How To Install sleuthkit on Fedora 34
sleuthkit is The Sleuth Kit (TSK)
Introduction
In this tutorial we learn how to install sleuthkit on Fedora 34.
What is sleuthkit
The Sleuth Kit (TSK) is a collection of UNIX-based command line tools that allow you to investigate a computer. The current focus of the tools is the file and volume systems and TSK supports FAT, Ext2/3, NTFS, UFS, and ISO 9660 file systems
We can use yum or dnf to install sleuthkit on Fedora 34. In this tutorial we discuss both methods but you only need to choose one of method to install sleuthkit.
Install sleuthkit on Fedora 34 Using dnf
Update yum database with dnf using the following command.
sudo dnf makecache --refresh
The output should look something like this:
Fedora 34 - x86_64 20 kB/s | 6.6 kB 00:00
Fedora 34 openh264 (From Cisco) - x86_64 1.4 kB/s | 989 B 00:00
Fedora Modular 34 - x86_64 68 kB/s | 6.5 kB 00:00
Fedora 34 - x86_64 - Updates 3.5 kB/s | 6.2 kB 00:01
Fedora Modular 34 - x86_64 - Updates 17 kB/s | 5.9 kB 00:00
Metadata cache created.
After updating yum database, We can install sleuthkit using dnf by running the following command:
sudo dnf -y install sleuthkit
Install sleuthkit on Fedora 34 Using yum
Update yum database with yum using the following command.
sudo yum makecache --refresh
The output should look something like this:
Fedora 34 - x86_64 20 kB/s | 6.6 kB 00:00
Fedora 34 openh264 (From Cisco) - x86_64 1.4 kB/s | 989 B 00:00
Fedora Modular 34 - x86_64 68 kB/s | 6.5 kB 00:00
Fedora 34 - x86_64 - Updates 3.5 kB/s | 6.2 kB 00:01
Fedora Modular 34 - x86_64 - Updates 17 kB/s | 5.9 kB 00:00
Metadata cache created.
After updating yum database, We can install sleuthkit using yum by running the following command:
sudo yum -y install sleuthkit
How To Uninstall sleuthkit on Fedora 34
To uninstall only the sleuthkit package we can use the following command:
sudo dnf remove sleuthkit
sleuthkit Package Contents on Fedora 34
/usr/bin/blkcalc
/usr/bin/blkcat
/usr/bin/blkls
/usr/bin/blkstat
/usr/bin/ffind
/usr/bin/fiwalk
/usr/bin/fls
/usr/bin/fsstat
/usr/bin/hfind
/usr/bin/icat
/usr/bin/ifind
/usr/bin/ils
/usr/bin/img_cat
/usr/bin/img_stat
/usr/bin/istat
/usr/bin/jcat
/usr/bin/jls
/usr/bin/jpeg_extract
/usr/bin/mactime
/usr/bin/mmcat
/usr/bin/mmls
/usr/bin/mmstat
/usr/bin/pstat
/usr/bin/sigfind
/usr/bin/sorter
/usr/bin/srch_strings
/usr/bin/tsk_comparedir
/usr/bin/tsk_gettimes
/usr/bin/tsk_loaddb
/usr/bin/tsk_recover
/usr/bin/usnjls
/usr/lib/.build-id
/usr/lib/.build-id/02
/usr/lib/.build-id/02/d725deff758cb152661d39c1a96c89d5c01bd9
/usr/lib/.build-id/05
/usr/lib/.build-id/05/d9ef7592284420b3bd2b33950f73b03e945893
/usr/lib/.build-id/19
/usr/lib/.build-id/19/55213f67af0c4bd55567f08f18a3868b44d631
/usr/lib/.build-id/1c
/usr/lib/.build-id/1c/4779b610ef7984b14b36b138860139eb3043b2
/usr/lib/.build-id/27
/usr/lib/.build-id/27/d6b64b0b651431458d81ac11ee81722ff2ab35
/usr/lib/.build-id/28
/usr/lib/.build-id/28/9a804fd812f8fee4c80717fdee1feb425d7e1a
/usr/lib/.build-id/29
/usr/lib/.build-id/29/e6745343ec3fef6242d8cf3b6096fb10957da5
/usr/lib/.build-id/2b
/usr/lib/.build-id/2b/8b65d0a62048542236fdbc505ea33010858d32
/usr/lib/.build-id/31
/usr/lib/.build-id/31/679002b56f63d5c87614e58d0cc00250c869b5
/usr/lib/.build-id/45
/usr/lib/.build-id/45/961276d46a2eeed688e6473f4f12571130ffb4
