Ifind
From SleuthKitWiki
Back to Help Documents
ifind is used to map between data units and meta data structures and between meta data structures and names. It takes either a data unit address or file name as input and will search for the meta data structure that is associated with it.