tldr/pages/common/fls.md

17 lines
540 B
Markdown

# fls
> List files and directories in an image file or device.
> More information: <https://wiki.sleuthkit.org/index.php?title=Fls>.
- Build a recursive fls list over a device, output paths will start with C:
`fls -r -m {{C:}} {{/dev/loop1p1}}`
- Analyze a single partition, providing the sector offset at which the filesystem starts in the image:
`fls -r -m {{C:}} -o {{sector}} {{path/to/image_file}}`
- Analyze a single partition, providing the timezone of the original system:
`fls -r -m {{C:}} -z {{timezone}} {{/dev/loop1p1}}`