How To Install sleuthkit on Rocky Linux 8

In this tutorial we learn how to install sleuthkit on Rocky Linux 8. sleuthkit is The Sleuth Kit (TSK)

Introduction

In this tutorial we learn how to install sleuthkit on Rocky Linux 8.

What is sleuthkit

The Sleuth Kit (TSK) is a collection of UNIX-based command line tools that allow you to investigate a computer. The current focus of the tools is the file and volume systems and TSK supports FAT, Ext2/3, NTFS, UFS, and ISO 9660 file systems

We can use yum or dnf to install sleuthkit on Rocky Linux 8. In this tutorial we discuss both methods but you only need to choose one of method to install sleuthkit.

Install sleuthkit on Rocky Linux 8 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

After updating yum database, We can install sleuthkit using dnf by running the following command:

sudo dnf -y install sleuthkit

Install sleuthkit on Rocky Linux 8 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

After updating yum database, We can install sleuthkit using yum by running the following command:

sudo yum -y install sleuthkit

How To Uninstall sleuthkit on Rocky Linux 8

To uninstall only the sleuthkit package we can use the following command:

sudo dnf remove sleuthkit

sleuthkit Package Contents on Rocky Linux 8

/usr/bin/blkcalc
/usr/bin/blkcat
/usr/bin/blkls
/usr/bin/blkstat
/usr/bin/ffind
/usr/bin/fiwalk
/usr/bin/fls
/usr/bin/fsstat
/usr/bin/hfind
/usr/bin/icat
/usr/bin/ifind
/usr/bin/ils
/usr/bin/img_cat
/usr/bin/img_stat
/usr/bin/istat
/usr/bin/jcat
/usr/bin/jls
/usr/bin/jpeg_extract
/usr/bin/mactime
/usr/bin/mmcat
/usr/bin/mmls
/usr/bin/mmstat
/usr/bin/pstat
/usr/bin/sigfind
/usr/bin/sorter
/usr/bin/srch_strings
/usr/bin/tsk_comparedir
/usr/bin/tsk_gettimes
/usr/bin/tsk_loaddb
/usr/bin/tsk_recover
/usr/bin/usnjls
/usr/lib/.build-id
/usr/lib/.build-id/06
/usr/lib/.build-id/06/3864e3b0aac67a03f3b1c63d171f7a8833663f
/usr/lib/.build-id/11
/usr/lib/.build-id/11/c6b48d9b61bd6843d056ad9a52a31aaf9278f7
/usr/lib/.build-id/21
/usr/lib/.build-id/21/aa6757e7b77234c480538c1f652269515847d1
/usr/lib/.build-id/38
/usr/lib/.build-id/38/4c21407708d3dd4d6da1a9a79831602a6da01b
/usr/lib/.build-id/42
/usr/lib/.build-id/42/8dafbe52b1d80d010ffdb535e27c9efbc2b56a
/usr/lib/.build-id/44
/usr/lib/.build-id/44/6e945fb3319390a1ecbb94d637c18cd23476a3
/usr/lib/.build-id/53
/usr/lib/.build-id/53/bd0af4a6553977cae9af9d0414e156a6583552
/usr/lib/.build-id/57
/usr/lib/.build-id/57/5951feae1cfe9640099298c97a5200b19f067f
/usr/lib/.build-id/5f
/usr/lib/.build-id/5f/471e3aa3f114629d71fd54f5bb39d97dd8ed4a
/usr/lib/.build-id/64
/usr/lib/.build-id/64/91928e2405ce6162f6cd66e58444aef599ab5a
/usr/lib/.build-id/7c
/usr/lib/.build-id/7c/7777cbf9c19bc1a61a2912638f6e57e79fa66a
/usr/lib/.build-id/8c
/usr/lib/.build-id/8c/342761b16b993be33028bc0acf83355e6277b5
/usr/lib/.build-id/8d
/usr/lib/.build-id/8d/dca2efeb142527cf196a90cfa1284cb505abe4
/usr/lib/.build-id/8e
