System Grab Bag

View all TLDR pages from common (or from all pages)

fls

List files and directories in an image file or device. More information: https://wiki.sleuthkit.org/index.php?title=Fls.
  • Build a recursive fls list over a device, output paths will start with C:
    fls -r -m {{C:}} {{/dev/loop1p1}}
  • Analyze a single partition, providing the sector offset at which the filesystem starts in the image:
    fls -r -m {{C:}} -o {{sector}} {{path/to/image_file}}
  • Analyze a single partition, providing the timezone of the original system:
    fls -r -m {{C:}} -z {{timezone}} {{/dev/loop1p1}}

License and Disclaimer

The content on this page is copyright © 2014—present the tldr-pages team and contributors.
This page is used with permission under Creative Commons Attribution 4.0 International License.

While we do attempt to make sure content is accurate, there isn't a warranty of any kind.