Forrest logo
back to the fls tool

fls:tldr:3d5f6

fls: Build a recursive fls list over a device, output paths will start with C.
$ fls -r -m ${C:} ${-dev-loop1p1}
try on your machine

The command "fls -r -m ${C:} ${-dev-loop1p1}" is a command used in digital forensics to display the file and directory structure of a file system. Let's break it down:

  • "fls" is a command provided by the Sleuth Kit (TSK) toolset, which is commonly used in digital forensic investigations.
  • "-r" is an option that specifies to recursively list all files and directories within the given file system.
  • "-m" is an option that enables the output to display metadata (file and directory metadata information).
  • "${C:}" is a placeholder representing a file system or disk image on the Windows operating system. In this case, it seems like it refers to the C drive.
  • "${-dev-loop1p1}" is another placeholder representing a file system or disk image on a Linux system. It seems to refer to the first partition (p1) on a device dev-loop1.

Overall, the command is used to recursively list all files and directories in the C drive (on a Windows system) and the dev-loop1p1 partition (on a Linux system) while displaying their metadata.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.
back to the fls tool