fls Command Examples

List files and directories in an image file or device. More information: https://wiki.sleuthkit.org/index.php?title=Fls.

• Build a recursive fls list over a device, output paths will start with C:

fls -r -m {{C:}} {{/dev/loop1p1}}

• Analyze a single partition, providing the sector offset at which the filesystem starts in the image:

fls -r -m {{C:}} -o {{sector}} {{path/to/image_file}}

• Analyze a single partition, providing the timezone of the original system:

fls -r -m {{C:}} -z {{timezone}} {{/dev/loop1p1}}