Difference between revisions of "Blkcalc"

From SleuthKitWiki
Jump to: navigation, search
(Added a link to man page.)
m (Dcalc moved to Blkcalc: Changed tool name.)
(No difference)

Revision as of 15:05, 19 October 2008

Back to Help Documents

dcalc is used to map between the output of Dls and the original file system blocks. dls can be used to extract the unallocated blocks from a file system. Once data is found in the unallocated data though, you may want to know where the data was in the original file system. dcalc is used for that.