diff --git a/packages/sleuthkit.rb b/packages/sleuthkit.rb
new file mode 100644
index 0000000000000000000000000000000000000000..f71493c201103653560922850bb644df398860e2
--- /dev/null
+++ b/packages/sleuthkit.rb
@@ -0,0 +1,34 @@
+require 'package'
+
+class Sleuthkit < Package
+  description 'The Sleuth Kit庐 (TSK) is a library and collection of command line tools that allow you to investigate disk images.'
+  homepage 'https://www.sleuthkit.org/sleuthkit/'
+  version '4.4.1'
+  source_url 'https://github.com/sleuthkit/sleuthkit/archive/sleuthkit-4.4.1.tar.gz'
+  source_sha256 '91e2f038ff8407cfe38a26d18adc8dd98970e95db73394c188db98975deb23f7'
+
+  depends_on 'autoconf'
+  depends_on 'automake'
+  depends_on 'gawk'
+  depends_on 'libtool'
+  depends_on 'zlibpkg'
+
+  def self.build
+    system './bootstrap'
+    system 'sed -i "s,(sb.st_mode \& S_IFMT) == S_IFDIR,S_ISREG(sb.st_mode)," tsk/img/raw.c'
+    system 'sed -i "s,#define TZNAME _tzname,extern char* tzname[2];\n#define TZNAME tzname," tsk/base/tsk_os.h'
+    system 'sed -i "s,#define TZNAME\ttzname,," tsk/base/tsk_os.h'
+    system 'sed -i "1iextern char* tzname[2];\n#define TZNAME tzname" tsk/fs/fs_name.c'
+    system 'sed -i "1iint optarg[2];\nint optind;" tools/srchtools/srch_strings.c'
+    system 'sed -i "0,/for (; optind < argc; ++optind)/s/for (; optind < argc; ++optind)/for (optind = 0; optind < argc; ++optind)/" tools/srchtools/srch_strings.c'
+    system './configure \
+            --disable-java \
+            --without-afflib \
+            --without-libewf'
+    system "make 'CFLAGS=-std=c99'"
+  end
+
+  def self.install
+    system "make", "DESTDIR=#{CREW_DEST_DIR}", "install"
+  end
+end