Ifind
From SleuthKitWiki
Back to Help Documents
ifind is used to map between blocks and meta data structures and between meta data structures and names. It takes either a block address or file name as input and will search for the meta data structure that is associated with it.