mirror of https://github.com/CrimsonTome/tldr.git
17 lines
541 B
Markdown
17 lines
541 B
Markdown
|
# fls
|
||
|
|
|
||
|
|
> List files and directories in an image file or device.
|
||
|
|
> More information: <https://wiki.sleuthkit.org/index.php?title=Fls>.
|
||
|
|
|
||
|
|
- Build a recursive fls list over a device, output paths will start with C:
|
||
|
|
|
||
|
|
`fls -r -m {{C:}} {{/dev/loop1p1}}`
|
||
|
|
|
||
|
|
- Analyse a single partition, providing the sector offset at which the file system starts in the image:
|
||
|
|
|
||
|
|
`fls -r -m {{C:}} -o {{sector}} {{path/to/image_file}}`
|
||
|
|
|
||
|
|
- Analyse a single partition, providing the timezone of the original system:
|
||
|
|
|
||
|
|
`fls -r -m {{C:}} -z {{timezone}} {{/dev/loop1p1}}`
|