tldr-pages/tldr
1
1
Fork 0
mirror of https://github.com/tldr-pages/tldr.git synced 2024-11-12 04:54:52 +03:00
Code Issues Packages Projects Releases Wiki Activity
21580038c4
tldr/pages/common/fls.md
z7y8hsBP 0ac937674d
fls: add page (#3786) 
* fls: add page

Added a (very) basic description of fls

* Update fls.md

Changed imagefile to device in the first example

* Update fls.md

Added Link to the Sleuthkit wiki

* Moved to /pages/common

* Update fls.md

Fixed travis errors.

* Update pages/common/fls.md

Upper to lower case - sorry.

Co-Authored-By: Zlatan Vasović <zlatanvasovic@gmail.com>

* Update pages/common/fls.md

Upper to lower case - thanks and sorry

Co-Authored-By: Zlatan Vasović <zlatanvasovic@gmail.com>

* Update fls.md

Clarified description in the 2nd description

* Update pages/common/fls.md

Upper to lower case - sorry, my native tongue uses way more upper characters

Co-Authored-By: Iván Hernández Cazorla <ivan@ivanhercaz.com>

* Update pages/common/fls.md

Co-Authored-By: Iván Hernández Cazorla <ivan@ivanhercaz.com>

* Update pages/common/fls.md

Co-Authored-By: Iván Hernández Cazorla <ivan@ivanhercaz.com>

* Update pages/common/fls.md

Co-Authored-By: Iván Hernández Cazorla <ivan@ivanhercaz.com>

* Update fls.md

Reworded partition/timezone example

* fls: Example two clarified

Thanks @zdroid @sbrl

* fls: clarified lathes in examples, removed mactime

Thanks @agnivade

* fls: moved -o and -z into two examples

* fls: fixed typo

* fls: minor changes

- fix typo at paths
- apply snake case convention

Co-authored-by: Zlatan Vasović <zlatanvasovic@gmail.com>
Co-authored-by: Iván Hernández Cazorla <ivan@ivanhercaz.com>
Co-authored-by: Agniva De Sarker <agnivade@yahoo.co.in>
2020-02-03 20:07:11 +01:00

541 B
Raw Blame History

fls

List files and directories in an image file or device. More information: https://wiki.sleuthkit.org/index.php?title=Fls.

  • Build a recursive fls list over a device, output paths will start with C:

fls -r -m {{C:}} {{/dev/loop1p1}}

  • Analyse a single partition, providing the sector offset at which the file system starts in the image:

fls -r -m {{C:}} -o {{sector}} {{path/to/image_file}}

  • Analyse a single partition, providing the timezone of the original system:

fls -r -m {{C:}} -z {{timezone}} {{/dev/loop1p1}}