TLDR Search

Enter a command. For example: pio debug, hashid, git show unmerged branches.

fls

List files and directories in an image file or device. More information: https://wiki.sleuthkit.org/index.php?title=Fls.

• Build a recursive fls list over a device, output paths will start with C:
   
  fls -r -m {{C:}} {{/dev/loop1p1}}
   
• Analyze a single partition, providing the sector offset at which the filesystem starts in the image:
   
  fls -r -m {{C:}} -o {{sector}} {{path/to/image_file}}
   
• Analyze a single partition, providing the timezone of the original system:
   
  fls -r -m {{C:}} -z {{timezone}} {{/dev/loop1p1}}