PTK forensics is a computer forensic framework for the command line tools in the SleuthKit plus much more software modules. This makes it usable and easy to investigate a system.

PTK forensics offers many features such as multi-user analysis, search and management of complex digital investigation cases. The core component of the software is an efficient Indexing Engine performing different preliminary analysis operations during the import phase of each piece of evidence.

PTK allows simultaneous management of different cases and multi-user profiling. Investigators can work on the same case at the same time. All reports and bookmarks generated by an investigator are saved in a reserved section of the Database.