table of contents
other versions
- wheezy 3.2.3-2
- wheezy-backports 4.1.3-3~bpo70+1
- jessie 4.1.3-4
- testing 4.4.0-5
- unstable 4.4.0-5
TSK_LOADDB(1) | General Commands Manual | TSK_LOADDB(1) |
NAME¶
tsk_loaddb - populate a SQLite database with metadata from a disk imageSYNOPSIS¶
tsk_loaddb [-vVk] [-i imgtype ] [-b dev_sector_size ] [-i imgtype ] [-d output_dir ] imageDESCRIPTION¶
tsk_loaddb loads disk information from image to a sqlite database. This database can then be used by tools in other languages for analysis. By default, the database is stored in the same directory as the image with ".db" appended to the name.- -d output_dir
- specify a directory to output the database file to (must be an existing directory) if not specified the database file will be created in the same directory as the image file
- -v
- verbose output to stderr
- -V
- Print version
- -k
- Don't create block data table. This table maps each block to the file that allocated it. This option will make this program run faster.
- -i imgtype
- The format of the image file (use '-i list' for supported types)
- -b dev_sector_size
- The size (in bytes) of the device sectors If -i or -b are
not given, autodetection methods are used.