About Sleuth Kit Labs

New Name, Long-Term Team

Sleuth Kit Labs spun out of Basis Tech in October 2023 as its own company with Brian Carrier PhD as the CEO. Brian was with Basis for 18 years leading the digital forensics group and serving as CTO of the company.

The Sleuth Kit Labs engineering team has been together for well over 10 years and continues to support both commercial and open source projects, such as Autopsy.

The company name comes from one of Brian’s original open source digital forensics projects, named The Sleuth Kit. That toolset is still in use in our products (and those of many other commercial tools).

Our Mission

Sleuth Kit Labs is focused on supporting and enabling the people on the front lines of cyber crime. We want to ensure network security teams, law enforcement, and the military can effectively investigate crimes and collect intelligence.

Our main approach is to focus on:

  • Analytics: It’s not enough to just collect lots of data. Investigators need their tools to also reduce the data to the small subset that is relevant to the investigation.
  • Extensibility: No single tool can solve all problems. We build platforms that take in data from multiple sources and allow users to customize the analysis process.
  • Ease of Use: Investigators have lots of responsibilities and it is hard to keep up with all sources of evidence. We want to make the interfaces and data simple to understand.

How We Serve the Community

Investigators need tools and knowledge to do their jobs. Sleuth Kit Labs enables them with:

  • Cyber Triage: Automated investigation platform focused on intrusion investigations.
  • Autopsy: General purpose digital forensics tool that is open source and used by tens of thousands of investigators.
  • Conferences: Basis Tech organized the Open Source Digital Forensics Conference (OSDFCon) and ResponderCon. Those are paused after the spin out, but we plan to start them again.
  • Training: We provide training on a variety of topics, including general investigations and how to use Cyber Triage or Autopsy.
  • Professional Services: Our services team can support your investigators both before and during an investigation. We can run table top exercises and help you analyze data.

Follow Us

To continue to learn about Cyber Triage, you can follow us on:

You can also subscribe the the Cyber RespondIR newsletter or Contact Us.