Mactime
-
Forensics Challenge Day Two - Sleuth Kit Deep Dive
Posted on 34 mins
On day two of my forensics challenge, I dive deep into Sleuth Kit’s layered toolset. From volumes to inodes, metadata, deleted files, timelines, and journals — I explore the core forensic workflows and decode a real ext4 image step by step.