/usr/lib/.build-id/4a
/usr/lib/.build-id/4a/3ca73227b5bbb5b54ac5e37134a7170bcead34
/usr/lib/.build-id/4f
/usr/lib/.build-id/4f/67f7ba77cb5ed2febe47aee3b4de09d623f33d
/usr/lib/.build-id/5e
/usr/lib/.build-id/5e/ffa74b147b96a73763a6c5486951a2fd297e3f
/usr/lib/.build-id/62
/usr/lib/.build-id/62/55f0ad5d3be026839a859d397a4ba7dca8adc9
/usr/lib/.build-id/76
/usr/lib/.build-id/76/cd9bbbdd2d20b45fc2e142914cd7e5ecd276cb
/usr/lib/.build-id/7a
/usr/lib/.build-id/7a/c7d2eb91b3d8855d8a1ba518593267e5664e4e
/usr/lib/.build-id/80
/usr/lib/.build-id/80/d2845c4584544c657dafae8295692901b0212c
/usr/lib/.build-id/87
/usr/lib/.build-id/87/000cdb10397341957aa57a00381095c3853450
/usr/lib/.build-id/87/359ba129be67bd233ce5425be406a37cea8e46
/usr/lib/.build-id/a2
/usr/lib/.build-id/a2/d3326754b71deb14f5fe87c2facb502796a36a
/usr/lib/.build-id/a4
/usr/lib/.build-id/a4/cb5536068067b4dad4d5d59ebad815f4d58232
/usr/lib/.build-id/a5
/usr/lib/.build-id/a5/8581abc61d3a85210703f33632470065884d45
/usr/lib/.build-id/a7
/usr/lib/.build-id/a7/cbfeddfdf656f6be6671a1b90a8cb191a99242
/usr/lib/.build-id/c1
/usr/lib/.build-id/c1/4055a95c58ce483b6ab01d5c16ca3746e50444
/usr/lib/.build-id/c4
/usr/lib/.build-id/c4/3e8cb3be34b9e5563152a8efb6f36edcff5eff
/usr/lib/.build-id/ed
/usr/lib/.build-id/ed/0e3499452d5e3385adffaa03bd07ec7a7c37d7
/usr/lib/.build-id/f1
/usr/lib/.build-id/f1/25b2d52e6b65663d18617832acdd03a666883d
/usr/lib/.build-id/f5
/usr/lib/.build-id/f5/252270b1fb8cf85eac9add3d775a4f4bc48e5e
/usr/lib/.build-id/f6
/usr/lib/.build-id/f6/b74dc2ff9cf0027302f1e71b688ac063985055
/usr/lib/.build-id/fa
/usr/lib/.build-id/fa/c34a9c61b5222882b3b06d389f9e34318b41d6
/usr/share/doc/sleuthkit
/usr/share/doc/sleuthkit/ChangeLog.txt
/usr/share/doc/sleuthkit/NEWS.txt
/usr/share/licenses/sleuthkit
/usr/share/licenses/sleuthkit/Apache-LICENSE-2.0.txt
/usr/share/licenses/sleuthkit/GNU-COPYING
/usr/share/licenses/sleuthkit/IBM-LICENSE
/usr/share/licenses/sleuthkit/bsd.txt
/usr/share/licenses/sleuthkit/cpl1.0.txt
/usr/share/licenses/sleuthkit/mit.txt
/usr/share/man/man1/blkcalc.1.gz
/usr/share/man/man1/blkcat.1.gz
/usr/share/man/man1/blkls.1.gz
/usr/share/man/man1/blkstat.1.gz
/usr/share/man/man1/ffind.1.gz
/usr/share/man/man1/fls.1.gz
/usr/share/man/man1/fsstat.1.gz
/usr/share/man/man1/hfind.1.gz
/usr/share/man/man1/icat.1.gz
/usr/share/man/man1/ifind.1.gz
/usr/share/man/man1/ils.1.gz
/usr/share/man/man1/img_cat.1.gz
/usr/share/man/man1/img_stat.1.gz
/usr/share/man/man1/istat.1.gz
/usr/share/man/man1/jcat.1.gz
/usr/share/man/man1/jls.1.gz
/usr/share/man/man1/mactime.1.gz
/usr/share/man/man1/mmcat.1.gz
/usr/share/man/man1/mmls.1.gz
/usr/share/man/man1/mmstat.1.gz
/usr/share/man/man1/sigfind.1.gz
/usr/share/man/man1/sorter.1.gz
/usr/share/man/man1/tsk_comparedir.1.gz
/usr/share/man/man1/tsk_gettimes.1.gz
/usr/share/man/man1/tsk_loaddb.1.gz
/usr/share/man/man1/tsk_recover.1.gz
/usr/share/man/man1/usnjls.1.gz
/usr/share/tsk
/usr/share/tsk/sorter
/usr/share/tsk/sorter/default.sort
/usr/share/tsk/sorter/freebsd.sort
/usr/share/tsk/sorter/images.sort
/usr/share/tsk/sorter/linux.sort
/usr/share/tsk/sorter/openbsd.sort
/usr/share/tsk/sorter/solaris.sort
/usr/share/tsk/sorter/windows.sort
References
Summary
In this tutorial we learn how to install sleuthkit on Fedora 34 using yum and dnf.
