FCAT(1)

📦
version 4.15.0 · 3 versions
, in alpine 3.24, arch rolling, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0

💖 FCAT(1) 💖

okay bestie, this is the General Commands Manual page for FCAT(1), and it's lowkey iconic: fcat opens an image and copies out a file's contents to standard output. No cap. Let's get into it ✨

🌸 NAME 🌸

fcat — output the contents of a file based on its name.

✨ SYNOPSIS ✨

       fcat [-hRsvV] [-f fstype ] [-i imgtype ] [-o imgoffset ] [-b
       dev_sector_size] path_of_file image [images]

🦋 DESCRIPTION 🦋

fcat opens the named image(s) and copies the file at the path path_of_file to standard output. That's the whole main-character move 💅.

🎀 ARGUMENTS 🎀

  • -f fstype — specifies the file system type. Use -f list to list the supported file system types. If not given, autodetection methods are used. So yes, it can vibe-check the type for you ✨.
  • -h — skip over holes in sparse files, so that absolute address information is lost. This option saves space when copying sparse files. Important tradeoff, bestie 🫶.
  • -R — suppress errors if a deleted file is being recovered.
  • -s — include the slack space in the output.
  • -i imgtype — identify the type of image file, such as raw. Use -i list to list the supported types. If not given, autodetection methods are used.
  • -o imgoffset — the sector offset where the file system starts in the image.
  • -b dev_sector_size — the size, in bytes, of the underlying device sectors. If not given, the value in the image format is used (if it exists) or 512-bytes is assumed.
  • -v — enable verbose mode, output to stderr.
  • -V — display version.
  • image [images] — the disk or partition image to read, whose format is given with -i. Multiple image file names can be given if the image is split into multiple segments. If only one image file is given, and its name is the first in a sequence (e.g., as indicated by ending in '.001'), subsequent image segments will be included automatically.
  • path_of_file — path of file to extract the contents of. Surround the path in quotes if there is a space in a file or directory name. Use forward slashes.

🌈 LICENSE 🌈

This software is distributed under the Common Public License.

Send documentation updates to <doc-updates at sleuthkit dot org>.

sign-off, bestie: source General Commands Manual, version/title FCAT(1), date not listed in this copy — mwah 💋✨

📦 where this page comes from