/usr/lib/.build-id/8e/1a3d8b8dd02c4f1bfc8ad9ba34f588cf781f77
/usr/lib/.build-id/92
/usr/lib/.build-id/92/bdb3d39494d0eca3c545255c5b7129a10f94c7
/usr/lib/.build-id/93
/usr/lib/.build-id/93/f21b81706c84a3d08668163683f95627ca8636
/usr/lib/.build-id/9a
/usr/lib/.build-id/9a/da0398e8cb2409ccbedb4f565018286646b773
/usr/lib/.build-id/9c
/usr/lib/.build-id/9c/1671b6792072c831ad10301dd25731c864cf63
/usr/lib/.build-id/a4
/usr/lib/.build-id/a4/dd854dc144ed923e571fb7dcdb5c3a1a0cb999
/usr/lib/.build-id/a9
/usr/lib/.build-id/a9/29163555403c52817bf92e77e486ec7c0a8678
/usr/lib/.build-id/ae
/usr/lib/.build-id/ae/8c968cbef9f0948cc2e2fdc3e43f528496faf9
/usr/lib/.build-id/b4
/usr/lib/.build-id/b4/19ae11df3e938cfb1369f613c024e3d17f06ec
/usr/lib/.build-id/cb
/usr/lib/.build-id/cb/2a46aef8d45fec9a6f5d71cdb03c0722a8d1e9
/usr/lib/.build-id/cb/d510fd8e9166f1f22245a40b0cde71758a67f2
/usr/lib/.build-id/d2
/usr/lib/.build-id/d2/5fb4908b21141483d7d7857d1e818692be82a9
/usr/lib/.build-id/d5
/usr/lib/.build-id/d5/3c5b54f2584cecdbbd46837c6f68682bebf8a5
/usr/lib/.build-id/d9
/usr/lib/.build-id/d9/732b9027fcf57b2898c383ed6fe3412ae34f2b
/usr/lib/.build-id/d9/fb8bb0e371ba28fc8597c21687517dcf9c4498
/usr/lib/.build-id/ea
/usr/lib/.build-id/ea/cc563c8895d85d530530501a36c87d5f2822a0
/usr/lib/.build-id/fe
/usr/lib/.build-id/fe/63695ad10cf9e646483a115999ba8b43213661
/usr/share/doc/sleuthkit
/usr/share/doc/sleuthkit/ChangeLog.txt
/usr/share/doc/sleuthkit/NEWS.txt
/usr/share/licenses/sleuthkit
/usr/share/licenses/sleuthkit/GNU-COPYING
/usr/share/licenses/sleuthkit/IBM-LICENSE
/usr/share/licenses/sleuthkit/bsd.txt
/usr/share/licenses/sleuthkit/cpl1.0.txt
/usr/share/licenses/sleuthkit/mit.txt
/usr/share/man/man1/blkcalc.1.gz
/usr/share/man/man1/blkcat.1.gz
/usr/share/man/man1/blkls.1.gz
/usr/share/man/man1/blkstat.1.gz
/usr/share/man/man1/ffind.1.gz
/usr/share/man/man1/fls.1.gz
/usr/share/man/man1/fsstat.1.gz
/usr/share/man/man1/hfind.1.gz
/usr/share/man/man1/icat.1.gz
/usr/share/man/man1/ifind.1.gz
/usr/share/man/man1/ils.1.gz
/usr/share/man/man1/img_cat.1.gz
/usr/share/man/man1/img_stat.1.gz
/usr/share/man/man1/istat.1.gz
/usr/share/man/man1/jcat.1.gz
/usr/share/man/man1/jls.1.gz
/usr/share/man/man1/mactime.1.gz
/usr/share/man/man1/mmcat.1.gz
/usr/share/man/man1/mmls.1.gz
/usr/share/man/man1/mmstat.1.gz
/usr/share/man/man1/sigfind.1.gz
/usr/share/man/man1/sorter.1.gz
/usr/share/man/man1/tsk_comparedir.1.gz
/usr/share/man/man1/tsk_gettimes.1.gz
/usr/share/man/man1/tsk_loaddb.1.gz
/usr/share/man/man1/tsk_recover.1.gz
/usr/share/man/man1/usnjls.1.gz
/usr/share/tsk
/usr/share/tsk/sorter
/usr/share/tsk/sorter/default.sort
/usr/share/tsk/sorter/freebsd.sort
/usr/share/tsk/sorter/images.sort
/usr/share/tsk/sorter/linux.sort
/usr/share/tsk/sorter/openbsd.sort
/usr/share/tsk/sorter/solaris.sort
/usr/share/tsk/sorter/windows.sort

References

Summary

In this tutorial we learn how to install sleuthkit on Rocky Linux 8 using yum and dnf.