Forrest logo
back to the fls tool

fls:tldr:66c0e

fls: Analyze a single partition, providing the timezone of the original system.
$ fls -r -m ${C:} -z ${timezone} ${-dev-loop1p1}
try on your machine

The command "fls" is a forensic command in digital forensics that is used to list out the file and directory information of a file system. Here is the breakdown of the command you provided:

  • "fls": This is the command itself that is used to execute the "fls" tool.
  • "-r": This option is used to recursively list out the files and directories within the specified file system.
  • "-m ${C:}": This option specifies the mount point of the file system you want to examine. In this case, it is set as "${C:}", which suggests that the mount point is on the C: drive.
  • "-z ${timezone}": This option is used to specify the timezone for displaying timestamps. The "${timezone}" suggests a variable is used to determine the timezone.
  • "${-dev-loop1p1}": This is a file or directory within the specified file system that you want to extract the file and directory information from. The "${-dev-loop1p1}" suggests a variable is used to determine the specific file or directory.

In summary, the command is instructing the "fls" tool to recursively list out the file and directory information within the specified file system, which is mounted on the C: drive. It also specifies the timezone to be used for displaying timestamps and includes a variable for extracting file and directory information from a specific file or directory within the file system.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.
back to the fls tool