The Sleuth Kit

The Sleuth Kit (TSK) — open-source toolkit for disk and filesystem forensics. CLI tools (mmls, fls, icat) with the Autopsy GUI on top. Standard kit for disk-image analysis.