Hands-On Forensics: Analyzing Disk Images with The Sleuth Kit (TSK) on macOS

As part of my master’s thesis in Privacy, Information and Cybersecurity at Skövde University in Sweden, I’ve been exploring practical forensic analysis techniques using open-source tools. In an upcoming blog post, I’ll walk you through the installation and test analysis of The Sleuth Kit (TSK) on macOS—a powerful command-line toolkit widely used in digital forensics. This tutorial will guide you step-by-step through setting up TSK via Homebrew, then using it to conduct a forensic investigation on a disk image. You’ll learn how to identify partitions with mmls, list files within…