diff --git a/blix.nix b/blix.nix
index c670e4a..9039333 100644
--- a/blix.nix
+++ b/blix.nix
@@ -77,7 +77,7 @@ TE5AAAAIDBUk5IjB3+trnVO6pncivFbOetUL8BPTl3CwAtk4532 xfnw@raven" ];
     testdisk squashfs-tools-ng ddrescue volatility
     stegseek apktool adbfs-rootless ursadb android-udev-rules
     valgrind dos2unix file exiftool foremost pngcheck
-    docker xcd trufflehog
+    docker xcd trufflehog sleuthkit
 
     # exploit
     doona metasploit twa wifite2 burpsuite wpscan wfuzz
diff --git a/manuals/blix-applications.7 b/manuals/blix-applications.7
index 0f91fb7..986298f 100644
--- a/manuals/blix-applications.7
+++ b/manuals/blix-applications.7
@@ -131,6 +131,8 @@ run containers and stuff
 lovely hexdump utility
 .It trufflehog
 search through git histories
+.It sleuthkit
+a collection of digital forensics tools
 .El
 .
 .Ss Exploits