Sodamhan.com

TL;DR

fls

List files and directories in an image file or device. More information: https://wiki.sleuthkit.org/index.php?title=Fls.

  • Build a recursive fls list over a device, output paths will start with C:

fls -r -m C: /dev/loop1p1

  • Analyze a single partition, providing the sector offset at which the filesystem starts in the image:

fls -r -m C: -o sector path/to/image_file

  • Analyze a single partition, providing the timezone of the original system:

fls -r -m C: -z timezone /dev/loop1p1

This document was created using the contents of the tldr project.