org
- dnf - sleuthkit-libs - 4.15.0-3.fc45: normalized package name match | Fedora Rawhide package metadata: sleuthkit-libs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Library for sleuthkit | https://www.sleuthkit.org
- pacman - sleuthkit - 4.15.0-1: normalized package name match | Arch Linux sync databases: sleuthkit from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | File system and media management forensic analysis tools | https://www.sleuthkit.org/sleuthkit


## Combined YAML source

View the package source record on GitHub. [combined/sleuthkit.yml](https://github.com/mxcl/pkgdb/blob/main/combined/sleuthkit.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
