tldr/pages/common/fls.md

17 lines
540 B
Markdown
Raw Permalink Normal View History

2020-02-03 19:07:11 +00:00
# fls
> List files and directories in an image file or device.
> More information: <https://wiki.sleuthkit.org/index.php?title=Fls>.
- Build a recursive fls list over a device, output paths will start with C:
`fls -r -m {{C:}} {{/dev/loop1p1}}`
- Analyse a single partition, providing the sector offset at which the filesystem starts in the image:
2020-02-03 19:07:11 +00:00
`fls -r -m {{C:}} -o {{sector}} {{path/to/image_file}}`
- Analyse a single partition, providing the timezone of the original system:
`fls -r -m {{C:}} -z {{timezone}} {{/dev/loop1p1}}`