How To Install libtsk13 on Ubuntu 18.04

In this tutorial we learn how to install libtsk13 on Ubuntu 18.04. libtsk13 is library for forensics analysis on volume and filesystem data

Introduction

In this tutorial we learn how to install libtsk13 on Ubuntu 18.04.

What is libtsk13

libtsk13 is:

The Sleuth Kit, also known as TSK, is a collection of UNIX-based command line file and volume system forensic analysis tools. The filesystem tools allow you to examine filesystems of a suspect computer in a non-intrusive fashion. Because the tools do not rely on the operating system to process the filesystems, deleted and hidden content is shown.

The volume system (media management) tools allow you to examine the layout of disks and other media. You can also recover deleted files, get information stored in slack spaces, examine filesystems journal, see partitions layout on disks or images etc. But is very important clarify that the TSK acts over the current filesystem only.

The Sleuth Kit supports DOS partitions, BSD partitions (disk labels), Mac partitions, Sun slices (Volume Table of Contents), and GPT disks. With these tools, you can identify where partitions are located and extract them so that they can be analyzed with filesystem analysis tools.

Currently, TSK supports several filesystems, as NTFS, FAT, exFAT, HFS+, Ext3, Ext4, UFS and YAFFS2.

This package contains the library which can be used to implement all of the functionality of the command line tools into an application that needs to analyze data from a disk image.

There are three methods to install libtsk13 on Ubuntu 18.04. We can use apt-get, apt and aptitude. In the following sections we will describe each method. You can choose one of them.

Install libtsk13 Using apt-get

Update apt database with apt-get using the following command.

sudo apt-get update

After updating apt database, We can install libtsk13 using apt-get by running the following command:

sudo apt-get -y install libtsk13

Install libtsk13 Using apt

Update apt database with apt using the following command.

sudo apt update

After updating apt database, We can install libtsk13 using apt by running the following command:

sudo apt -y install libtsk13

Install libtsk13 Using aptitude

If you want to follow this method, you might need to install aptitude first since aptitude is usually not installed by default on Ubuntu. Update apt database with aptitude using the following command.

sudo aptitude update

After updating apt database, We can install libtsk13 using aptitude by running the following command:

sudo aptitude -y install libtsk13

How To Uninstall libtsk13 on Ubuntu 18.04

To uninstall only the libtsk13 package we can use the following command:

sudo apt-get remove libtsk13

Uninstall libtsk13 And Its Dependencies

To uninstall libtsk13 and its dependencies that are no longer needed by Ubuntu 18.04, we can use the command below:

sudo apt-get -y autoremove libtsk13

Remove libtsk13 Configurations and Data

To remove libtsk13 configuration and data from Ubuntu 18.04 we can use the following command:

sudo apt-get -y purge libtsk13

Remove libtsk13 configuration, data, and all of its dependencies

We can use the following command to remove libtsk13 configurations, data and all of its dependencies, we can use the following command:

sudo apt-get -y autoremove --purge libtsk13

References

Summary

In this tutorial we learn how to install libtsk13 package on Ubuntu 18.04 using different package management tools: apt, apt-get and aptitude.