The Sleuth Kit (TSK) is a library and collection of command line tools that

allow you to investigate disk images. The core functionality of TSK allows
you to analyze volume and file system data. The plug-in framework allows
you to incorporate additional modules to analyze file contents and build
automated systems. The library can be incorporated into larger digital
forensics tools and the command line tools can be directly used to find
evidence.

4 files changed, 113 insertions, 0 deletions

diff --git a/security/sleuthkit/DESCR b/security/sleuthkit/DESCR
new file mode 100644
index 00000000000..7f3f1b86563
--- /dev/null
+++ b/security/sleuthkit/DESCR
@@ -0,0 +1,7 @@
+The Sleuth Kit (TSK) is a library and collection of command line tools that
+allow you to investigate disk images. The core functionality of TSK allows
+you to analyze volume and file system data. The plug-in framework allows
+you to incorporate additional modules to analyze file contents and build
+automated systems. The library can be incorporated into larger digital
+forensics tools and the command line tools can be directly used to find
+evidence.
diff --git a/security/sleuthkit/Makefile b/security/sleuthkit/Makefile
new file mode 100644
index 00000000000..0fb4cfddcd5
--- /dev/null
+++ b/security/sleuthkit/Makefile
@@ -0,0 +1,19 @@
+# $NetBSD: Makefile,v 1.1 2013/10/29 23:33:02 pettai Exp $
+
+DISTNAME=	sleuthkit-3.2.3
+CATEGORIES=	security
+MASTER_SITES=	https://github.com/sleuthkit/sleuthkit/archive/
+
+MAINTAINER=	pettai@NetBSD.org
+HOMEPAGE=	http://www.sleuthkit.org/
+COMMENT=	The Sleuth Kit (TSK)
+LICENSE=	cpl-1.0 AND gnu-gpl-v2
+
+GNU_CONFIGURE=	yes
+USE_LANGUAGES=	c c++
+USE_LIBTOOL=	yes
+USE_TOOLS+=	perl:run
+
+REPLACE_PERL=	tools/timeline/mactime tools/sorter/sorter
+
+.include "../../mk/bsd.pkg.mk"
diff --git a/security/sleuthkit/PLIST b/security/sleuthkit/PLIST
new file mode 100644
index 00000000000..66c24835ef8
--- /dev/null
+++ b/security/sleuthkit/PLIST
@@ -0,0 +1,82 @@
+@comment $NetBSD: PLIST,v 1.1 2013/10/29 23:33:02 pettai Exp $
+bin/blkcalc
+bin/blkcat
+bin/blkls
+bin/blkstat
+bin/ffind
+bin/fls
+bin/fsstat
+bin/hfind
+bin/icat
+bin/ifind
+bin/ils
+bin/img_cat
+bin/img_stat
+bin/istat
+bin/jcat
+bin/jls
+bin/mactime
+bin/mmcat
+bin/mmls
+bin/mmstat
+bin/sigfind
+bin/sorter
+bin/srch_strings
+bin/tsk_comparedir
+bin/tsk_gettimes
+bin/tsk_loaddb
+bin/tsk_recover
+include/tsk3/auto/tsk_auto.h
+include/tsk3/base/tsk_base.h
+include/tsk3/base/tsk_os.h
+include/tsk3/fs/tsk_ext2fs.h
+include/tsk3/fs/tsk_fatfs.h
+include/tsk3/fs/tsk_ffs.h
+include/tsk3/fs/tsk_fs.h
+include/tsk3/fs/tsk_hfs.h
+include/tsk3/fs/tsk_iso9660.h
+include/tsk3/fs/tsk_ntfs.h
+include/tsk3/hashdb/tsk_hashdb.h
+include/tsk3/img/tsk_img.h
+include/tsk3/libtsk.h
+include/tsk3/tsk_incs.h
+include/tsk3/vs/tsk_bsd.h
+include/tsk3/vs/tsk_dos.h
+include/tsk3/vs/tsk_gpt.h
+include/tsk3/vs/tsk_mac.h
+include/tsk3/vs/tsk_sun.h
+include/tsk3/vs/tsk_vs.h
+lib/libtsk3.la
+man/man1/blkcalc.1
+man/man1/blkcat.1
+man/man1/blkls.1
+man/man1/blkstat.1
+man/man1/ffind.1
+man/man1/fls.1
+man/man1/fsstat.1
+man/man1/hfind.1
+man/man1/icat.1
+man/man1/ifind.1
+man/man1/ils.1
+man/man1/img_cat.1
+man/man1/img_stat.1
+man/man1/istat.1
+man/man1/jcat.1
+man/man1/jls.1
+man/man1/mactime.1
+man/man1/mmcat.1
+man/man1/mmls.1
+man/man1/mmstat.1
+man/man1/sigfind.1
+man/man1/sorter.1
+man/man1/tsk_comparedir.1
+man/man1/tsk_gettimes.1
+man/man1/tsk_loaddb.1
+man/man1/tsk_recover.1
+share/tsk3/sorter/default.sort
+share/tsk3/sorter/freebsd.sort
+share/tsk3/sorter/images.sort
+share/tsk3/sorter/linux.sort
+share/tsk3/sorter/openbsd.sort
+share/tsk3/sorter/solaris.sort
+share/tsk3/sorter/windows.sort
diff --git a/security/sleuthkit/distinfo b/security/sleuthkit/distinfo
new file mode 100644
index 00000000000..ce940213bba
--- /dev/null
+++ b/security/sleuthkit/distinfo
@@ -0,0 +1,5 @@
+$NetBSD: distinfo,v 1.1 2013/10/29 23:33:02 pettai Exp $
+
+SHA1 (sleuthkit-3.2.3.tar.gz) = 85d100ffde54f051916a4ea9452563ff85fad4ac
+RMD160 (sleuthkit-3.2.3.tar.gz) = ee9849ff34bd7d1ce90819f22f1e09a71e4d0e8c
+Size (sleuthkit-3.2.3.tar.gz) = 2039699 bytes